Built for the room where the decision is made.

Isolation by architecture

Most software keeps every customer in one shared database and relies on code to keep them apart. Neldi One doesn't. When your workspace is created, it gets its own PostgreSQL database, and every query the platform makes runs against that database alone.

• Your emails, meetings, decisions and documents live only in your database.
• The central system knows your workspace exists, not what's in it.
• White-label deployments get the same separation, under your own brand and domain.

Encryption

• In transit: every connection uses TLS, and the site enforces HTTPS with HSTS.
• At rest: databases and stored files are encrypted with AES-256.
• Credentials: the connection details for each workspace database are sealed with AES-256-GCM. The key lives in our runtime environment, never in the database, so a copy of the central database on its own opens nothing.

Connected accounts

Gmail, Outlook, calendars and meeting recorders connect through OAuth, the same mechanism you use to sign in with Google. You approve access on Google's or Microsoft's own screen.

• We never see or store your email password.
• Access tokens are held by our managed integration service, not in your workspace data.
• You can revoke access at any time, from Neldi One or directly in your Google or Microsoft account.

AI and your data

Neldi One uses Anthropic's Claude models through Anthropic's commercial API.

• Not used for training: the commercial terms forbid using your inputs and outputs to train models.
• Only what the task needs: each request carries the context for one job, such as a briefing, a summary or a draft, and nothing more.
• Cited: answers link back to the email, meeting or document they came from, so you can check the source.
• Audited: every read and write the AI makes for you goes into your workspace's own audit log.

Who can see what

• Private by default. Nothing is shared until you share it, one item at a time, as View or Possess. Shared items are linked, not copied.
• Entity walls. If you run several companies, outgoing mail is checked so one company's correspondence doesn't reach another's contacts by accident.
• You own the entity. A company can only be added once its domain is verified.
• Our staff. Our operator console handles accounts and billing only. It can't open your emails, meetings or documents.
• Sign-in is handled by Clerk, an established identity provider, with multi-factor authentication available.

Operations

• Hosting: Vercel (application) and Neon (databases), in the United States (AWS US-East).
• Monitoring: errors go to Sentry. Product analytics (PostHog) record which screens get used, never what's on them. Text is masked, and search terms, email addresses and private links are stripped before anything is sent.
• Engineering: TypeScript in strict mode, peer review, automated tests, and isolated database branches for testing against real structure.

Retention and deletion

• Items you delete go to Trash and are purged permanently, including stored files, after 30 days.
• If you close your workspace, we delete its dedicated database in full within 30 days. You can export your data before you go.
• Disconnecting an account stops new syncing immediately.

Subprocessors

The services below process data so that Neldi One can run. Each is bound by its own security and data-protection commitments.

Report a vulnerability

If you believe you've found a security issue, email security@neldione.com. We reply within two business days, keep you posted while we fix it, and won't take action against good-faith research that respects our users' privacy.