Napkin is now SOC 2 Type II compliant and ISO 27001 certified. We are also GDPR compliant. You can read about our security and data protection practices and request the reports in our Trust Center.
Why we did this
When teams bring their ideas into Napkin, they are placing their trust in us. Protecting their data is a core responsibility that comes with building this product.
That trust shouldn’t depend on taking our word for it. SOC 2 Type II and ISO 27001 are assessed by independent auditors, so you can check how we handle security for yourself.
This was a lot more than paperwork
I’ll be honest: I underestimated this one. Going in, I thought it would mostly be paperwork. It turned out to be a lot more than that.
We made real changes to how Napkin works. We changed how we store user data, limited who can access what, improved our internal processes, and went through extensive security reviews of the vendors we use.
We didn’t treat it as a box to tick. The goal was to build habits that protect your data every day, and to do it properly.
What these standards mean
- SOC 2 Type II: independent auditors test our security controls over a period of time, not just at a single moment.
- ISO 27001: an international standard for managing information security. Certification means an independent body assessed how we manage it.
- GDPR: Europe’s data protection law. We are compliant, and protecting personal data is an ongoing responsibility.
What this means for you
If you are evaluating Napkin for yourself or your team, you don’t have to rely on our claims alone.
- You can request the SOC 2 report, ISO 27001 certificate, and GDPR documents through our Trust Center. They are gated, our team reviews each request, and we’ll respond by the next business day.
- Our help article, Security and privacy at Napkin, explains how we protect your data, how your content is used, and who to contact with questions.
Where we go from here
Compliance isn’t a finish line. Protecting your data is ongoing work, and we’ll keep at it.
Thank you to everyone who helped us get here, and to our team at Napkin for the quiet, behind-the-scenes work. It’s easy to miss, but it matters.
If you’re evaluating Napkin for your organization, tell us what you need through our Enterprise form, and our team will be in touch.