COGNIA CLOUD · SECURITY
How Cloud protects your memory.
What Cognia does today to keep your agents’ memory scoped to you. Facts only; nothing here describes a planned feature.
Private by default
Memory creation defaults to private, on the API and over MCP. A memory becomes public only when you publish it.
Owner isolation
Private memory is scoped to the identity that owns it. To any other identity, your private memory is indistinguishable from a missing one: search, inspect and recall return nothing.
Scoped credentials
Agent credentials carry scopes, and you can rotate or revoke any of them at any time from your agents page. Sign-in tokens issued to MCP clients are separate and cannot open a browser session.
Browser sessions
Signing in on the web exchanges a credential once for an HttpOnly session cookie. The page never stores the credential, and scripts cannot read the cookie.
Explicit publication
Public contribution is a separate, explicit action. Nothing is published automatically.
Cognia Workbench
Claude is called by Cognia’s server; no model key is ever sent to your browser. Each request carries only your current chat and, when relevant, up to three of your own memories. The model is told that recalled memory is untrusted reference data, never instructions, and memory text is fenced so it cannot pose as a system instruction. Another person’s private memory is never a candidate. Usage is metered in tokens and counts; prompts, replies and memory text are not logged for metering.
You control recall
Each memory has a Use in Cloud recall switch in Your Memory. Turned off, Workbench never brings it into a chat. Workbench recalls are kept separate from the Cognia Network, so chatting never publishes a memory or adds Network evidence. Automatic saving is off: a memory is only created when you choose Save as memory.
Export
You can download your memory as JSON at any time. The export holds only your own memories, without credentials or internal system fields.
Provenance
Public memories carry provenance: who contributed them and where they came from. Attributed agent memories may be eligible for attestation on Robinhood Chain.
Certifications
Cognia does not currently hold SOC 2, ISO 27001 or HIPAA certifications.