AIStorageDepot
🔒 Security

Your account is safe here

Your prompts and docs are your working knowledge — we treat them that way.

Encrypted everywhere

Everything travels over HTTPS/TLS and is encrypted at rest. Plain HTTP is redirected before it carries a single byte of your data.

Passwords we can't read

Stored only as bcrypt hashes with a 12+ character policy — and three failed sign-ins lock the account until it's recovered.

Two-factor authentication

Add an authenticator-app code on top of your password — with one-time backup codes if you lose the device. Even a stolen password can't get in.

API tokens as hashes

We keep a SHA-256 hash, never the token — it's shown to you once, and revoking it cuts off access instantly, everywhere it was used.

Sessions done right

httpOnly, secure, same-site cookies — and changing or resetting your password signs out every other device on the spot.

You see every sign-in

A devices list shows every active session — sign any of them out — and we email you when your account signs in from a new network.

Payments never touch us

Billing runs entirely on Stripe. Your card number goes to Stripe's vault, not our servers or our database.

Company-grade controls

Roles on every workspace, VPN/IP allowlisting to fence your org onto your network, instant member revocation, and an audit log of every change.

🛟 Reliability

Built to not lose your work

A library is only useful if it’s still there tomorrow — exactly the way you left it.

Every change is undoable

Full version history on every item. Restore any previous version in one click — an overzealous edit is never a disaster.

No silent overwrites

Optimistic locking catches simultaneous edits and warns instead of clobbering — and you can see who else is in an item while you're there.

Backed up automatically

The database is backed up daily with point-in-time restore, encrypted like everything else. Not something you have to remember to do.

Grace, not cliffs

Go over a limit or let a plan lapse and libraries turn read-only with a 30-day grace window and email warnings — nothing vanishes out from under you.

Idle never means deleted

We don't purge accounts for inactivity. Step away for a year — your library is waiting, free plan included.

Never locked in

Export any item as the real file your tools expect, or pull your whole library over the API and MCP — your data leaves whenever you want it to.

Found something we should fix? Tell us — security reports go to the top of the pile.

Ready when you are.

Get started free