Notes · Wikis · Docs · Tasks

The knowledge base that lives in your own AWS account.

Luzula combines the backlinks of a personal knowledge base, the notebooks and clipping of a classic notes app, and the block editor and databases of a workspace tool — then deploys as 100% serverless infrastructure into an AWS account you control.

Self-hostable · Privacy-first · Apache-2.0 when public · no trackers on this page

One app, three traditions

Most tools pick one of these lineages and ignore the rest. This one borrows the best ideas from all three, because your notes should not be split across three products with three bills and three data silos.

From Obsidian

A networked notebook for thinking.

  • [[wikilinks]] with autocomplete and link-first navigation
  • Automatic backlinks and an outliner-friendly graph view
  • Plain Markdown storage you can export or diff
  • Daily notes and templates for recurring rituals
  • Keyboard-first quick switcher and command palette

From Evernote

A filing cabinet for everything else.

  • Notebooks (and nested notebooks) for filing and archiving
  • Web clipper that saves the article, not just the URL
  • Attachments on every page — PDFs, images, scans
  • OCR-ready attachment search (optional, your account)
  • Reminders, due dates and a daily digest

From Notion

A structured workspace for teams.

  • Block editor with nested pages and drag-to-reorder
  • Databases with table, board, calendar and gallery views
  • Comments and granular sharing per page
  • Templates for recurring pages and workflows
  • Publish a page publicly when you want to share it

Everything in one workspace

Ten things it does well. No plugins required, no per-feature upsells, no feature that only exists to keep you subscribed.

Markdown + block editor

Write in a block editor with slash commands, or in Markdown with full fidelity. Both views round-trip cleanly.

Backlinks & graph

Every [[wikilink]] creates a backlink. Follow the graph from any page to find the notes you forgot you wrote.

Databases & views

Structure anything: tables, boards, calendars and galleries over one set of properties, filters and sorts.

Full-text search

Search every page, title and attachment name with filters for notebook, tag, date and type. Saved searches keep the useful ones around.

Tasks & reminders

Tasks live in your pages and surface in one global task view with due dates, reminders and a daily digest.

Templates & daily notes

Turn any page into a template. One keystroke for today's daily note, wired into your calendar and backlinks.

Sharing & publishing

Owner, editor, commenter and viewer roles per workspace and per page — or publish a page to a public, crawlable URL.

Offline sync

Offline-first: every change is written locally first and synced when the network comes back, with conflict copies when it matters.

Import & export

Bring in Markdown folders, Obsidian vaults, Evernote ENEX and Notion exports. Leave with Markdown, HTML, JSON or a ZIP of everything.

Web clipper

Clip articles, selections and links from the browser straight into a notebook, through a documented HTTP API you can script yourself.

Runs in your AWS account

Not "hosted for you" — deployed into an AWS account that belongs to your organisation. The whole product is serverless: there are no servers to patch, no clusters to babysit, and nothing runs at all until somebody uses it.

Deployment architecture Browsers and the web clipper connect through AWS WAF and CloudFront to an AWS AppSync GraphQL API backed by Lambda functions, Amazon DynamoDB for content and Amazon S3 for attachments. Amazon Cognito handles sign-in and MFA, and every store is encrypted with customer-managed KMS keys. Your AWS account Browsers, clipper, apps Amazon Cognito sign-in, TOTP MFA AWS WAF + CloudFront TLS 1.2+, HSTS, CSP AWS AppSync GraphQL + Lambda resolvers Amazon DynamoDB PITR, KMS CMK Amazon S3 attachments, versioned
Every environment is a full copy of this stack — dev, stage and prod — behind its own domain and certificate.

100% serverless

Cognito for auth, AppSync for the GraphQL API, DynamoDB for content, Lambda for business logic, S3 for attachments, CloudFront at the edge. Zero servers to manage.

Scales to zero

Nobody using it costs (almost) nothing. A quiet workspace at 3 a.m. has no running compute at all — and wakes instantly on the next request.

Usage-based cost

You pay AWS for requests and storage, not per seat. Small teams typically run for pocket change; you can watch every cent in Cost Explorer.

  • Multi-environment by default. dev, stage and prod stacks from one config, each with its own account, domain and retention policy.
  • CI/CD pipeline account. An optional pipeline account with GitHub OIDC deploys through stages with manual approval before prod.
  • No domain is hard-coded. Hostnames, subdomains and certificates all come from luzula.config.json at deploy time.

Security & compliance: you hold the keys

The security story is not a promise about somebody else's data centre. It is your AWS account, your KMS keys, your CloudTrail trail and your auditors' evidence — with a stack that is built to pass the boring questions.

Controls out of the box

  • TLS 1.2+ everywhere, with HSTS and a strict CSP on every front door
  • AWS WAF in front of CloudFront and the GraphQL API
  • Customer-managed KMS keys — create them, rotate them, revoke them
  • Encryption at rest in DynamoDB, S3, and all log groups
  • S3 versioning and DynamoDB point-in-time recovery
  • AWS Backup with vault lock for ransomware-resistant snapshots

Detection & access

  • CloudTrail, AWS Config, GuardDuty, Security Hub and Macie wired up
  • Cognito TOTP multi-factor auth and threat protection
  • Role-based access: owner, editor, commenter, viewer
  • 7-year audit log of sharing, admin and access events
  • No PHI in logs — enforced logging policy, reviewed per release
  • Session policy with idle and absolute timeouts
SOC 2 ready HIPAA ready BAA friendly You hold the keys

"Ready" means the controls and evidence you need are in place in your account — your auditor certifies your deployment, not ours.

Compared with hosted note apps

The usual trade: lovely product, somebody else's cloud. Here is what changes when the product runs in your own account.

Comparison of this product with hosted note-taking applications
Aspect Luzula Hosted note apps
Your data In your AWS account, under your KMS keys. Export or delete it on your schedule. In the vendor's cloud, under the vendor's keys and retention rules.
Self-hostable Yes — deploy with CDK into dev, stage and prod. Apache-2.0 when public. No. Multi-tenant SaaS is the only deployment model.
Offline Offline-first: edits are local before they sync, with conflict copies. Varies; often read-only caching or none at all.
Price model AWS usage-based — storage and requests, scaling to zero. No per-seat licence. Per-seat subscription, billed whether or not the workspace is busy.
Compliance SOC 2 and HIPAA ready in your account; sign a BAA with yourself, keep the evidence. The vendor's attestations, the vendor's subprocessors, the vendor's BAA.

Placeholder comparison written from common trade-offs — hosted products change quickly, so verify current vendor claims before you rely on them.

Up and running in three steps

Local development needs nothing but Node. Deployment needs one AWS account per environment — and about ten minutes.

  1. 1 Clone and install

    The app runs locally against mock data — no AWS account required.

    git clone <repo-url> luzula
    cd luzula
    npm install
    npm run dev
  2. 2 Edit luzula.config.json

    One file describes your product name, domains, environments and features. No domain is ever hard-coded in the source.

    {
      "product": { "name": "Acme KB", "supportEmail": "help@acme.example" },
      "environments": {
        "dev":  { "account": "111111111111", "domain": "kb.dev.acme.example" },
        "prod": { "account": "333333333333", "domain": "kb.acme.example" }
      }
    }
  3. 3 Deploy with CDK

    Bootstrap each account once, then deploy. With a pipeline account configured, the same command promotes through dev, stage and prod.

    npx cdk bootstrap           # once per environment account
    npm run deploy              # synth + deploy through the pipeline

Read the full getting-started guide →

Pricing

Placeholder These plans are placeholders while the product is pre-launch. Self-hosting your own copy will always be possible, and always free of per-seat licensing.

Self-hosted

$0 / forever

Placeholder plan card

  • Full product, deployed into your AWS account
  • Pay only your own AWS usage
  • Community support
  • Apache-2.0 when public
Deployment guide

Enterprise

Let's talk

Placeholder plan card

  • Everything in Team
  • HIPAA BAA and security review support
  • Dedicated onboarding for your landing zone
  • Custom retention and audit integrations
Contact support

Own your notes.

Spin up a private workspace in minutes — in your cloud, under your keys, on your terms.