Live today
Dispatcher
The on-ramp. Routes any AI task through providers you use today, audited and budget-capped.
memory · designing · coming 2027
Inference is rented.Memory is owned.
Encrypted context, customer-held keys. The persistence layer behind the Cowork desktop app.
Designing · 2027Customer-held keysCiphertext at rest
the moat
Inference is rented. Memory is owned.
Token providers are commodity. Switch in an afternoon. Years of encrypted context are a relationship. Own the memory, own the customer.
Inference (rented)
The model is open-weight. Compute is a commodity. Any sovereign provider with comparable hardware can serve the same model class. The switching cost is one afternoon and a new endpoint URL.
Memory (owned)
Your accumulated context (every conversation, every uploaded document, every embedding) lives in one place. You cannot move years of encrypted state in an afternoon. The customer holds the key. That makes the relationship.
four properties
What Memory is by design.
Customer-held keys, ciphertext at rest, sealed lookup, portable by contract. The four properties that distinguish a moat from a database.
- 01Customer-held keys.
A single key derived on the customer's device. Xanadu never holds a copy. The customer can rotate, revoke, or destroy the key without operator participation.
- 02Ciphertext at rest.
Every document, every prior session, every embedding stored encrypted under the customer key. The storage layer has no plaintext to surrender.
- 03Sealed lookup.
Retrieval against the Memory happens inside the same TEE that runs the inference. Plaintext lives only in the enclave, only during a request, and only for the customer who holds the key.
- 04Portable, by contract.
The Memory format will be documented and the schema versioned. If you leave, you export the ciphertext blob and your key; another sovereign provider can read it without coordination from us.
how it fits
The Cowork layer that makes the Cloud sticky.
The Cloud runs the inference. Memory makes the next session remember the last one. Cowork is the desktop app that surfaces both.
Building · 2026
Cloud
The engine. Confidential inference in Reykjanesbær, operated by a Swiss Stiftung in formation in Zürich.
Designing · 2027
Memory
The moat. Your encrypted context layered behind the Cowork desktop app. Customer-held keys.
honest scope
What Memory is, by design. What it is not.
By design
- Customer-held key derivation; no operator copy.
- Ciphertext-at-rest in the storage layer.
- Plaintext only inside the TEE during a single request.
- Portable export of the ciphertext blob and schema.
We will not claim
- That Memory exists today. It is in design, with a 2027 target. The current site states only the design intent.
- That the storage layer is mathematically unbreakable. Key compromise on the customer side defeats it. Standard key-management discipline applies.
- That Memory is offered today as a paid product. The waitlist is for the 2027 cohort.