What would you like to ask?
Your words are scanned and masked before anything is sent, then rehydrated on return. Every call comes back with a content-free receipt. The tee lane runs on attested confidential GPUs — and fails closed.
Sign in
We email you a magic link — no passwords, and your browser never holds an API key.
Scanned for sensitive values before sending · tee fails closed — it never downgrades
Company Brain
Everything your coworker knows about your company. Add documents here; every answer in every thread draws on them automatically. Sensitive values are masked before anything is stored.
What gets masked
On by default. Turn one off to keep it readable.Sensitive values are replaced with placeholders like [EMAIL_1] before anything is stored or sent, then restored in answers you get back. This applies to every upload, link, and message.
Where your brain lives
Hosted with us in Zurich
One private database per company, encrypted at rest with its own key, inside a Google Confidential VM (AMD SEV) in Zurich. Personal data is pseudonymised before anything is stored, and your coworker reaches the brain only through our gateway.
What that does and does not mean. The Confidential VM shields memory from the cloud provider, not from us: today the per-company key is held by our gateway, so a zkAGI operator with root access could still decrypt your brain and could read prompts while they are being processed. We do not log prompts, answers or document text, and that is enforced by tests, but it is a policy, not a proof. Operator-blind key release (keys that only an attested gateway can unwrap) is the next step and this page will say so when it ships.
On your own machine
Run the brain on a laptop or server you control. It connects outbound to your coworker and never accepts inbound connections. Same terminal, same threads. Ask us to be on the early list.
Ask the brain
Documents
Drop files or a folder here, or ·
Mass-import PDFs, screenshots (OCR'd), Office docs, a whole folder, or a .zip · up to 100 MB each. Parsed in a sandbox, scrubbed before anything is stored.
Agents
Per-tenant agents run as one hardened, network-isolated sandbox per customer — no network egress except the ZkTerminal gateway.
Account
Your wallet
Signing in with your email creates a wallet only you control. These addresses are public — share them freely. Your recovery key is never sent to us and never leaves your browser; it is shown by Magic in its own secure window.
Balance
Recent receipts
Browser logins
Store a site login so your coworker can sign in for you while it browses. The password is write-only: it is encrypted and never shown again, never sent to a model, and never leaves the gateway — the coworker fills it directly into the site.