Security and privacy

Private by default. Shared on purpose.

Nanabase is built to keep a company's contacts safe, not to watch its people. Here is exactly how it works today.

How we protect contacts

What's in place today.

Your company owns its contacts.

Nanabase stores them only to run your workspace. Export your data or delete your account at any time.

No password to remember

Sign in with Google or with a link sent to your email.

Encrypted contact details

Emails, phone numbers and notes are encrypted with AES-256-GCM before they are stored. The key is protected by Google Cloud KMS.

Private means private

Your private contacts are not visible to your company or its admins.

Reviewed before it's shared

By default, an admin reviews each contact before it appears in the company directory.

Roles decide access

Owner, Admin, Member and Viewer. Each role sees and does only what it needs.

Export or delete

Export your contacts whenever you want. Deleted contacts are removed right away, and you can delete your account at any time.

Time-limited sessions

Sign-in sessions expire and refresh while you use the app.

Your card, your rules

Choose who sees each detail.

Set the details on your card to Public, Connections, Company or Private. Try it here.

Emailmaya@northwind.example
Phone+1 (312) 555-0142
Job titleHead of Partnerships

What we don't claim yet.

We'd rather tell you what isn't ready than let you assume it is.

  • We don't hold SOC 2 or ISO 27001 certification today.
  • Two-factor sign-in is not available yet.
  • Need a security review for your company? Talk to us.
  • Found a vulnerability? Email hello@nanabase.co.

Privacy you can explain to your team.

Private lists stay private. Shared contacts stay with the company.