morinel
DemoBook a demo

Security and transparency

Built so that your data belongs to you, and only you.

Here is exactly how Morinel protects your company: where your data lives, who can read it and which rules we follow.

Ask our security team

  • Zero-access encryption

    Your content is encrypted on your device with keys derived from your credentials. Our servers only ever store encrypted data, so nobody at Morinel can read it, and neither can anyone who asks us to.

    • Mail
    • Drive
    • Notes
    • Vault

  • End-to-end encrypted

    Documents, messages and calls are encrypted between the people taking part. Live editing uses a key per document, shared only with the people who have access.

    • Calendar
    • Chat
    • Meet
    • Docs
    • Sheets
    • Slides

  • Encrypted with your company's own keys

    Some apps have to process data on the server: adding up working hours, timing an SLA, sending a newsletter. That data is encrypted at rest with keys unique to your company, kept apart from every other customer. Enterprise can bring its own keys.

    • Mailing
    • Forms
    • Vids
    • Studio
    • People
    • Shield
    • Desk
    • Assets

  • EU data residency

    Every copy of your data, including backups, stays in data centres inside the European Union.

  • Strict isolation

    Each company gets its own logically or physically separate database. No shared tables between customers.

  • Tamper-proof audit log

    Every admin action and access to your account is recorded, and you can read the log.

  • Encrypted backups

    Backups are encrypted and kept in a second EU country, so a single incident can't take your data.

  • No ads, no training

    We never show ads, sell data or use your content to train models.

  • Leave whenever you want

    Export everything in open formats at any time, at no cost. Delete your account and your data goes with it.

Rules we follow

Morinel is being founded in Spain under the Esquema Nacional de Seguridad (Spain's National Security Framework) and European data protection law. We'll publish each certification here as we obtain it; until then we only say what is true today.

  • GDPREU General Data Protection Regulation

    Compliant

  • LOPDGDDSpanish Data Protection Act

    Compliant

  • ENSSpain's National Security Framework

    Designed to

  • NIS2EU network and information security directive

    Designed to

  • ISO 27001Information security management

    Roadmap

  • ISO 27701Privacy information management

    Roadmap

  • ISO 22301Business continuity

    Roadmap

Report a vulnerability

Found a security issue? Write to security@morinel.com. We answer within two working days and never take action against good-faith research.