Every query, every search, every memory is filtered by the active client mind. There is no way for Client A's data to appear in Client B's results.
How isolation works
- Every memory has a
mind_id— it belongs to exactly one client - Every query filters by the active client mind before searching
- Team members only see client minds they've been granted access to
- Sensitive and internal CMO memories are hidden from restricted roles and client-safe handoffs
Data rights
You own your data. You can export any client mind at any time. You can delete a client mind and all its memories permanently. When a client leaves, their data goes with them (via handoff) or gets deleted — your choice.
Your data is stored in an encrypted database hosted on SOC 2-certified infrastructure (Cloudflare and Supabase).