Trust and security

Your data was always yours.

Eight commitments, plainly stated. Signed personally by Avihay Zanetti.

01 · Where your memory lives

Enterprise infrastructure, never a side project.

Memories are stored on infrastructure with SOC 2 Type 1 and HIPAA compliance. Family-Office tier provides a dedicated private instance. Concierge tier uses tenant-isolated containers on a shared cluster. Specific deployment topology disclosed during onboarding under NDA.

02 · Encryption in transit

TLS 1.3 on every connection.

Let's Encrypt certificates with automated rotation. No exceptions. If a request to your memory layer is not encrypted, it does not reach your memory layer.

03 · Encryption at rest

Your data is unreadable without your cooperation.

Storage volumes encrypted at rest. Family-Office tier supports BYOK (bring your own encryption keys) so memory data is unreadable to us without your active cooperation.

04 · Backups

Daily, retained seven days, restorable on request.

Automatic daily backups, retained on a 7-day rolling window. Restorable on request. Cross-region replication available on Family-Office tier.

05 · Access controls

Per-client keys. Per-client logs.

Per-client API keys. MCP authentication tokens. Per-client audit logs of every read and write. Monthly access logs exported to Family-Office clients on request.

06 · Incident response

In writing within 72 hours.

We monitor. We investigate. We remediate. Best-effort response, no contractual SLA at Pre-Release. In the event of any incident affecting your data, we disclose to you in writing within 72 hours, full scope and remediation steps included.

07 · Data deletion and portability

Exit clean. Leave with everything.

On request, full memory export within 7 days. Deletion within 14 days of termination. Your data was always yours. We never sell, share, or use your memory for any purpose other than running your service.

08 · Compliance posture

We do not claim what we do not hold.

At Pre-Release, our compliance posture is: SOC 2 Type 1 and HIPAA at the infrastructure layer (inherited from our infrastructure provider). GDPR-aligned data handling. We are working toward independent SOC 2 Type 2 attestation in Year 2. We will disclose progress publicly.

These commitments are mine, not a legal department's.

Zanetti

We use third-party infrastructure to deliver this service. The list of subprocessors is disclosed during onboarding and updated quarterly. Material changes are communicated in writing 30 days in advance.

Full subprocessor list shared under NDA. We will not surprise you with a vendor change.

20 applications open.

First cohort onboarding through July 2026. We review every application personally within 72 hours.

Apply now →