Isolation you can explain in one sentence.

Each client team runs its own separate Brain: its own process, its own storage, its own keys. There is no shared database for a bug to leak across.

Access is structural

• Sign-in is by single-use email links; no passwords to steal or reuse.
• Every door (the app, the live sync, the AI connection) checks the same access rules, so they can never disagree.
• Private trees are owner-only by construction. Admins cannot open them. AI agents cannot open them. No rule can be written that opens them.
• AI agents act only on explicit grants. An "everyone" rule never includes an agent.

Your data stays yours

• Notes are plain files in a vault your team owns; export is trivial because there is nothing to export from.
• Every change is recorded with its author. Reverts add history, never erase it.
• Daily off-site backups, restorable per team.

Honesty about AI

An AI connected to your Brain is a capable assistant, not an oracle. Its notes can be wrong and its edits are visible, attributed, and reversible. That is the point of putting them in a vault you can see.

Talk to us about your setup