Your AI memory stays yours

A context vault holds the most sensitive summary of your work that exists. We designed storage around that.

Scrubbed before it leaves your device

The secret scrubber runs in your browser. Keys, passwords, cards and IBANs are replaced before upload, and the real values are written to a local .env.example template that never reaches our servers.

Encrypted at rest

Managed vaults use per-vault AES-256-GCM keys. For extra protection, turn on the Vault Passphrase Lock: your browser encrypts every file with a key derived from your passphrase, and the server only keeps a key check. While locked, agents and background jobs cannot read the vault at all.

Bring your own storage

Mirror your vault to a private GitHub repository (other git hosts such as GitLab on self-hosted nodes), or to any S3-compatible bucket such as AWS S3, Cloudflare R2 or SeaweedFS. Credentials are stored encrypted.

Or run it yourself

The Enterprise node ships as a Docker Compose stack with PostgreSQL, the MCP gateway and optional local models through Ollama. Folder-level roles control what each team member sees, and expiring share links give freelancers access to a single folder.