Standard Notes vs Bitdefender

Standard Notes is an end-to-end encrypted note-taking app that genuinely cannot read your notes; analytics are self-hosted via Plausible with no IP retention, apps collect zero usage data or location, and the subprocessor list is short and transparent — the main weaknesses are US jurisdiction and AWS hosting, the absence of published security audit reports, a thin policy that lacks GDPR rights language, and email marketing enabled by default.

Bitdefender is a Romanian cybersecurity company — EU member state jurisdiction, GDPR enforced by the Romanian DPA — with ISO 27001 and SOC2 Type 2 certifications, an explicit no-data-selling commitment, an anonymisation-first principle for technical data, and no advertising partner data sharing; the main caveats are that individual data processors are not named in the policy, technical security data can be retained for up to ten years, the website privacy policy explicitly provides no advance notice before changes, and marketing emails run on a legitimate interest basis for five years post-cancellation.