From the moment we began building Maple, we established a strict architectural boundary: data sovereignty belongs entirely to the user. In a market saturated with cloud-first SaaS platforms that quietly absorb user workspace logs, telemetry, and private document indexes to train distant models, we chose a different path. We engineered Maple to operate as a local-first application where your data is stored inside a sandboxed cryptographic vault on your own device.
When you connect Notion workspaces, local markdown vaults, Slack channels, or audio recordings to Maple, the system generates localized vector indexes and relational maps. These do not sit in the cloud. Instead, they reside in a high-performance SQLite database operating in WAL (Write-Ahead Logging) mode, accompanied by highly optimized binary vector logs on your SSD. The decryption key is managed securely via your operating system’s secure hardware store (Apple Keychain or Windows Credential Manager).
How the Local Purging Mechanics Work
If you choose to delete a workspace, Maple doesn't just mark records as 'archived'. We perform a multi-phase hardware-level cleanup. First, memory buffers holding index caches are forcefully flushed to disk. Second, we execute a randomized binary overwrite of the workspace SQLite records. Third, the SQLite VACUUM command is executed to release the storage blocks back to the OS, ensuring that forensics tools cannot recover the discarded records.
Architecture Comparison
| Architectural Attribute | Cloud SaaS (Notion/Slack) | Hybrid Cloud Sync | Maple Local Vault |
|---|---|---|---|
| Primary Data Location | Remote Server Database | Local + Cloud Mirror | 100% Local Sandbox |
| Cryptographic Control | Server-side decryption | User passphrase | Hardware Enclave Key |
| Deletion Certainty | Soft-delete in cloud (30 days) | Immediate sync deletion | Multi-pass physical overwrite |
| Format Portability | CSV/HTML export (slow wait) | Markdown folders | Instant Verified JSON |
Export Schema & verification
Exporting your workspace results in a standardized JSON file. To prevent data corruption or tampering, Maple embeds a SHA-256 HMAC checksum in the metadata block using your local master key. Below is the structural layout of a config JSON package:
{
"version": "1.4.0",
"exported_at": "2026-05-14T10:14:22Z",
"integrity": {
"algorithm": "SHA-256",
"signature": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
},
"workspace": {
"id": "vault_01j7p8r6",
"name": "Acme Strategy",
"indices": {
"notion_sync": { "enabled": true }
}
}
}