SecuritySharing Model

Sharing Model

internalpage is designed for private internal pages, not public hosting.

Pages are shared through viewer URLs, and access checks happen before page bytes are served. This lets teams share HTML output, Markdown docs, and OpenAPI references without exposing them as public sites.

The first developer workflow is intentionally narrow:

  • Upload HTML, Markdown, or OpenAPI files.
  • Share the generated viewer URL.
  • Publish again with the same slug when the source changes.
  • Keep token ownership personal for attribution and revocation.

Workspaces on a paid plan can also connect a custom subdomain for viewer links. When a custom domain is active, copied page links use that domain by default, while the default view.internalpage.com URL continues to work as a fallback. See Custom Domains for setup details.