Security & privacy

Your data stays yours.

Encrypted at rest. Encrypted in transit. Never used to train any model. Delete your account in one click — everything purged after a 30-day grace window. Export everything as a ZIP, anytime.

Cortex team controls — per-member roles and per-team scoping.
Encryption at rest and in transit, per-team scoping, one-click delete, full export.
· Yours, and only yours ·

Private by default. Not even we read it.

Never trains a model

Your content is never used to train any model — ours or a third party. Every AI provider we route through is under a zero-retention contract.

Encrypted at rest + in transit

AES-256 at rest. TLS 1.3 in transit. Your brain holds your most sensitive work — it stays encrypted end to end.

One-click delete

Delete your account from Settings. A 30-day grace window lets you restore; after that every neuron, embedding, and file is permanently gone.

Export everything

Download a ZIP of every note, revision, comment, and file — anytime. Your knowledge is yours. No lock-in.

EU or US data residency

EU customers in Frankfurt, US customers in Virginia. Data never crosses regions without your explicit consent.

Secure by design

Minimum OAuth scopes only. MCP connections use bearer-token auth with refresh-token rotation and replay-detection chain revoke.

Questions about a specific control, a DPA, or a security review? Write to us.

Questions, answered

Still curious? Write to us.

Hand every AI your external brain.

Free to start — no credit card. Your data stays yours on every tier.