Security at Nottacloud: How We Protect Your Data
At Nottacloud, security isn't an afterthought — it's built into everything we do. Here's a look under the hood at how we keep your files safe.
Encryption Everywhere
All files are encrypted with 256-bit AES encryption both in transit (TLS 1.3) and at rest. This is the same standard used by banks and military organizations. Even if someone physically stole a hard drive from our data center, your files would be unreadable gibberish.
What this means in practice: From the moment your file leaves your device to the moment it lands on our servers, it's wrapped in encryption. And it stays encrypted while it sits there.
European Data Centers, European Laws
All Nottacloud data is stored in Scandinavian data centers. Not "primarily" or "mostly" — all of it. 100%.
This matters because European privacy law (GDPR) is the strongest in the world. Unlike some jurisdictions where companies can be compelled to hand over data with minimal oversight, European law requires proper legal process and gives users real rights over their data.
We don't operate in legal grey zones. Your data is in Scandinavia, governed by Scandinavian law, stored on servers we control.
We Don't Scan Your Files
Let's be direct: we do not scan, analyze, or look at your files. Period.
Some cloud providers scan your photos for "features" or review your documents for "quality improvements." We think that's a fancy way of saying they're looking at your stuff. We don't do that. Your files are yours.
We don't use your data to train AI models. We don't build advertising profiles from your documents. We don't sell metadata about what you store.
No File Scanning for Anything
We know some providers scan files for various purposes, including content moderation. Our approach is different: we provide the storage, you decide what goes in it. We're a filing cabinet, not a librarian.
Renewable Energy
Security isn't just about encryption — it's about sustainability too. Our data centers run on 100% renewable energy. We believe protecting your data and protecting the environment aren't competing priorities.
What We're Building Next
We're working on optional end-to-end encryption (E2EE) for users who want the absolute maximum level of security. With E2EE, even we won't be able to decrypt your files — only you hold the keys.
We're also adding two-factor authentication options beyond SMS, including hardware key support.
Our Promise
We built Nottacloud because we were tired of cloud providers that treated privacy as a marketing bullet point. For us, it's the foundation. Every architectural decision we make starts with the question: "Does this protect the user?"
If it doesn't, we don't build it.
— The Nottacloud Security Team