Encryption in transit
Traffic to the app uses TLS. Audio uploads go to object storage via signed URLs.
Security & trust
Practical controls for meeting data
We focus on controls that are real in the product today. We do not advertise certifications or SSO we have not shipped.
Project-level access
Meetings and agent retrieval are scoped to projects and roles (owner, admin, editor, viewer).
Auth for every client
Web sessions and Bearer JWT for mobile/desktop — same permission model across clients.
Credit & usage clarity
Processing and agent usage consume credits. No fake “unlimited” that hides cost.
Hong Kong company
CantoNotes is a product of CantoSub AI / Liminal AI Limited, built for Greater China and bilingual teams.
What we do not claim yet
We are not listing SOC 2, ISO, or SAML SSO as live features. When those ship, they will appear here with evidence.
Questions about data handling or enterprise agreements? Contact us from the app or via your CantoSub account manager.