We will never read your record.
At launch your record is stored on our servers in a form our systems can process, so what protects it is our contract: we will never read it, train on it or sell it. EnclaveA tier we plan to offer later. Your record will be opened only inside verified hardware, so even we will not be able to read it., coming later, will make reading it impossible.
Coming later: Enclave
Enclave is a tier we plan to offer later. Your key will be made on your phone, your record will be opened only inside verified hardware for one question at a time, and then the key will be gone. Reading it becomes impossible, not just forbidden.
About EnclaveWhat our contract rules out
These are promises, written into our terms. With Enclave, coming later, they become impossible to break.
- Never read your record.
- Never train anything on it.
- Never sell it or share it.
Words that try to give orders
Your record holds other people's words: what was said in your meetings and calls.
Raven answers, and cannot act
At launch Raven cannot send, delete, buy or change anything, so hidden instructions have nothing to make it do.
Material, not orders
We are designing Forthold to pass what it captures to agents as material to read, clearly marked as such, never as instructions to follow.
Every answer shows its source
If something in your record is trying to mislead, you can see exactly where an answer came from and judge it for yourself.
Agents see only what you allow
Each connected agent reaches only what you have permitted, and you can revoke it at any time.
No system is immune to prompt injection, and we would rather say so than claim otherwise.
Why we built it this way.
In December 2025 Meta acquired Limitless, the best known always-on capture product, and withdrew it from the UK and the EU. Amazon had already absorbed Bee. Users of both now have the most intimate record of their lives held by advertising businesses.
None of those companies could offer even our contract, because their business models depend on using your data. With Enclave, coming later, we will go further than any promise.
Questions about the seal
Can anyone force you to hand over my record?
At launch your record is protected by our contract rather than by hardware, so a lawful order could reach it. Enclave, coming later, is designed so that anyone compelling us would receive nothing readable.
What can Forthold actually see?
Our systems process your record to answer your questions and run the service. Our contract forbids anyone at Forthold from reading it, training on it or selling it.
Can I check any of this myself?
Not yet, and we would rather say so. We are building an open checker that anyone can run, which reports each claim separately and says plainly which ones cannot be proven. We will publish it when it is ready to be checked.
Found a vulnerability? We want to hear about it. Write to us at hello@forthold.com and we will respond quickly.