Content encrypted before sync
Tasks, notes, comments, lists, and search data are protected on the client before they reach Worklist servers.
Plan your own day or your team’s roadmap, keep private notes, and share lists only when you choose. Everything is encrypted on your device before sync, so our servers store ciphertext instead of readable plans.
Proof before promises
Tasks, notes, comments, lists, and search data are protected on the client before they reach Worklist servers.
The security architecture explains what Worklist can and cannot see, including the key-management tradeoffs.
Read security architecture
Use hosted cloud for fast rollout, iOS for mobile work, or a licensed Docker image for customer-operated infrastructure.
Review self-hosted
Assign owners, add due dates, discuss updates, create checklists, track recurring work, and audit changes without plaintext server access.
Every feature below is end-to-end encrypted by default. There is no setting to turn it off — encryption is the product.
Owners, priorities, due dates, and progress.
Plan visually, then switch to a focused list whenever it fits the work.
Navigate, search, create, edit, archive, and delete tasks without reaching for the mouse.
Steps for every task, trackable at a glance.
Comments, updates, and clean handoffs.
Automate weekly and monthly routines.
Private notes, synced across devices.
Separate projects, clients, and departments.
Every change logged — and unreadable to us.
Instant results that run in your browser.
Work securely from any device.
Licensed Docker image for teams that need to run Worklist on their own hardware.
Every task, every strategy, every client detail you put in traditional productivity tools is readable by someone else — platform employees, third-party integrations, even AI training pipelines.
When a breach happens (not if, but when), your entire business strategy becomes public. And switching to traditional security tools usually means killing team productivity.
There has to be a better way.
Traditional apps store your data in plain text on their servers. When something goes wrong, all of this is exposed:
Worklist keeps task management familiar while encrypting workspace content before it reaches the server. You and your team can plan, assign, comment, search, and share lists without giving Worklist plaintext access.
Your work is encrypted before sync.
Share securely in seconds.
Cloud by default, self-hosted when needed.
Create your account and start adding tasks immediately. Everything is automatically encrypted in your browser before leaving your device.
Working solo? Skip this step. When you’re ready, share work lists with secure invitations — people get access to exactly what you share, nothing more, nothing less.
Work together with modern client-side encryption protecting the content your team creates, discusses, and searches.
Use our hosted cloud, the iOS app, or a licensed self-hosted Docker image on your own hardware. Same encryption model, different operating model.
Full-featured task management on any device. Encryption runs in your browser via WebCrypto — no native client required.
Start free trialNative app that keeps every task encrypted on-device, even when your phone is offline.
Run Worklist on your own hardware from a licensed Docker image. Self-hosted is $11.99 per seat per month with a 12-month contract minimum and 5-seat minimum.
Learn about self-hostingWe’ve built Worklist from the ground up to operate with zero knowledge of your data. Every primitive is documented, every assumption is auditable.
Read the full architectureChaCha20-Poly1305 AEAD — the modern cipher trusted by Signal and Google.
ChaCha20-Poly1305We can't access your data — even if subpoenaed.
OPAQUE PAKEClient-side encryption reduces the amount of readable workspace content Worklist processes.
GDPR-alignedWorkspace content is not analyzed, sold, or used for advertising.
No content scanningEven if our database is breached —
Your data remains encrypted chunks of gibberish.
Even if we're served a warrant —
We have no readable data to provide to authorities.
Even if an employee goes rogue —
They can't decrypt your information without your keys.
Even if you forget your password —
A saved backup key lets you reset your password and keep access.
From a private personal workspace to a whole organization, Worklist wraps the same encryption around solo work and shared work.
When roadmap leakage would hurt launches, fundraising, or M&A.
Keep feature plans, launch checklists, and research notes in a workspace your team can use daily without storing readable strategy on Worklist servers.
When client work should not be readable by your SaaS vendor.
Coordinate matters, engagements, and follow-ups with client-side encryption, clear access boundaries, and audit trails for sensitive handoffs.
When sensitive operational data needs fewer plaintext copies.
Use encryption to reduce exposed PHI, client, or account context in hosted cloud or licensed self-hosted deployments, subject to required agreements and controls.
When work crosses devices, vendors, and jurisdictions.
Give distributed teams shared task visibility while keeping workspace content encrypted before sync and private search running in the browser.
Start with a free trial. Then choose the plan that fits your workflow. No hidden tiers, no per-feature paywalls.
Single user · all features included
or $59.00/year (billed yearly)
Per-seat · min. 2 users
or $85.00/seat/year (billed yearly)
Licensed Docker image for teams that need customer-operated infrastructure.
12-month min, 5 seats min
or $143.88/seat/year
Hosted plans include a free trial. Self-hosted is sold on an annual contract.
Still uncertain? Talk to a human.
Whether it’s just you or your whole team, get end-to-end encryption from day one. No credit card required.
Forgot your password? A one-time backup key restores your access — Worklist still can’t read your data.