What would you like to ask?
Your words are scanned and masked before anything is sent, then rehydrated on return. Every call comes back with a content-free receipt. The tee lane runs on attested confidential GPUs — and fails closed.
Sign in
We email you a magic link — no passwords, and your browser never holds an API key.
Operator? Use an API key instead.
Stored only in this browser’s localStorage and sent as a Bearer token.
Scanned for sensitive values before sending · tee fails closed — it never downgrades
Company Brain
Your tenant’s private document store. Documents are scrubbed before chunks are embedded or stored, and embeddings run locally (bge-small, 384-dim) — ingestion makes no network call. Deleting removes the tenant’s file.
Ask the brain
Documents
Agents
Per-tenant agents run as one hardened, network-isolated sandbox per customer — no network egress except the ZkTerminal gateway.
Account
Your wallet
Signing in with your email creates a wallet only you control. These addresses are public — share them freely. Your recovery key is never sent to us and never leaves your browser; it is shown by Magic in its own secure window.