Zero-Knowledge Encryption for AI

The Paradox

Most AI note apps send your content to their servers in plain text, process it with AI, and store the result. The AI works because it can read everything. Privacy is sacrificed for intelligence.

xNotePadAI takes a different approach: your notes are encrypted with AES-256-GCM in your browser before they ever leave your device. The server only sees ciphertext. So how does AI work?

The Architecture

The key insight: AI processing happens on decrypted content that exists only in your browser's memory or in a secure Cloudflare Workers environment during your active session.

Data Flow

Your Browser (decrypted) → Workers AI (ephemeral) → Response → Your Browser

At rest on server: always encrypted. In transit: TLS. During AI: ephemeral, no storage.

Cloudflare Workers AI processes your decrypted content in a stateless function. No data is retained after the response is generated. No training on your content. No logs of what you wrote.

What "Zero-Knowledge" Actually Means

Zero-knowledge means the server operator (us) cannot read your notes even if we wanted to. The encryption key is derived from your password using PBKDF2 with 600,000 iterations. We never see your password. We never hold the key.

Even with full database access, all we see is encrypted blobs. This is fundamentally different from apps that claim "encryption" but hold the keys server-side.

Confidential Sections

Some content is too sensitive even for ephemeral AI processing. xNotePadAI supports confidential sections — marked regions of a note that are permanently excluded from all AI operations, search indexing, MCP responses, and share links.

If you mark something confidential, it stays confidential. No AI can access it, even with a valid MCP token. This is enforced at the data layer, not the UI layer — it's not a cosmetic toggle.

Comparison with Others

Notion / Evernote

Server stores plain text. Company can read all content. AI processes server-side with full access to everything.

xNotePadAI

Server stores ciphertext. No one can read content without your password. AI processes ephemerally with no retention.

The Trade-Off

Zero-knowledge encryption means we genuinely cannot recover your data if you forget your password. There's no "reset password" for encrypted content. This is the trade-off: real privacy requires real responsibility.

We provide a Recovery Kit feature to help — an encrypted backup package you can store safely. But the fundamental promise remains: your data is yours alone.