Your subsurface data, locked down.
Geotechnical data is sensitive intellectual property. NobeLeap protects it with encryption in transit and at rest, secure sessions, and a workspace that unlocks only after your account is verified.
Access is granted only after account verification and workspace setup.
Controls your clients expect
From encrypted transport and storage to secure sessions and a verification-gated workspace, security is part of how NobeLeap ships, not an add-on.
Approval-gated workspace
The dashboard stays locked until we verify your account and set up your workspace. Until then, uploads are disabled even when you are signed in.
Secure sessions
Sign-in uses HttpOnly cookies with server-side checks on every protected API. Tokens are never stored in browser localStorage.
Encryption in transit
All traffic is encrypted with TLS, with Cloudflare providing DNS and DDoS protection in front of our servers.
Encryption at rest
Your data is stored on Google Cloud infrastructure in North America and encrypted at rest by default.
Isolated project data
Each firm works in its own workspace boundary. Extracted logs, GIS pins, and chat history stay under your account.
Data privacy
Your borehole logs are never used to train shared AI models, and full removal of your data is available on request.
Secrets management
Application secrets are never exposed to client-side code.
Upload safeguards
Uploads are limited to PDF and common image formats, size-capped, and content-checked so renamed executables do not get through.
Access control
Owner approval for every new account, and admin tools to grant or revoke dashboard access at any time.
Ready to evaluate NobeLeap on a real project? Create an account, book a short meeting, and we unlock your secure workspace after verification and setup.