Encrypted on the way in and while it's kept.

Every connection to New Brain is encrypted. The database, backups and file space are encrypted on disk. Your original files, recordings, transcripts and the raw content from your apps are encrypted again with a key that belongs to your brain alone. When you delete a brain, we destroy that key.

We never use your data to train AI models.

Not ours, and not anyone else's. It's written into our terms and shown in your settings.

You choose what each AI tool can see.

When you connect an AI tool, you sign in to New Brain and pick the areas it may use. Change that any time without reconnecting. You can send everything a tool saves to To check first, and Activity shows every look-up and save each tool made, with the time.

What an AI tool does with an answer after it reads it is covered by that tool's own terms.

Nothing an AI guessed is kept without you.

Anything an AI tool works out on its own waits in To check. Old facts are marked as replaced and kept in history, never erased, so a wrong fact can be traced and undone.

Export everything, whenever you like.

Export your whole brain, or one area, as Markdown and JSON files, with every source and the full history. Exporting is never blocked by a plan limit.

Delete one thing or everything.

Delete a single memory, a project, an area, everything one app brought in, or your whole brain. When you delete a brain, AI tools lose access straight away, and the data is gone from our systems, backups included, within 30 days. We email you when it's done.

What an admin needs to sign off.

Permissions per area.
Who can read, who can add, and which AI tools may use each area.
Activity log.
Who and which AI tool did what, and when: 90 days on Team, a year on Business.
Single sign-on.
Through your identity provider on Business, with staff added and removed automatically.
Data location.
US or EU, chosen when you create the brain, on Business.
Each company kept apart.
Every brain's data is walled off from every other customer's at the database level.

Where we are on audits.

We plan to start a SOC 2 Type I audit in November 2026 and aim to have the report before launch. We'll publish the date here when it's in hand. An outside security test is part of our pre-launch checks.

Found a security issue?

Email info@trynewbrain.com with "Security" in the subject. Tell us what you found and how to reproduce it. We'll reply and keep you posted while we fix it.

Questions, answered.

Where is my data stored?

In the US or the EU. Business customers choose when they create a brain.

Can I use New Brain offline or on my own servers?

Not yet. New Brain runs in our cloud. An offline mode and self-hosting are on our longer-term plans.

Questions from your security team?

Send them over. We'll answer in writing.