Governance
What your agents remember, and who sees it
Your agents remember what helps them work: your own preferences, and facts that are true for the whole organization. You decide what is kept, who can read it and when it is erased. Available in every region: Canada, the US and the EU.
Updated October 2026
Two layers
Personal memory belongs to one member. Organization memory belongs to the whole company. Agents read both layers and add to them, within the rules below.
What gets saved
Personal notes: an agent saves a note to your personal memory only in a direct conversation with you. You see “Saved to your memory” with an Undo button. In shared spaces, project channels with several people and scheduled runs, agents read organization notes only and cannot save personal notes.
Organization notes: agents and members can only propose a note. An admin approves every note before agents use it. Nothing is published automatically. Each agent can have at most 10 proposals waiting.
Notes never expire on their own. An optional “valid until” date only flags a note for review. It is never deleted because of it.
What is never stored
Every note is screened before it is saved. Built in rules refuse passwords, keys and tokens, saved secrets, email addresses, phone numbers, street addresses and postal codes, ID numbers, payment cards, bank details, dates of birth, health information, employment or HR information, legal matters, someone’s pay or personal finances, and instructions to the AI.
A second check compares the note with your organization’s own “never store” policy.
If a check fails, nothing is saved and the refused text is not kept. Only the refusal category is logged, never the text. Rejected proposals have their text deleted.
Who sees what
- Personal notes: only the member they belong to. Admins can switch personal memory off for the whole organization and can erase a member’s memory, but can never read members' personal notes.
- Organization notes: every member can read published and deprecated notes. Admins see everything, including the review queue.
- A proposal: visible to the admins and to the member who proposed it.
- The memory log: admins only. It never holds the text of rejected, refused or deleted notes.
- Report as confidential: any member can report an organization note. It is hidden from agents right away and admins are notified.
Your controls
- Switch a layer off. Agents stop seeing it right away. Nothing is deleted; erasing is a separate step.
- Erase a member’s memory (admins). Nothing is returned, and only the fact that an erase happened is logged.
- Export: members export their own notes, admins export the organization’s. You get a .zip of Markdown files that opens as an Obsidian vault. The download link lasts 15 minutes.
- Import Markdown, Obsidian or Notion files, up to 200 files or 2 MB at a time. Imported personal notes are screened. Imported organization notes become proposals for an admin to review.
- Pin an organization note so agents always get it in full, or enforce it as a rule that is always applied first.
- Every week, a check flags contradictions and other problems for you to review. It never edits or deletes notes.
Private AI mode
Agents in private AI mode can read memory but never write to it.
Not the same as an agent’s own working notes
Agents still keep their own working notes and skills. Saving those still waits for your approval on a card. Personal and organization memory work differently, as described above.
Frequently asked questions
Can an admin read my personal notes?
No. Admins can switch personal memory off or erase a member’s memory, but can never read members' personal notes.
What will agents never save?
Passwords, keys, personal information such as contact details, ID numbers, payment cards, bank details, health, HR and legal matters, and instructions to the AI. Each note is checked against built in rules and your organization’s own never store policy.
Do notes expire?
No. A “valid until” date only flags a note for review. Nothing is deleted automatically.
Who can read organization notes?
Every member can read published and deprecated notes. Admins see everything, including the review queue. A proposal is visible to the admins and to the member who proposed it.
How do I get my notes out or erase them?
Export gives you a .zip of Markdown files that opens as an Obsidian vault. Admins can erase a member’s memory or switch a layer off, which hides it from agents right away without deleting anything.
Does an agent change the organization’s memory on its own?
No. Agents can only propose organization notes. An admin approves each one before agents use it.
Do private AI mode agents use memory?
They can read it, but they never write to it.
Put an agent to work
Add an agent, then open Memory in the sidebar to see what it keeps.
