Your notes are yours. We built Penlo to keep it that way.
Notebooks hold your most personal thinking. Penlo encrypts every page, stores it in the EU, locks it to your account and never touches your originals. Here is exactly how.
Start free
Built on infrastructure you already trust
Penlo runs on providers that are independently audited to standards like SOC 2, so your notes sit behind the same protection as thousands of larger companies.
Encrypted everywhere
HTTPS for every connection and AES-256 for everything stored: notes, text and PDFs.
Stored in the EU
Your database and files live in the European Union, in Ireland.
Only you can read them
Row-level security, enforced by the database itself, ties every notebook to its owner.
Read only on your cloud
Penlo reads the one folder you choose. It never edits, moves or deletes your files.
How your notes are protected, step by step
From the moment your tablet syncs to the moment you read a page. Pick a step to see it.
You stay in control
No lock-in and no dark patterns. Your notes leave with you whenever you want.
Export anytime
Download any notebook as PDF, Markdown or text, or send it to Notion.
Disconnect in one click
Remove Dropbox, OneDrive, Notion or an AI assistant and its access ends straight away.
Delete everything
Settings › Account › Delete account removes every notebook, file and connection.
Found a security issue? Tell us first.
Penlo is built and run by an independent developer in Wrocław, Poland, so your message reaches the person who wrote the code. Report anything that looks wrong privately and we will get back to you quickly.
For the legal details on what we collect and why, see our privacy policy.
Contact usSecurity questions
The details people ask about most.
Does Penlo use my notes to train AI?
No. Penlo never uses your notes to train any model. To read handwriting, Penlo sends your pages to Google's Gemini models, which return the text. Google may process them outside the EU.
How are my Dropbox, OneDrive and Notion connections protected?
Their access keys are encrypted inside the database with a separate key kept in a secure vault. They are never sent to your browser, and Penlo only asks for the access it needs.
Can anyone else see my notebooks?
Not unless you share one. A view link to a notebook's PDF is made only when you copy a link, email a note to yourself, or send it to Notion, and you can turn any link off.
How are passwords, API keys and payments handled?
Passwords and API keys are stored only as hashes. Payments go through Polar, our merchant of record, so Penlo never sees your card number.
What happens when I delete my account?
Penlo deletes your account, every notebook, the stored PDFs, all transcribed text and your connections. Your original files in Dropbox or OneDrive are not touched.
Can't find what you're looking for? Contact our team