Is Reline (reline.so) safe?

The details

• 01Capture happens on your computer. Transcription, AI summaries and storage run in the cloud, hosted in the United States: Convex serves the database and Cloudflare R2 stores recordings and files. Reline does not claim on-device AI, and it does not promise that audio never leaves your device.
• 02Private by default: a workspace role alone grants nothing, so everyone who can open a note or a folder has an explicit grant. Access is set at the workspace, teamspace, folder and note level, and a per-note activity log records shares, edits and access grants on every plan. Enterprise adds a workspace-wide audit log.
• 03Encryption: TLS 1.2+ on every request and encryption at rest for the database and the audio archive. Sign in with Google, Microsoft or email; Enterprise adds single sign-on (on request) and org-wide policy locks such as requiring MFA.
• 04The honest gaps: no SOC 2 report and no HIPAA BAA today, and the Windows installer is not code-signed yet, so Windows may show a SmartScreen warning. Reline shares its security documentation under NDA and signs a DPA on request.
• 05No bot in the call does not remove your duty to tell people you are recording. Tell participants and get their agreement first. To report a vulnerability, email security@reline.so.