Security and privacy
Your team's work, kept to your team
Rodeo is built so people only ever see what they should, from workspace isolation down to a single shared page. Here's how it works.
Workspace isolation
Every request is scoped to your workspace at the data layer. There's no path for one workspace to read or touch another's data: object IDs are always checked against your membership.
Private team spaces
Private spaces are members-only, everywhere. A workspace member who isn't in a private space can't reach its pages through search, references, databases, comments, or the API.
Per-page guest access
Guests are shared into specific pages only. They can't see the rest of the workspace, and removing a guest revokes their access straight away.
Authenticated by default
Every API endpoint requires a valid signed token unless it's explicitly public, like sign-in. No endpoint ships open by omission.
Encrypted in transit
All traffic runs over HTTPS with HTTP Strict Transport Security. Uploads and API calls are encrypted between your device and our servers.
Encrypted at rest
The database and its backups are encrypted at rest by Azure, and files by Cloudflare R2. Tokens for connected tools are encrypted again by the application, and sign-in links and API tokens are stored only as hashes.
Session safety
Short-lived access tokens with rotating, single-use refresh tokens. See and sign out your devices; reusing a stolen refresh token ends that whole session.
Access model
Access, layered the way you'd expect
- 01
Workspace
You're a member of a workspace, or you're not. Non-members get nothing, not even the existence of a page.
- 02
Role
Owners and admins manage the workspace; members collaborate; guests are limited to what's shared with them.
- 03
Space
Inside a workspace, private spaces are visible only to their members, enforced on every read and write path, not just the sidebar.
- 04
Page
Individual pages can be shared with specific guests at view, comment, or edit level, and revoked at any time.
Admin controls
Controls for your IT and security team
Single sign-on
SAML 2.0 or OpenID Connect with your identity provider, with people added on first sign-in at the role you choose.
Require SSO
Verify your domain with a DNS record, then turn off email links, Google and Apple sign-in for addresses on it.
Session rules
Set a maximum session length and an idle timeout, and sign out any member's devices. Revocation takes effect on the next request.
Audit log
Sign-ins, membership, sharing, publishing, tokens and settings changes, filterable and exportable as CSV or JSON.
These controls are rolling out to business workspaces; email hello@rodeo.so to have them turned on for yours. Hosting, sub-processors, backups and incident response are on our Trust page.
Security reviews
Reviewing Rodeo for your organisation?
We'll send our security pack: encryption and key handling, sub-processors and data locations, deletion and backups, our internal policies, and answers to standard security questionnaires.
Bring the team's docs, plans and data into one place.
Free for up to 3 members · no card · import from Notion