Security
What we do with your strategy.
Where it runs
Northpage runs on Cloudflare's network. Pages are served from Cloudflare Workers, close to the reader.
Signing in
Sign-in is handled by WorkOS. Northpage does not store passwords. We keep your name and email so we can show who changed what.
Where your data lives
Pages, versions and comments are stored in Cloudflare D1. Logos and generated PDFs are stored in Cloudflare R2. Every request is scoped to your workspace, and one workspace cannot read another's rows.
How clients reach a page
A published page is reached by a private link, optionally with a passcode. Clients do not have accounts. You can turn a link off at any time. Pages that have not been published are never served.
Humans publish
Claude can edit a draft through a key you create, but a key cannot publish. Only a signed-in person can put a version in front of a client.
Billing
Card details go to Stripe. Northpage never sees or stores a card number.
Not yet
- Export of everything in a workspace, self-serve Coming
- Independent security review Coming
- Two-step sign-in prompt for every member Coming
Tell us about a problem
Write to hello@northpage.app. A person reads it.