Security

Where your data lives

• The database is Neon (Postgres) in the EU. Neon encrypts data at rest and every connection is encrypted in transit.
• The website and the AI connector run on Vercel in Frankfurt.
• Sign-in is handled by Clerk. Leftoff never sees or stores your password.
• Emails, when they're switched on, are sent through Resend.

Who can see what

• A project is visible only to its members. Private projects only to you.
• This is enforced twice: by the app, and again by row rules inside the database for AI connections, guest links and website actions. Page views rely on the app's check alone for now.
• Owners invite, remove and change roles; editors read and save; viewers only read.
• In a company or university workspace, admins see members, AI rules and the audit file. They don't get to read private projects.
• Leftoff staff don't read your projects.

Secrets and personal details

• API keys, tokens and passwords written in text are hidden before anything is stored, and hidden again whenever an AI reads. This is pattern matching, so it catches common formats, not every secret.
• Business workspaces can also hide personal details (emails, phone numbers) from what AIs read.
• Connector tokens for the sync command are stored only as a hash.

Control over AI apps

• Every read by an AI is logged: which app, which person, which project, how much. The log keeps no copy of what was read. Owners see it under Activity and can download it.
• You can block any AI app from your whole account on Your data, or choose which projects it can use.
• My card is read only by your own AIs. A line an AI adds is marked as not confirmed until you confirm it, and a line that reads like orders to an AI is held for your approval.
• Web apps like Claude and ChatGPT are recognised by where their sign-in returns to, not only by the name they give. Desktop apps return to your own computer, so their name is taken as given.
• Business workspaces set per-project rules for which AI apps may read.
• Anything teammates wrote reaches an AI marked as quoted notes, so a note can't pose as an instruction.
• A save that copies text from a project some members can't see is held until its author shares or discards it. Invisible characters are removed, and image links in notes are turned into plain text.
• No defence against a note steering an AI is complete. These limit the damage; they don't make it impossible.

Guest links and join links

• A guest link opens one project, can be read only, ends by itself after 2 hours, 24 hours or 7 days, and can be turned off in one click.
• A join link lets people join a team project as editors or viewers, never owners. It stops after 10 people or 7 days.

Your rights

• Download everything you have in Leftoff as one zip from Your data.
• Delete your account there too. Private projects are deleted; saves in shared projects stay with the team, shown as by Deleted user.
• Workspaces on Business can set how long saves are kept.

What we haven't done yet

• No SOC 2 or ISO 27001 certification, and no outside penetration test so far.
• No single sign-on (SAML) yet; sign-in is Google or email through Clerk.
• Our Privacy policy and Terms are drafts awaiting legal review.

Report a problem

Found a security issue? Use Feedback at the bottom of any page in the app. Please don't share it publicly until we've fixed it. See also the Privacy policy.