Northpage

Security

What we do with your strategy.

Where it runs

Northpage runs on Cloudflare's network. Pages are served from Cloudflare Workers, close to the reader.

Signing in

Sign-in is handled by WorkOS. Northpage does not store passwords. We keep your name and email so we can show who changed what.

Where your data lives

Pages, versions and comments are stored in Cloudflare D1. Logos and generated PDFs are stored in Cloudflare R2. Every request is scoped to your workspace, and one workspace cannot read another's rows.

How clients reach a page

A published page is reached by a private link, optionally with a passcode. Clients do not have accounts. You can turn a link off at any time. Pages that have not been published are never served.

Humans publish

Claude can edit a draft through a key you create, but a key cannot publish. Only a signed-in person can put a version in front of a client.

Billing

Card details go to Stripe. Northpage never sees or stores a card number.

Not yet

  • Export of everything in a workspace, self-serve Coming
  • Independent security review Coming
  • Two-step sign-in prompt for every member Coming

Tell us about a problem

Write to hello@northpage.app. A person reads it.