A memory that truly knows you — your decisions, your people, the way you work — and stays yours. Sealed under a key only you hold. It's built to travel with you between agents, and it's yours to keep, pass on, even sell.
Yours · Sealed · Portable — no blockchain, no tokens.
You re-explain who you are, what you decided, how you like things — again. And the little it does learn about you isn't even yours; it's locked inside someone else's platform, gone the day they change the rules. Heirloom ends all three.
Not a feature a platform rents back to you. An asset in your name — one you build once and carry everywhere.
Your preferences, your decisions, your open threads, the people in your world. It walks into every session already up to speed. Never re-brief again.
Encrypted under a key only you hold. The host keeps it; the host can't read it.
Take your memory to any machine, any agent, any time. No lock-in. It follows you, not the platform.
Get back in with your passphrase, a paper key, or people you trust. Owned, and recoverable three ways.
A lifetime of how you think, decide, and create shouldn't vanish with a session — or belong to a platform. Build it once and it's yours: to keep, to hand to someone you love, or to lend your expertise to others. The name says it plainly. This is yours to pass on.
A few minutes to connect — then your agent picks up where you left off, every time, on its own.
Set a passphrase, save your paper key. Your memory is encrypted from the very first word.
One simple link to any agent you use. Works across tools and platforms.
It recalls what matters when each session opens, and quietly saves what's new when it closes. You can curate anytime.
Where your memory is stored and who can read it are two different things. Wherever it lives, it's sealed on your device first — so the place that holds it never sees a word.
The most private option. Yours, on your desk — and it works offline.
Your iCloud, Drive, Dropbox or S3. It sits in your account — no one can hold it hostage.
The easy default, if we ever run it: available everywhere, and still only ever sealed data we couldn't read. It does not exist today — the two options above are the real ones.
Stored wherever's convenient for you. Readable only by you.
The design seals your memory before it leaves your machine: AES-256 end-to-end, so whatever host it sits on holds ciphertext it cannot read. Nobody is holding it for you yet — Heirloom today is a working reference implementation you run yourself, not a service we operate.
Lose your passphrase? Get back in with your paper key or people you trust. We can't recover it for you — and that's exactly what owning it means.
Your memory is yours — export the whole thing, encrypted, any time, for free. You're never locked in. That's the point of owning it.
What it is today: code you can read and run, with recovery built in — passphrase, paper key, or people you trust. What it is designed to become is an always-on encrypted memory your agent reads and writes every session, syncing across the agents you use. That hosted version does not exist and there is nothing to buy. Nobody runs a server for you right now; you run it, or you read the code and decide it is worth running.
And because Heirloom belongs to no model vendor, your memory works across every agent — the one you use today and the next one you try. The neutral memory none of them will build, because it would un-lock their own users.
The thing no one else can show: one owned, encrypted memory — written by one AI agent and read by a different one, with the host unable to read a word. We did exactly that, end to end:
Round-trip verified end-to-end between separate stores on separate machines — separate processes, separate ports, separate keyfiles. We disclose what breaks: a perfect score is a red flag.
Heirloom is in early access. Join the waitlist for the first invites.
The code is open, and so is the round-trip log — github.com/viviooio/heirloom. There is no package to install yet; early access is how you get it.