Questions
The things buyers, security teams and the people being enrolled tend to ask first.
Do my people need a new app?
No. They keep the official app. Enrolling takes one scan, the same step as linking a laptop.
Which apps does Nota work with?
Nota works with a widely used encrypted messenger today, with more on the way. Tell us which apps your people use, and we'll show you where each one stands.
Will they know Nota is there?
Yes, and we think that matters. Nota appears in each person's list of linked devices, and each person has a page showing their own status.
Can someone turn it off?
A person can remove the device at any time. Nota detects that, opens a gap on your dashboard and keeps it on the record.
Can Nota read our messages?
Nota staff are denied access to your archive, any change to that is logged, and capture can't read back what it writes. Attested capture adds a sealed environment no operator can log in to. With a customer-held key, Nota can't read your stored records: your key stays in your own key system, and Nota holds no key that opens them. Capture still handles each message in memory while it archives it, under separate controls. Withdrawing your key makes your records unreadable.
What happens if we turn our key off?
With a KMS key, capture stops and a gap is recorded, and the dashboard shows that capture is paused. Messages sent during a gap may not be captured. With a public key, capture continues but you can't read your records until the key is restored. A key that's destroyed can't be recovered by you or by Nota.
Can we check that nothing was altered?
Yes, within limits. The tool you use to read your archive also checks it against Nota's ledger and signed record. It can't catch everything: for example, the most recent events can be withheld for a period, and it needs a checkpoint you keep to catch a forgery signed with a key you've pinned. The documentation lists the limits.
Does a customer-held key change how supervision works?
Yes. Hosted review is off, because Nota can't read your stored records to search them. Reviews use the decrypted export you make with your key, and Nota doesn't enforce grants or two-approver review on those reads. Customer-held keys are available for keys in AWS KMS, with Standard or Attested capture.
Where is our data stored?
In Nota's secured cloud, encrypted under keys unique to your organization. Your records sit outside your own accounts, so nobody on your side can quietly alter them.
What's captured?
Text messages, edits, deletions, reactions, attachments, disappearing-message timer changes and group messages. See the Trust center for what isn't.
Is Nota certified?
Nota hasn't completed an independent certification yet. Tell us what your program requires and we'll show you how Nota fits and what's on the way.
What does it cost?
Nota is priced per person, per month. See Plans and pricing, and request a demo for a quote.
What happens if we leave?
You get a 30-day window to export your records. After a Nota employee approves disposal, your key is destroyed and the archive becomes permanently unreadable. Records under a retention lock stay until their term ends. If you hold your own key, Nota can't destroy it, and your stored records aren't deleted yet. You can make them unreadable by withdrawing your key.