Security
Your work stays yours
How ArtiDock keeps your workspace, your files and your boards private, what we ask of you in return, and what to do if something looks wrong.
-
A workspace of your own
Every account gets its own workspace, with its own folder and its own terminal. They run in an isolated Docker container, walled off from everyone else's.
-
Your files, kept private
The documents you upload are stored with your account and travel over encrypted connections. The server checks who owns a file on every request, so other users can't open it.
-
Never used for training
We don't use your documents or your information to train AI models. We don't sell them, and we don't use them for ads.
-
Delete it for good
Anything you give ArtiDock, and anything it makes for you, you can delete whenever you like. It's wiped from our systems for good. No backup copy is kept.
-
Sharing on your terms
A shared board gets a random link nobody can guess. People with it can look but not change anything, and they don't see who made it. Turn the link off and it stops working at once.
-
Tiles in a sandbox
What ArtiDock builds on your board runs in a sandbox of its own. A tile's code can't reach your chats, your files or your sign-in.
-
Website logins through 1Password
When ArtiDock's browser signs in to a website for you, it takes the login from your 1Password at that moment. Your usernames and passwords are never stored in ArtiDock.
-
Protected sign-in
Your password is stored only as an Argon2id hash, never as plain text, or you can sign in with Google. Five wrong passwords in a row lock the account for 15 minutes.
-
Encrypted in transit
ArtiDock is served only over HTTPS, and HSTS tells your browser never to fall back to plain HTTP. A Content Security Policy narrows what a page is allowed to load.
Keep sensitive data out
ArtiDock is built for ideas and the things you make from them. Please don't upload:
- Passwords, usernames or other sign-in details
- API keys, access tokens or private keys
- Payroll, salaries or HR records
- ID numbers, bank details or other personal data about people
- Confidential documents that belong to your company or organisation
We check, you decide
A security agent looks over what comes in and turns down files that seem to hold this kind of data. It catches a lot, but it can't catch everything.
You're responsible for what you share. By uploading a file, you confirm it's yours to share and that it doesn't break anyone's privacy or your organisation's rules.
Found a security problem?
Tell us privately and we'll work on a fix. In your email, include:
- What the problem is and where you found it
- Steps to reproduce it
- What someone could do with it
Please give us time to fix it before telling anyone else, and don't open, change or delete other people's data while you look.
[email protected]Is your content on ArtiDock?
If someone else shared something of yours on ArtiDock without your permission, send us the link and proof that it's yours, such as the original file or where it was first published. We'll look into it and take it down if the claim holds up.
Make a claimCommon questions
Who can see my files and boards?
Other users can't, unless you share a board by link. Every request is checked against the account that owns what it asks for.
Does ArtiDock train AI on my data?
No. To answer a message, its content goes to the AI service that runs the model, only to produce that answer. We don't use your data to train models, and we don't allow the AI services we work with to train on it.
How do I delete my data?
Delete files from Storage, or delete a chat to remove it along with its board. Deleting is permanent and can't be undone. To close your account and delete everything in it, email us.
Do I have to connect 1Password?
No. You only need it if you want ArtiDock's browser to sign in to websites for you.
Is ArtiDock safe for confidential work?
Your workspace is private, but ArtiDock is a place to think and make things, not a vault. Keep passwords, payroll and other confidential records out of it.