private by design
Your data never leaves your machine unless you say so.
Memo's security model is not an afterthought — it is the foundation. Every layer is built with the assumption that no server can be trusted.
AES-256-GCM
API keys encrypted on disk. Cloud data encrypted with PBKDF2 (600K iterations) before upload. Only your passphrase unlocks it.
End-to-end sync
Google Drive backups are encrypted before leaving your machine. Google cannot read your data — even if compromised.
Zero telemetry
No analytics, no crash reporters, no tracking. Memo never phones home. The only external connection is optional cloud sync.
Sandboxed agent
8 tools run permission-gated. 23 dangerous commands blocked. Path traversal prevented. 30 calls/min rate limit. Symlink protection.