Where is my data stored?

EU customers: Frankfurt. US customers: Virginia. Data never crosses regions without your explicit consent.

Can I delete my account and all data?

Yes — one click in Settings. A 30-day grace window lets you restore if you change your mind. After that, every neuron, embedding, file, and derived bit of data is permanently gone.

Do you share data with AI providers?

Only the minimum needed for the request you ran. Every provider is under a zero-retention contract — none may log, store, or train on your content.

What if I want my data out of Cortex?

One-click export to a ZIP, anytime — every neuron, every revision, every comment, every file. Your knowledge is yours.

Security & privacy

Your data stays yours.

Q: Is the connection between my AI client and Cortex secure?

Yes. MCP connections use bearer-token auth with refresh-token rotation and replay-detection chain revoke. If a token is ever leaked, the chain self-revokes on next use.

Encrypted at rest. Encrypted in transit. Never used to train any model. Delete your account in one click — everything purged after a 30-day grace window. Export everything as a ZIP, anytime.

Brain New

AllNotesFilesQuotesEvents

Document

Auth flow decisions — ADR-012

We settled on short-lived access tokens with rotating refresh tokens stored httpOnly…

Acme Redesign · 3d ago

Note

Q3 positioning brief

Lead with the external-brain message; cut the feature soup. One brain, any AI.

#strategy · 1w ago

File

brand-guidelines.pdf

Violet #7c3aed primary, Cal-Sans display, generous spacing, restrained motion.

4.2 MB · uploaded

Quote

“Capture once, recall forever.”

From the pricing call with Acme — they want memory that survives model switches.

Pricing call · 2w ago

Event

Design review — Mobile app

Walk through the capture flow and the share-to-team permissions model.

Tomorrow · 10:00

Link

MCP spec — tool definitions

Reference for how external clients read the Cortex tool list on connect.

modelcontextprotocol.io

Encryption at rest and in transit, per-team scoping, one-click delete, full export.

· Yours, and only yours ·

Private by default. Not even we read it.

Never trains a model

Your content is never used to train any model — ours or a third party. Every AI provider we route through is under a zero-retention contract.

Encrypted at rest + in transit

AES-256 at rest. TLS 1.3 in transit. Your brain holds your most sensitive work — it stays encrypted end to end.

One-click delete

Delete your account from Settings. A 30-day grace window lets you restore; after that every neuron, embedding, and file is permanently gone.

Export everything

Download a ZIP of every note, revision, comment, and file — anytime. Your knowledge is yours. No lock-in.

EU or US data residency

EU customers in Frankfurt, US customers in Virginia. Data never crosses regions without your explicit consent.

Secure by design

Minimum OAuth scopes only. MCP connections use bearer-token auth with refresh-token rotation and replay-detection chain revoke.

Questions about a specific control, a DPA, or a security review? Write to us.

Questions, answered

Still curious? Write to us.

· Start free ·

Hand every AI your external brain.

Free to start — no credit card. Every paid plan has a 7-day free trial, and your data stays yours on every tier.

Start free See pricing →