Encrypted at rest. Sealed to you. Live for your AI.
Agentu Sealed is the upgrade to the default, where Agentu manages the keys. The key stays in our vault, as it does by default, but it only turns with your biometric passkey, Face ID, a fingerprint or your device PIN, and a sealed enclave is the only reader. We call the model Biometric-Sealed Encryption. This page explains it in plain words and says, in the same breath, what it is not.
Four moments in the life of a Sealed key
Sealed
Your memories are encrypted, as always, and the key is in Agentu's vault, as by default. The upgrade wraps it so that only your biometric passkey can unwrap it. From then on, Agentu holds a key it cannot turn on its own.
Unlocked by you
You unlock with Face ID, a fingerprint or your device PIN and choose which AI may read, and for how long. That releases a time-bounded working key into a sealed enclave: a processing environment Agentu's staff cannot reach.
Live for your AI
Each request from your AI is decrypted on demand inside the enclave. The AI receives the memories relevant to its question and never the key. Your stored memories stay encrypted the whole time.
Relocked
The grant ends when idle or when it reaches its hard limit, whichever comes first, and you can end it at once from any device. The enclave drops the working key; your AI is told Agentu is locked until you unlock again.
What it is, and what it is not
What Agentu Sealed is
- Encrypted at rest, always. Your memories are stored encrypted in Switzerland and stay encrypted at rest throughout, including while your AI is allowed to read.
- Sealed to you. Agentu keeps the key, but wrapped so that only your biometric passkey (Face ID, fingerprint or device PIN) can unlock it. Agentu's servers hold a wrapped key they cannot open on their own.
- Live for your AI, on your say-so. When you unlock for an AI, a time-bounded working key is released into a sealed enclave. Each AI request is decrypted on demand inside it; the AI receives relevant memories, never the key.
- Relocks by itself. The grant ends when idle or at a hard limit, whichever comes first.
- Revocable at once. End it from any device, or press Lock all, and the enclave drops the working key immediately.
- Usable without your phone. Once you have unlocked for an AI, that AI can keep working while your devices are off or locked, until the grant ends.
What Agentu Sealed is not
- Not zero-access during a live grant. While your AI is allowed to read, Agentu's enclave holds a working key for your memories. That is a weaker promise than Sovereign, and we say so rather than blur it.
- Not readable without your biometric. No passkey, no unlock. Agentu's staff, database, backups and enclave cannot start an unlock, and a stolen copy of anything we store opens nothing.
- Not a key for the AI. The AI gets answers to its questions, never the key, and never more than the memories relevant to one question.
- Not permanent. Nothing stays open past the idle or hard limit, and it can be revoked at once.
- Not the managed default. By default Agentu's platform can open a memory to answer your AI without a biometric from you. Sealed removes that: nothing opens unless you unlocked, and only the enclave reads.
- Not holding your own keys. If you want Agentu's servers never to hold a key that opens anything, press "Hold my own keys" instead; that is live today.
- Not the interim one-click attach. Today's one-click attach for Claude and ChatGPT keeps an "AI memories" project under managed keys, says so on screen, and is not Sealed.
- Not live yet. Sealed is in build this week and is marked live on this site only when it ships.
The default, the upgrade, and your own keys: one encryption, your choice of custody
| Managed by Agentu Live Default | Agentu Sealed In build Upgrade | Hold your own keys Live | |
|---|---|---|---|
| Where the key lives | In Agentu's hardware-backed key store in Switzerland | In the same vault, wrapped so that it only turns with your biometric passkey | Only on your devices, backed by a 24-word recovery phrase and a recovery kit saved wherever you choose, in a file Agentu cannot open |
| Can Agentu's platform open your memories? | Only to answer your AI, inside a request, with every open logged. Nobody at Agentu reads them. Not zero-access | Not on its own. Only during a grant you unlocked, inside a sealed enclave, for the time you allowed | Never: it holds no key that opens anything |
| How your AI reads | Unlock your phone and your memories are there; your AI asks and the platform answers. No codes to type | Through the enclave, on demand, after you unlock; no phone needed while the grant runs | Through the Agentu app on your phone, the Agentu Bridge on your computer, or a time-limited Away grant; it is up to you |
| Memories at rest | Encrypted, never stored in plaintext | Encrypted, throughout | Encrypted |
| Lose every device | A registered passkey on another device gets you back | A registered biometric passkey gets you back | The 24 words or the recovery kit get you back; without them, nobody can recover your memories, including Agentu |
| Plans | Every plan, personal and company | An option on Agentu Plus and Professional | Every plan; companies hold their own with recovery by a quorum of admin devices |
All three use the same AES-256-GCM encryption per category, the same signed hash chains, the same export and the same provable deletion. On a Dedicated instance, a single-tenant Agentu operated by Agentu in the region you choose, the same three apply. Key custody on the security page → · Dedicated → · Which plan gets which →
Questions people ask
Why would I upgrade from the managed default to Sealed?
Because by default Agentu's platform can open a memory to answer your AI whenever your AI asks, and you would rather that nothing opened without your biometric. Sealed keeps the convenience of the managed default, your AI works while your phone is in a drawer, but only after you unlocked, only for the time you allowed, and only inside the enclave.
Why would I choose Sealed over holding my own keys?
Because holding your own keys needs one of your devices unlocked, or an Away grant you made from it, for your AI to read. Sealed lets you unlock once, with your biometric, and leave. The price is the honest limit above: during a live grant the enclave holds a working key.
What does "sealed enclave" mean?
A processing environment on Agentu's servers that Agentu's own staff cannot log into or inspect, whose software is checked before your device hands it a working key, and that writes nothing readable to disk. It is where the on-demand decryption happens during a grant. It is hardware we operate and must be trusted for the length of the grant; that is the honest difference from Sovereign.
Does the AI ever see my key?
No. The AI sends a question and receives the memories relevant to it. The working key stays inside the enclave and is dropped when the grant ends.
Can I switch?
That is the design: from the app, with your biometric, between the managed default, Sealed and holding your own keys, without re-uploading your memories; only the way the key is held changes. Like the rest of Sealed, the upgrade and the switch are in build and are marked live only when they ship.
Is "Biometric-Sealed Encryption" a new cipher?
No. The encryption is the same AES-256-GCM used everywhere in Agentu. The name describes how the key is held: sealed to your biometric passkey, released only on your unlock, for a bounded time, into an enclave.