Äng security at a glance

Last reviewed 2026-10-27

Your boards and files are stored in Stockholm, Sweden, and only members of a board can open it — a rule enforced by the database itself. Only the content an AI feature needs, including automatic image analysis for search, is sent to the provider that runs the model. You choose how strict that is, and by default no provider may train on your content. Every provider and where it is located is listed openly.

Stored and processed in the EU

  • Boards, files and account dataStockholm, Sweden
  • Application serversStockholm, Sweden
  • Off-site copy of stored filesEU
  • Error monitoringFrankfurt, Germany
  • Product analytics, only after consentFrankfurt, Germany
  • Rate limitingIreland
  • Email deliveryIreland (sending)

Can leave the EU

  • AI models, depending on the model or feature you use, including board agent chat and the automatic analysis of your images for search (Google, OpenAI, Anthropic, fal.ai)
  • Google sign-in (Google)
  • Payments (Stripe)
  • In-app feedback (Notion)

Not the full list: every provider is on ang.studio/subprocessors.

How it is protected

  • Encrypted in transit. All traffic uses HTTPS/TLS. HTTP is redirected to HTTPS and the production site serves HSTS, so browsers refuse cleartext connections. Stored files are private and served through short-lived signed links.
  • Only board members. Row-level security in the database lets only active members of a board reach its content, and viewers cannot write.
  • No passwords to steal. Sign-in is Google or an emailed magic link; passwords are never stored. Sessions use short-lived tokens that never appear in the browser URL. In-app administrator access requires two-factor authentication.
  • Locked-down pages. A strict Content Security Policy with a per-request nonce lets only scripts our server sends run. State-changing requests from other sites are rejected before they reach any handler; server-to-server endpoints authenticate with secrets or signatures instead.

You choose how AI handles your content

  • No training (the default). Only models offered on terms that exclude training on your inputs and outputs.
  • Zero Data Retention. Stricter: only models offered with zero data retention. A job that no such provider can run is refused.
  • Standard. The full catalog, including features that call fal.ai directly. Providers may use inputs to improve their models under their own policies.

How we work

  • Security rules, such as authorization on every API route, are enforced in code and checked by automated tests before every release.
  • Dependencies are checked for known vulnerabilities every day, and urgent fixes are prioritized.
  • Data is backed up daily, and restoring from backup has been tested.