Tenant isolation in the database
Every record carries its organization, and so does every direct reference. References across organizations are rejected by PostgreSQL itself, not just by the application.
FOREIGN KEY (organization_id, page_id)GuideConfluence Data Center is ending. What now?
Specs, runbooks and tasks in one place. Hosted in Germany or on your servers.
The wiki for engineering, product and ops teams: write together in real time, turn decisions into tasks right in the text, and let AI and coding agents help, with exactly the permissions of the person using them.
- Hosted in Germany
- DPA under Art. 28 GDPR
- SSO & audit log
- Export any time
Works with your stack
- Claude Code
- Codex
- Cursor
- OpenAI
- Anthropic
- Mistral
- Ollama
- Entra ID
- Keycloak
- Notion import
Why now
Specs in the wiki, tasks in the tracker, AI stuck in review.
Docs and work drift apart
Someone copies every decision from the spec into the tracker. Two sprints later, one of them is wrong.
Confluence Data Center is ending
Read-only from March 28, 2029. If you cannot or will not move to Atlassian Cloud, you need a plan now.
Read the guideAI without sign-off
Data protection says no because nobody can tell what the AI sees or where the data goes.
UpSpec brings docs, tasks and AI into one place, with one permission model and hosting in Germany.
Collaboration
One place for knowledge and work.
Write, plan, find – with one permission model that applies the same in the editor, in search, for the AI and via MCP.
Write together. Without conflicts.
Several people on the same page, each with their own cursor. Concurrent edits are merged via CRDT instead of overwritten. No saving, no “who saved last”.
- Comments on any passage, @mentions, reactions
- History with a diff like a code review
- Tables, code, Mermaid, math, drawings
AI that does the work
Give the AI real work. Not just a chat box.
The assistant plans whole pages, researches across your docs and writes live in the text. Via MCP, Claude Code, Codex, Cursor and other coding agents work directly with your specs. Always with the person’s permissions, traceable in the audit log and version history.
Plan whole pages
One sentence becomes a spec with an outline. The assistant reads your ADRs and specs and proposes the content and its place in the page tree. You apply it with one click.
Research with sources
Searches and reads across projects and cites every source. Page content reaches it explicitly as data, not as instructions.
@AI in the text
Writes new sections right into the page, such as a summary or an outline. Everyone sees that the AI is writing.
Your model, your costs
OpenAI, Anthropic, Mistral, Groq, OpenRouter or locally via Ollama. You pay the provider directly and set limits per organization and person.
Claude Code, Codex, OpenCode, Cursor, Gemini CLI, Windsurf reads your spec, builds it and adds to the docs.
UpSpec is an MCP server with six tools: list projects, search, read, find subpages, create pages and append to them. Everyone connects their agent with their own token, so it never sees more than they do.
- Read-only or read-write, revocable any time
- Always with the person’s permissions
- New pages marked “via MCP” in the audit log
Sites
Public docs, shipped like software.
With Sites, projects and pages become public documentation, a help center or a changelog, on your own domain if you like. Every publish is a fixed release with preview and rollback, and restricted pages never go public.
- Search with Ctrl+K or ⌘K, from Business with AI answers from the docs, with sources
- Custom domain and custom CSS, from Business
- Sitemap, llms.txt, Markdown and an MCP server for each site
- Statistics and feedback without cookies, no tracking
In action
How a team works in UpSpec.
Real recordings from the app, no mock-ups: several people on the same page, the AI assistant and a board.
Four people plan a release at the same time on an UpSpec page; their cursors and selections are colored.
Why UpSpec
Built like infrastructure. Not like a notebook.
Many wiki tools were built for notes and had permissions, audit and AI bolted on later. UpSpec is built for companies from the database up. These differences cannot be retrofitted.
An audit log nobody rewrites
Entries are written in the same transaction as the change: no gaps, no phantom entries. A trigger blocks later updates and deletes; only the retention period clears out old entries.
BEFORE UPDATE OR DELETE → rejectedAI without a shortcut around permissions
Assistant, @AI and MCP go through the same policies as a human. What you may not see, the AI cannot quote either.
actor = Agent(onBehalfOf: person)Invisible means invisible
Content from other organizations or restricted pages answers with 404, not 403. No link, no search result and no error message reveals that it exists.
HTTP 404 · no existence oracleReal-time without conflicts
Concurrent edits are merged via CRDT. If the connection drops, the page stays readable and changes are sent once you are back, as long as the tab stays open.
Yjs · Hocuspocus · ValkeyNo lock-in
Export pages, trees or the whole organization as Markdown. Import from Notion and Markdown. And if you want: run it on your own servers.
export.zip → *.md + imagesMade in Germany
Built in Germany. Hosted in Germany.
Your content, files and backups are stored exclusively in data centers in Germany. A German contract partner, German law and a data processing agreement under Art. 28 GDPR on every plan.
Located in Germany
Database, files and backups in German data centers. No replication abroad.
GDPR and DPA
Data processing under Art. 28 GDPR, on every plan.
AI on your terms
You decide where AI requests go, up to your own model, for example via Ollama. Without a provider, the AI is off.
No tracking, no training
No ad trackers, no selling of data. We do not train models on your content.
For CTOs and CISOs
The questions from your security review. Answered up front.
What gets asked before a tool receives a company’s knowledge – and our answers.
- Where is our data?
- In data centers in Germany: database, files and backups. Or on your own servers.
- Who sees what, and how do we verify it?
- Permissions per project, page and team, checked on the server with every request. The audit log shows who changed permissions, structure or settings and when, as CSV for your auditors; every text change is in the version history.
- What happens when someone leaves?
- Once the person is removed or suspended, all access ends immediately: sessions, tokens and MCP included. With enforced SSO, every address on your verified domains signs in through your identity provider only.
- What does the AI do with our data?
- Only what the asking person may see goes to the provider your admins configure. Without a provider, the AI is off. We do not train models on it.
- Can we get out again?
- Any time: pages and files as Markdown or HTML, from a single page to the whole organization. Comments, tasks and history are not part of the export.
- Can we run UpSpec ourselves?
- Yes, today as an Enterprise option with a guided installation: on your infrastructure, with SSO via your identity provider and AI via Ollama, without requests leaving your network.
Deployment
In our cloud or on your servers.
The same software, the same features. You decide who runs it.
Ready right away
UpSpec Cloud
We run UpSpec for you in Germany: updates, backups, monitoring and scaling included.
- Hosted exclusively in Germany
- Updates and backups included
- 30-day trial, no credit card
from €7.50 per person and month
See pricingEarly access
Self-hosted
UpSpec in your data center or private cloud, for knowledge that must not leave the building.
- PostgreSQL, Valkey and S3-compatible storage
- AI locally via Ollama
- SSO with your identity provider
today as an Enterprise option; later free for micro companies, otherwise €5 per person and month
See self-hostingPricing
Simple per-person pricing. Try everything for 30 days.
Try everything in Business for 30 days. Then cancel monthly or pay yearly and get two months free.
Plans
Team
For teams that want knowledge and work in one place.
€7.50€9
per person and month
net · billed yearly · €90 per person and year
Included:
- Unlimited pages, projects and boards
- Real-time editor with comments and history
- Tasks right from the text and a personal task list
- Permissions for projects and single pages
- AI assistant and @AI with your own key
- MCP server for Claude Code, Codex, Cursor & co.
- 1 public site: docs, help center or changelog
- Import from Notion and Markdown, export as Markdown
- Hosted in Germany, data processing agreement
- 10 GB storage per person
Business
For companies that need security, control and evidence.
€12.50€15
per person and month
net · billed yearly · €150 per person and year
Everything in Team, plus:
- Single sign-on (OIDC), enforced SSO, verified domains
- Custom roles with fine-grained permissions
- Audit log with CSV export
- AI limits per person, usage overview
- Unlimited history
- 10 public sites with custom domains and site AI
- 50 GB storage per person
- Support with next-business-day response
Enterprise
For large organizations, their own infrastructure and their own contracts.
Custom
from 50 people or for self-hosting
Everything in Business, plus:
- Dedicated instance or self-hosting
- Contractual uptime (SLA)
- Security review and custom contracts
- Guided rollout and migration
- Personal contact
- Unlimited public sites
30 days of everything · No credit card · All prices net plus VAT
Questions
Frequently asked questions
Something missing? Write to us. Answers come from the people who build UpSpec.
What is UpSpec?
UpSpec is the knowledge platform for engineering, product and ops teams: specs, runbooks, decisions and tasks in one place. Several people write together in real time, tasks sit right on the pages, and an AI assistant researches, plans and writes – always with the person’s permissions. Built and hosted in Germany.
Can the AI see pages I am not allowed to see?
No. Assistant, @AI and MCP go through the same permission checks as the person themselves. Page content reaches the AI explicitly as data, not as instructions. The assistant proposes new pages and additions; you decide whether to apply them.
Does UpSpec work with Claude Code, Codex or Cursor?
Yes. UpSpec is an MCP server with six tools: list projects, search, read, find subpages, create pages and append to them. Everyone creates their own token for it, read-only or read-write and revocable any time. It works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Windsurf and other MCP clients that support Streamable HTTP with a Bearer token; UpSpec shows the setup for each of them when you create the token.
How do we move from Notion, Confluence or another wiki?
You import Notion exports and Markdown files yourself, with page tree, images and links. We guide larger moves, for example from Confluence, on the Enterprise plan. Getting out is just as easy: pages, trees or the whole organization as Markdown.
Can we publish public docs with UpSpec?
Yes, with Sites. Projects and pages become public documentation, a help center or a changelog, with search, your design, statistics without cookies and an MCP server for each site; from Business also on your own domain and with an AI that answers questions only from the docs. What goes live is a fixed release that you check first and can roll back any time; restricted pages never go public. Team includes 1 site, Business 10, Enterprise as many as you need.
Is there a free plan?
Not in the cloud. Every organization gets 30 days of everything in Business, no credit card required. After that you pick Team or Business, or export your content as Markdown. Self-hosted, UpSpec will be free for micro companies, education and non-profits once the code is released.
What happens after the trial?
We remind you before it ends. Without a plan the organization becomes read-only: you can still read and export, but not change anything. Nothing is deleted unless you decide so.
What does the AI cost?
You connect your own provider (OpenAI, Anthropic, Mistral, Groq, OpenRouter or your own model, for example via Ollama) and pay them directly. UpSpec does not charge extra for AI. Admins set limits for the organization and per person and see the usage.
How does billing work?
Per active person and month, net plus VAT. Paying yearly gets you two months free. Guests who only see single pages do not count as a person.
What happens to our data after we cancel?
After the contract ends you can export everything for 30 days; then we delete the organization with all its content. You can get pages and files as Markdown or HTML at any time, without asking us.
What if UpSpec goes away?
You export your pages and files yourselves as Markdown or HTML at any time. Self-hosting is available today as an Enterprise option, and once the code is released as planned, you can run UpSpec independently of us.
Your knowledge. In one place you control.
Try everything in Business for 30 days, no credit card. You import Notion exports and Markdown yourselves, and you can leave any time as Markdown or HTML.
No credit card · Cancel any month · Data in Germany