A private, installable workspace for an organisation's notes, company-wide notices, and a PIN-locked encrypted vault for the things that must never leak: passwords, keys, board minutes, salary bands. Self-hosted on your own servers. Your data never leaves your walls.
Notes live in WhatsApp threads. Notices get lost in email. Passwords and API keys sit in a shared spreadsheet. It feels free until someone leaves, or a spreadsheet gets forwarded to the wrong person.
Decisions vanish into scroll. When someone leaves, the knowledge leaves with them.
Bank logins, keys and PII sitting in a shared spreadsheet. One forwarded file is a breach.
A policy update buried under forty emails. "I didn't know" costs you compliance.
The Board: instant-capture notes, checklists and tables, autosaved with no "save" button. Pin, colour-code, label, and search across everything.
Encrypted Vault: bank logins, API keys, director PII, board minutes, locked behind a PIN and encrypted with AES-GCM in the browser before anything reaches the server. Even titles are hidden: the list shows only masked entries. Admins can reset a forgotten PIN without ever seeing the contents.
Public Notices: HR or Accounts publish once and it appears on every employee's board immediately. Role-gated publishing, structurally read-only for staff, no "reply-all," no missed memos.
Secure Sheets: a familiar spreadsheet grid for salary bands, vendor rates, or price lists, but the whole sheet is encrypted at rest. Paste from Excel, keep the structure, lose the exposure.
Reminders & Install: in-app reminders with chime and snooze, plus full installable-app behaviour: home-screen icon, own window, works offline on Android, iPhone/iPad, Windows and macOS.
Most organisations tick at least four of these.
Most note apps ask you to trust their cloud. DataNotes flips it: sensitive data is encrypted before it leaves the device, and the whole system runs inside your own walls.
Client-side encryption. Vault content is AES-GCM ciphertext before it ever leaves the browser. The server stores only opaque blobs.
Secrets stay secret, even titles. The whole payload is encrypted; the list view shows only masked previews.
No standing passwords. Passwordless login via one-time codes to corporate email: sessions expire, nothing to phish or reuse.
Admins can recover, never read. A forgotten PIN can be reset by an admin without the key or contents ever being exposed.
On your infrastructure. Self-hosted on your servers, behind your firewall: data residency, solved.
Pilot, department and enterprise engagement tiers are scoped per deployment, self-hosted on your infrastructure or ours, supported by Data's team. Ask for current terms via the CTA below.
Deploying is measured in days, not quarters. It runs alongside what your team already has, and staff pick it up in minutes.
