Security & Infrastructure: How We Protect Your Workspace
Security is not a marketing tab for us. It is the bar a workspace product has to clear before anything else matters. Worknano runs on isolated, encrypted infrastructure on modern public cloud, with the controls teams that care about security actually look for. We publish the details here so your security team does not have to chase us for answers.
Infrastructure and encryption
- Multi-region cloud: Hosted on resilient public-cloud infrastructure across secure data centers in the EU, the USA and APAC. You get solid uptime, and workspace data and AI processing stay in your chosen region.
- Lower-impact operations: Our data-center partners run efficient sites and use renewable energy where they can.
- In transit: TLS 1.2+ on every connection, modern cipher suites, plus HSTS and CAA.
- At rest: AES-256 on databases, file storage, and backups.
- Tenant isolation: Each customer has their own encryption keys. We do not share keys across customers.
Data protection and availability
- Daily encrypted backups with point-in-time recovery, kept for 30 days.
- Disaster recovery tested every quarter. RPO under 1 hour, RTO under 4 hours.
Access and identity
- SSO via SAML 2.0 and OIDC on Pro and above. Google and Microsoft on every plan.
- MFA on every plan. You can require it for any role.
- Fine-grained roles, row-level permissions, and an audit log of privileged actions.
- Just-in-time access for our engineers. Production access needs a two-person review.
How we operate, and what is next
- Annual third-party penetration tests. Executive summaries on request.
- Continuous dependency scanning and a published vulnerability disclosure policy.
- All staff do security training every quarter. We review access every month.
- Controls are built to fit ISO 27001 and SOC 2. Formal audit and certification sit on our growth roadmap.
Reporting an issue
If you think you found a security hole, email [email protected]. We reply within one business day. We do not take legal action against researchers who act in good faith and follow our disclosure policy.