Product

Your Workspace, Your Terms: Purge Mechanics and Verified Local JSON Exports

From the moment we began building Maple, we established a strict architectural boundary: data sovereignty belongs entirely to the user. In a market saturated with cloud-first SaaS platforms that quietly absorb user workspace logs, telemetry, and private document indexes to train distant models, we chose a different path. We engineered Maple to operate as a local-first application where your data is stored inside a sandboxed cryptographic vault on your own device.

"We believe privacy isn't just about refusing to sell data; it's about not holding your data in the first place."

When you connect Notion workspaces, local markdown vaults, Slack channels, or audio recordings to Maple, the system generates localized vector indexes and relational maps. These do not sit in the cloud. Instead, they reside in a high-performance SQLite database operating in WAL (Write-Ahead Logging) mode, accompanied by highly optimized binary vector logs on your SSD. The decryption key is managed securely via your operating system’s secure hardware store (Apple Keychain or Windows Credential Manager).

How the Local Purging Mechanics Work

If you choose to delete a workspace, Maple doesn't just mark records as 'archived'. We perform a multi-phase hardware-level cleanup. First, memory buffers holding index caches are forcefully flushed to disk. Second, we execute a randomized binary overwrite of the workspace SQLite records. Third, the SQLite VACUUM command is executed to release the storage blocks back to the OS, ensuring that forensics tools cannot recover the discarded records.

Figure 1: Safe Purge & Memory Flush Pipeline
Trigger Purge User Request Buffer Flush In-Memory Wipe Secure Overwrite Zero-out Sectors OS VACUUM Blocks Released

Architecture Comparison

Architectural Attribute Cloud SaaS (Notion/Slack) Hybrid Cloud Sync Maple Local Vault
Primary Data Location Remote Server Database Local + Cloud Mirror 100% Local Sandbox
Cryptographic Control Server-side decryption User passphrase Hardware Enclave Key
Deletion Certainty Soft-delete in cloud (30 days) Immediate sync deletion Multi-pass physical overwrite
Format Portability CSV/HTML export (slow wait) Markdown folders Instant Verified JSON

Export Schema & verification

Exporting your workspace results in a standardized JSON file. To prevent data corruption or tampering, Maple embeds a SHA-256 HMAC checksum in the metadata block using your local master key. Below is the structural layout of a config JSON package:

{
  "version": "1.4.0",
  "exported_at": "2026-05-14T10:14:22Z",
  "integrity": {
    "algorithm": "SHA-256",
    "signature": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
  },
  "workspace": {
    "id": "vault_01j7p8r6",
    "name": "Acme Strategy",
    "indices": {
      "notion_sync": { "enabled": true }
    }
  }
}