We cannot read your memory · processing in a secure compute instance in Zurich · thinking under zero data retention


A memory system for AI agents — that we cannot read

On your own machine, your memory never leaves it. In the cloud, it is encrypted under a passphrase only you hold — locked, it is unreadable to everyone, us included. The processing runs in a secure compute instance in Zurich, Switzerland, and keeps nothing. And it is already there: rules arrive with almost every message, the records that bear on a prompt arrive with it, a brief opens every session — and when that is not enough, everything ever said can be searched.

Free tier · no credit card · recall is never metered or capped

🇨🇭 Zurich secure compute Passphrase-locked memory 🛡️ Zero data retention thinking Local container edition

brethof-brain: we cannot read your memory, and it answers before you ask. Processing in a secure compute instance in Zurich; records, rules, full history, graph, notes, playbooks, Ledger.
We cannot read your memory
🇨🇭 Secure compute instance in Zurich — keeps nothing
Thinking under zero data retention
Full chat history, searchable, protected
Records · rules · graph · notes · playbooks · Ledger
Nine proven platforms

We cannot read your memory.

There's a reason most "memory" tools end up unused. They're a drawer: you have to remember to open them. You have to recall that the drawer exists, and that the thing you need is in it, and then you have to make the model's next step be "go look in the drawer." That only works when you're diligent enough to ask — which is exactly the moment you won't. Brethof-brain is not a drawer. Four things, and as far as we know no one else offers them together.

We cannot read your memory

On your own machine, the memory never leaves it — we could not read it if we wanted to. In the cloud, the memory is encrypted under a key only you hold; locked, it is unreadable to everyone, us included.

🇨🇭

The processing runs in a secure compute instance in Zurich, Switzerland

Every conversation passes through our hub — that is how memory gets made — but the hub only processes: each exchange stays only long enough to be understood, and the hub keeps none of it. It holds your standing rules and each project's one-line purpose, nothing else. It runs in a Tier III+ datacenter.

The thinking is done under zero data retention

The model provider is bound by contract not to log, retain or train on what passes through. We state that as their commitment.

It is already there — most of the time

Rules arrive with almost every message. The records that bear on a prompt arrive with it. A brief opens every session. And when that is not enough, everything ever said can be searched.

Seven things, one memory

At the start of every session the agent is handed the standing rules, what each project is, where the last sessions left off, and an index of what is known. On every prompt, the records that bear on it are added before the agent answers. Everything is organised by project, each with its own memory, its own knowledge and its own focus, set by a one-line purpose.

📋

Curated records

The current truth of each project, handed to your agent with every message they bear on. The memory curates itself: it reads what was said and keeps what a future session would need, reconciling new facts against old ones.

📜

Rules

Standing instructions, loaded with most messages. Every agent on every project works the same way.

The full chat history

Every session kept in full and searchable. It is protected: it cannot be deleted piecemeal.

🔗

The graph

The connections and the history. Backtrack what happened, and when.

Notes

Your agent's own handover, written by it, loaded at the start of the next session.

Playbooks

A procedure written once and run by any agent on any project. A project's atlas — the map of the whole system — lives here.

The Ledger

Catches, in the background, the things that were said and meant. You check it later.

🔑

You own the data

Export the whole history, delete a project, delete an exact phrase, or delete the account — from the panel, behind your own identity. If the network or our side is unavailable, the memory on your machine keeps recording and recalling; nothing is lost.

Choose where your memory lives

One choice at signup: memory lives local, on your own machine, or hosted, in our cloud, encrypted, in Germany. Both editions run the same memory and connect to the same hub. Plans and packs can change any time; only this choice is made once.

Local your machine

The memory — the records, the archive, the graph, the search — lives on your machine and never leaves it. We could not read it if we wanted to. Needs Docker or Podman, about 3 GB of disk including the memory model, a passphrase and a key from the panel; no elevated privileges. Storage is your own disk, unlimited by us.

☁️

Hosted our cloud, Germany

The whole memory is encrypted under a key derived from a passphrase only you set and hold. It unlocks when you start a session and locks itself after an idle period you choose. While locked it is ciphertext to everyone, including us. If the passphrase is forgotten, no one can open it — and deleting the account still works without it.

A secure compute instance in Zurich. We store almost nothing.

Brethof AI is a company in Poland, in the EU. The processing runs in a secure compute instance in Zurich, Switzerland. Each exchange passes through it only long enough to be understood; the hub keeps none of it. The only things it holds are your standing rules and the one-line purpose of each project — the instructions, never the conversations or the memory itself.

The thinking uses a model provider bound by contract not to log, retain or train on what passes through. We state that as their commitment. On the hosted edition, memory is stored and searched in Germany; the processing pass runs on our secure compute in Switzerland; a single model pass goes to that zero-retention provider, transiently. Backups are the encrypted memory itself, in Germany, on a short cycle, deleted when the account is.

1 · your machine

The memory stays with you

Records, the archive, the graph and the search live on your box — or, hosted, in a memory locked under your passphrase.

2 · Zurich

One exchange is processed

It passes through the secure compute instance in Zurich — a Tier III+ datacenter — only long enough to be understood. The hub keeps nothing.

3 · zero data retention

The thinking happens

A model under a zero-data-retention contract reads the exchange and answers. Nothing is logged, kept or trained on.

4 · back to you

Only the record returns

What was worth remembering comes back to your memory. The exchange is gone from everywhere else.

The archive is protected for you: individual messages cannot be quietly deleted; an exact phrase can be redacted; recent history is protected; a whole project or the account can be removed. Full legal detail is on the privacy, terms and security pages.

Don't cage the model. Teach it.

Most memory systems work by extraction rules and filters — a model is told what to keep, what to drop, how to file. That's caging it.

This memory is run by a model taught the way you'd teach a new hire: this is what's true, this is what changed, this is what we decided. It grows into the shape of your work instead of being fitted with a shape you have to maintain.

Don’t gate models. Teach them.

How we build everything at Brethof AI.

Summaries are lossy. Your memory shouldn't be.

Summaries are what you have when you can't afford to keep the original. The summary is good until the detail you didn't think to keep is the detail you needed. This memory doesn't summarize. Every session is archived and can be searched later. The curated memory is the current truth — dense and up to date. The archive is the complete raw recording. Notes are fast but lossy; the recording is the insurance.

Everything, in plain language

The free plan needs no credit card. These are launch prices, available for a limited time — anyone who subscribes keeps their price for as long as they stay subscribed. Get started free

Hear it when it ships

New releases, real benchmarks and the occasional deep-dive. No spam, unsubscribe in one click.

Everything we build

External:   YouTube · GitHub