Builders trust MemoryWell near their money, their bids, and their license. We take that seriously. Here’s how the service is designed to keep your data safe — and honest about where we are as a young company.
Your own private box
Each customer’s workflows run on a dedicated private instance provisioned for them — not a shared, multi-tenant pool. Your files, keys, and records stay in your environment. You own the instance; we operate and maintain it on your behalf. This isn’t only a privacy choice — it’s the core of the architecture.
Access control
- We access your instance on a least-privilege basis — only what’s needed to set up, operate, tune, and support it.
- Administrative access is limited to the people who need it to do their jobs.
- Credentials and secrets are stored securely, never in plain text in code.
Data in transit and at rest
- Traffic to this site and to the service is encrypted in transit (HTTPS/TLS).
- Data stored on your instance is protected by the security controls of the underlying infrastructure and access restrictions described above.
AI processing safeguards
Where AI models process your documents, we use providers under agreements that prohibit training on your content. The product doctrine adds a further safeguard: the system evaluates rather than fabricates, reports uncertainty, and — most importantly — never sends, posts, signs, or pays autonomously. A human approves every consequential action, which sharply limits the blast radius of any single mistake.
Reliability
We keep the software updated and monitor the instances we operate. Because each instance is isolated, an issue on one does not spread to others.
Reporting a vulnerability
Found something that looks like a security issue? Please tell us before disclosing it publicly. Email hello@trymemorywell.com with the details and we’ll respond promptly. We appreciate responsible disclosure.
Honest note
MemoryWell is an early-stage, founder-run company. We’ve designed for security from day one, but we don’t yet claim formal third-party certifications (such as SOC 2). If your project needs specific controls or documentation, tell us — we’ll be straight with you about what we can and can’t provide today.