One company memory. Every AI on it. Nobody else can read it.
Agentu gives a company one encrypted memory that ChatGPT, Claude, Codex, Gemini, Cursor and VS Code all work at the same time, and gives every person the same thing for their own life. Two apps share one encryption: Agentu Professional, the company workspace, and Agentu, the personal app, free for one connected AI.
Agentu Professional
The company workspace. Many AIs work the same memory repositories at the same time, across departments, projects and divisions. One brief goes to every AI, which compete or collaborate on it; one agentu.com login covers them all, with SSO and SCIM in build; an admin portal keeps the company in charge, with keys managed by Agentu or held by the company itself; native AI seats come through Agentu's partner channels with the partner discount passed on where vendors allow. Smaller teams ship faster because every AI works the same brief concurrently.
Agentu
For people who want one memory in every AI they use. Create it with Face ID or Touch ID, connect one AI free, and bring your memories across. Encrypted in Switzerland, opened only to answer you: unlock your phone and your memories are there, no codes to type. Prefer to hold your own keys? Press one button. Agentu Plus, $8 a month, connects every AI you use, Claude, ChatGPT, Codex, Gemini, Cursor and VS Code, to one memory with no memory limit.
Keep the world's data sovereign, in our own hands.
Your memories are encrypted in Switzerland and opened only to answer you. No AI company holds them, nobody at Agentu reads them, and nothing is ever used for training. Managed by Agentu, the default, means the platform opens a memory only to answer your AI and logs every open. Hold your own keys means only your devices can open it. Agentu Sealed, in build, means the key in our vault turns only with your biometric.
Said precisely: in the managed default, Agentu's platform can open memories to answer you, so it is not zero-access; the limit is a compromised live server during the window of a request. Holding your own keys is zero-access: Agentu's servers never hold a key that opens anything. Sealed is not zero-access during a live grant, because the sealed enclave holds a time-bounded working key while your AI is allowed to read. What Sealed is, and is not →
Four steps. Nobody is asked to type a memory first.
You connect the AI you already use, on the phone or laptop in your hand, and what it knows about you comes across in one tap. It is encrypted on your device, sorted into categories, and can be exported again at any time.
Create
Face ID or Touch ID on memory.agentu.com. No e-mail, no password, no card.
Live
Your phone is the key
Agentu manages the keys by default: unlock your phone and your memories are there, no codes to type. Press "Hold my own keys" and you get a 24-word recovery phrase instead, shown once, then straight on to the next step.
Live passkey and recovery phrase · In build "Hold my own keys" switch, "Next" step
Connect your AI
One button per app: ChatGPT, Claude, Codex, Gemini, Cursor, VS Code. Connecting one is enough; add the rest later.
Live by URL for ChatGPT, Claude, Gemini · In build one-click buttons, Codex, Cursor, VS Code sign-in
Bring your memories
One tap opens your AI with the request already written; you press send. Memories arrive encrypted and sorted; export them any time.
In build
- ChatGPT
- Claude
- Codex
- Gemini
- Cursor
- VS Code
- Claude Code
- Perplexity
- Any MCP client
Every connection today uses one URL, https://memory.agentu.com/mcp, with OAuth and a step-by-step guide per app. The one-click buttons, app detection and the memory import are in build this week and marked live here only when they ship. Connect AI apps →
One encryption. You decide who holds the key.
Every memory is encrypted the same way, in Switzerland. By default Agentu manages the keys and opens a memory only to answer your AI. Press "Hold my own keys" and the keys exist only on your devices. Agentu Sealed, in build, is the upgrade where the key in our vault turns only with your biometric.
Managed by Agentu
Your memories are encrypted in Switzerland and opened by the platform only to answer your AI. They are never stored in plaintext, and every open is logged for you to see. Unlock your phone and your memories are there; no codes to type. Nobody at Agentu reads them. The same for personal and company accounts.
The honest limit: Agentu's platform can open memories to answer you, so this is not zero-access. A compromised live server could read what passes through it during the window of a request.
Hold your own keys
Press "Hold my own keys" and you are on Sovereign custody: keys only on your devices, backed by a 24-word recovery phrase. Agentu's servers never hold a key that opens anything. Your AI reads through your phone, the Agentu Bridge on your computer, or a time-limited Away grant; it is up to you.
Lose every device and the phrase, and nobody can recover the memories, including Agentu. Companies choose at sign-up: Agentu manages the keys, or the company holds its own with recovery by a quorum of admin devices.
Agentu Sealed
The upgrade to Managed by Agentu: Biometric-Sealed Encryption. The key stays in our vault, but it only turns with your biometric (Face ID, fingerprint or device PIN), and a sealed enclave is the only reader. Each AI request is decrypted on demand there; the AI never receives the key; the grant relocks on idle or a hard limit and can be revoked at once.
Not zero-access during a live grant, and marked live here only when it ships. What Sealed is, and is not →
Dedicated On request: a single-tenant Agentu operated by Agentu in the region you choose, Swiss hardware later, per deployment. The same choice of who holds the key, on an instance that serves only you. Dedicated →
Every way uses the same AES-256-GCM encryption per category, the same signed hash chains, the same export and the same provable deletion. Key custody on the security page →
Your AI apps each hold a different piece of you. None of them is yours.
Copied into every chat
Context is pasted from one assistant into the next, and each app keeps its own version under its own terms. Switch to a better model and you start from nothing.
In the wrong country
Regulators ask where client data lives and who can reach it. "Somewhere in a model provider's cloud" is not an answer a compliance officer can give.
Still there after people leave
A departing employee's company context stays inside three AI accounts the company does not control. That is a data-protection problem as much as a knowledge problem.
One encrypted memory. Every app. Your rules, Swiss ground.
Agentu sits between you, or your organisation, and the AI apps you use. Apps read and write memory through keys that see only the categories you allow; you keep the whole picture, encrypted per category with a tamper-evident history.
- Encrypted by category. Each category has its own key. Revoke a key and that access ends everywhere at once, in ChatGPT, Claude and every other connection made with it.
- Stored in Switzerland, for everyone. Every memory, personal or business, wherever you are, is stored encrypted in Zurich under Swiss privacy law, outside both EU and US jurisdiction, and opened only to answer you. Why Switzerland →
- You decide who holds the key. Managed by Agentu by default: the platform opens a memory only to answer your AI and logs every open. Press "Hold my own keys" and only your devices can open it. Agentu Sealed, in build, is the upgrade where the key turns only with your biometric. Same encryption every way. Who holds the key →
- Never training data. Agentu never trains on your data and calls models only under terms that prohibit it. Where a provider offers zero data retention, Agentu uses it. What that means, precisely →
- Ask once, use anywhere. What one app learns, the next can use, without copying and pasting.
- Provably deletable. Delete a category, a project or a leaver's access and the key is destroyed: the data becomes unreadable everywhere, backups included.
Cryptographic memory, in one paragraph
Every category of memory has its own encryption key. Every entry is sealed with AES-256-GCM and chained to the one before it with a signed hash, so nothing can be altered or quietly removed. Keys are issued per app, per person and per purpose, and they can be revoked in a second. The service never stores plaintext, opens a memory only to answer your AI, and logs every open so you can check. Read the security model →
One company memory. Every AI on it, at the same time.
Agentu Professional is the company workspace: encrypted memory repositories that many AIs work concurrently, across departments, projects and divisions. One brief goes to every AI the company allows, the work comes back into the repository with its evidence, and smaller teams ship faster because every AI works the same brief at once. Agentu, the personal product, is live; the Professional features below are in build.
Encrypted memory
Categorised, encrypted memory with per-app keys, provenance on every entry, export and provable deletion. The foundation Professional is built on.
Many AIs, one memory, at once
ChatGPT, Claude, Gemini, Codex and Cursor read and write the same repository at the same time, each seeing only the categories it is allowed. Concurrent work →
One brief to all AIs
Send a brief once. In compete mode every AI answers it independently and the team picks the best; in collaborate mode they split it and assemble the result. Compete and collaborate →
Departments, projects, divisions
Repositories follow the company's shape, each with a work log, a documents index, its people and its status in plain words, run from one admin portal. Workspace →
One login, ID codes, one-action removal
One agentu.com login for every AI. Vendors and logs see AGU-7K3M-Q2X9, never a name. Remove a person in one evidenced action. People →
A Swiss home for every memory
Storage, backups, keys and processing in Zurich under Swiss law, or Dedicated: a single-tenant Agentu operated by Agentu in the region the company chooses, on request. Residency →
Regulated professions, by name
Legal, accounting and healthcare teams already use several AI tools. Agentu is how they use them while keeping client data inside their control, in the right region, encrypted, and deletable on demand.
Legal
Privilege, confidentiality and conflicts, with matter-level keys and residency a client can be told about in one sentence.
Agentu for law firms →Accounting
Client-level separation, retention you can prove, and multi-model work on tax, audit and advisory without client files leaving your region.
Agentu for accountants →Healthcare
Patient data separated per practice and per purpose, in-country storage where the law requires it, and the strictest model terms by default.
Agentu for healthcare →ChatGPT, Claude, Codex, Gemini, Cursor, VS Code, and anything that speaks MCP
ChatGPT & Codex
A connector in ChatGPT (Settings → Connectors) today. For Codex, codex mcp add agentu covers the CLI, desktop app and IDE extension with one config file; its sign-in fix ships first and is marked live when it passes.
Claude
claude.ai and Claude Desktop as a custom connector (OAuth); Claude Code with one claude mcp add line or a local server through the Agentu Bridge.
Gemini · Perplexity · Cursor · VS Code
Any assistant or editor that accepts a remote MCP server, by URL and OAuth. Gemini and Perplexity connect today; the Cursor and VS Code sign-in and install links are in build. Which plans, which caveats →
Your own software
REST API, TypeScript SDK and seven MCP tools, on agentu.com or on a Dedicated instance. Developer docs →
From $20 per person a month
Many AIs on one company memory at the same time, one brief to all of them, the admin portal, SSO and SCIM through the agentu.com login (in build), ID codes, one-action removal, keys managed by Agentu or held by the company, residency choice and a data-processing agreement. Dedicated, a single-tenant Agentu in the region you choose, per deployment on request. Pricing →
Talk to salesFree for one AI. Plus for every AI, $8 a month.
Your own encrypted memory, no e-mail, no password, no tracking. Connect one AI free, forever. Agentu Plus connects Claude, ChatGPT, Codex, Gemini, Cursor and VS Code to one memory with no memory limit, and adds memories automatically. Why this matters →
Create your free memoryGet an AI through Agentu
ChatGPT, Claude, Gemini, or Agentu AI with all three in one app and one memory, on Agentu's keys, inside Plus. When the packages launch they are priced below the separate subscriptions they replace; prices announced at launch. Packages →
Join the waitlist