Security

Your work stays yours.

How we protect accounts and data.

A

Account protection

Two-step verification with an authenticator app, backup codes or a passkey, new-device alerts and sign-in lockouts.

D

Your data, your account

Files and app data live in your own account and are never sold or used for ads.

C

Private calls

Meetings and huddles run directly between participants, with a waiting room for guests.

S

Sharing controls

Share with people, set view or edit access, add expiry or a password to a link, and revoke any time.

O

Organization policies

Admins can require two-step verification and manage who can share outside the team.

P

Passwords and sessions

Passwords are stored as salted scrypt hashes. Sessions are signed tokens, and repeated failed sign-ins are locked out.

T

Encrypted in transit

Traffic to Nubo uses TLS (HTTPS). Data is hosted by Hetzner in Helsinki, Finland. We do not claim end-to-end or zero-knowledge encryption.

L

Activity records

Security events are recorded so you can see what happened and when.

Report a vulnerability

If you think you found a security issue, write to support@nubo.email and read our Responsible Disclosure Policy. Please do not test against other people's accounts.