Your prompts and docs are your working knowledge — we treat them that way.
What you create in your account belongs to you, your team, and your company — nobody else. Another customer can't see it, search it, or reach it by guessing: access comes from your membership in a library, and every read is checked against it. The only things that cross accounts are the prebuilt examples we publish (ours, read-only) and a share link you create yourself.
We store and organize your prompts; we never send them to a model. There's no AI service inside AIStorageDepot at all. When you hit “Open in Claude”, your own browser carries the prompt to your own AI account. Your library is never training data — not for us, not for anyone.
Everything travels over HTTPS/TLS and is encrypted at rest. Plain HTTP is redirected before it carries a single byte of your data.
Stored only as bcrypt hashes with a 12+ character policy — and three failed sign-ins lock the account until it's recovered.
Add an authenticator-app code on top of your password — with one-time backup codes if you lose the device. With it on, a stolen password isn't enough.
We keep a SHA-256 hash, never the token — it's shown to you once, and revoking it cuts off access instantly, everywhere it was used.
httpOnly, secure, same-site cookies — and changing or resetting your password signs out every other device on the spot.
A devices list shows every active session — sign any of them out — and we email you when your account signs in from a new device.
Billing runs entirely on Stripe. Your card number goes to Stripe's vault, not our servers or our database.
Roles on every workspace, VPN/IP allowlisting to fence your org onto your network, instant member revocation, and an audit log of every administrative change — roles, invites, membership, and access settings. (Every item also keeps its own full version history, with who changed what.)
Running a formal security or vendor review? We’ll walk you through our architecture, data handling, and sub-processors, and we can sign a DPA. Get in touch — we answer security questions directly.
A library is only useful if it’s still there tomorrow — exactly the way you left it.
Full version history on every item — restore any previous version in one click. And anything you delete waits in the Trash for 30 days, so an overzealous edit or a stray delete is a quick undo, never a disaster.
Optimistic locking catches simultaneous edits and warns instead of clobbering — and you can see who else is in an item while you're there.
On top of that, the whole database is backed up and encrypted automatically — a disaster-recovery safety net for the platform, running quietly so you never have to think about it.
Go over a limit or let a plan lapse and libraries turn read-only with a 90-day grace window and email warnings — nothing vanishes out from under you.
We don't purge accounts for inactivity. Step away for a year — your library is waiting, free plan included.
Export any item as a clean file, or pull your whole library over the API and MCP — your data leaves whenever you want it to.
Found something we should fix? Tell us — security reports go to the top of the pile.