Your chief
of staff.
Only yours.
Tell it things once and it remembers them, and where each one came from. It does the follow-ups. Before anything that spends money, sends a message, or cannot be undone, it stops and asks you. Nobody pays it to steer you.
- A passkey, not a password
- Your memory kept on its own, not in a shared pile
- It asks before anything that cannot be undone
- Every field that left, itemised
- Export everything, or delete it
- No company pays it to recommend them
- When it says no, it tells you why, and keeps the record
- Locked while stored, and honest about who holds the key
- One agent, named by you
- Nothing sent without your yes
Memory
Everything it knows, in one place
What it knows, what is waiting on you, and what it has sent out. Each thing says where it came from, and you can correct any of it in a sentence.
| Fact | How it is known | When |
|---|---|---|
| Board review moved to Thursday 3pm | you told me | 11 Aug |
| Acme renewal comes due 12 September | I read it | 2 Aug |
| Priya owns finance follow-ups | I worked it out | 28 Jul |
| Serena prefers email, never Slack after 7pm | you told me | 15 Aug |
| What it wants to do | Kind | |
|---|---|---|
| Reply to the accountant with the Q2 numbers | sends | waiting |
| Refund Meera for the double charge | spends | waiting |
| Hold Friday 3pm for the site visit | cannot be undone | waiting |
| Went to | What, exactly | Why | Keeps it |
|---|---|---|---|
| Anthropic | your question, names stripped | to think about your reply | no |
| Workers AI | 12 seconds of audio | to transcribe a voice note | no |
| Workers AI | one line of text | to turn a note into memory | no |
| nobody else | nothing | no third party got more than it needed | none |
Approvals
Approval is not a setting
Anything that spends, sends, or cannot be undone waits for you, with the work already done. There is no toggle that turns it off, because the boundary is the product rather than a preference.
It prepares. You decide.
Each thing waiting for you comes with what it is, why, and a no next to the yes. Saying no is one press, and it is remembered.
When it says no, you can see why
Every no it gives is kept with its reason, so a careful refusal is never mistaken for a fault.
Tell my accountant the Q2 numbers are ready.
Drafted the email to Priya with the Q2 revenue and margin, and nothing else from your books. It is ready to go the moment you say so.
Decision trace
Everything that leaves goes through one door
And that door keeps a record. What went, to whom, and why, one line per thing sent. Not a policy about what could happen. A record of what did.
Write up that voice note.
Sent twelve seconds of audio to be transcribed, and nothing else. On the record: what went, where, and why. None of our conversation went with it.
Trust
Checked, not promised
What is locked, what a court could take, and what it will never do are worked out from how it actually stores things, every time you look, and shown to you in plain words.
Owned by a passkey
You claim your agent with Touch ID or Windows Hello. There is no password to phish, reuse, or leak, and nothing for us to lose.
Your own locked room
Your memory is not one row in a shared table. It is kept apart by how the thing is built, not by a rule someone promised to follow.
Leave with everything
Export the whole of what it knows, any time, in one move. Portability is a day-one feature, not a roadmap item.
The command centre
One screen for everything it holds
What it knows, what it did, what it refused, and what it costs to run today. All on one screen, none of it hidden behind a settings page.
Beyond remembering
It refuses, and it says why
Two things nobody else shows you: what it declined to do, and what a court order could actually take. Both are worked out from how it is built, not promised in a policy.
Refusals on the record
A caution is never mistaken for a fault, because the no is kept with its reason and you can read every one.
What a court could take
Worked out from how each thing is actually stored, so the comforting answer cannot be given while we hold the key.
Hard limits
Six things it will never do
Not settings, and not promises. Each one is built in, with a check that fails the moment someone removes it.
Take a vendor's money
No company gets a say in what it recommends. If we ever take a vendor's money, it never touches advice.
Handle a raw credential
No passwords, no card numbers, no account secrets. It connects through the tools' own sign-in, or not at all.
Act without your yes
Anything that spends, sends or cannot be undone stops. There is no toggle, because the boundary is the product.
Send the whole of you
Whoever does a job for you gets only the details that job needs, and the record shows exactly which.
Pretend it cannot be compelled
It has to unlock your memory to think, so we hold the key and say so. Your protection is that you can leave with everything, not a promise that we cannot read.
Keep you
Take everything with you from day one. Close the account and the memory, the record and the name go with it.
In your control
Everything it may spend, set by you
Limits you choose, counted in one place, so the number you see and the number it stops at cannot disagree.
| What it may do | Used today | Your ceiling | |
|---|---|---|---|
| Thinking | 0 | 200 | set by you |
| Looking things up | 0 | 200 | set by you |
| Browsing | 0 | 10 | set by you |
| Calling | 0 | 10 | needs a line |
Ceilings you set
Lower any of them and it stops there rather than at our own limit.
Every session listed
Every browser holding a live session, and one press ends all the others.
Export or close
Take everything as one file, or close the account and retire the name for good.
On the record
What it would not do
What it declined to do, in its own words. Every card is a refusal it gave somebody, and the reason. Nothing here is a testimonial, because it has none yet and will not invent one.
It looks like it could be fraud, so it is held for you to look at rather than paid on your behalf.
You never approved sharing that, and it does not guess at permission it was not given.
It does not have it, and it will not invent a figure to be helpful.
It takes instructions from you, not from whoever happens to be on the line.
That cannot be undone, so it waits for an explicit yes even when the request sounds routine.
A turn that runs long is declined with the reason, rather than quietly costing you the difference.
Your street address is a risk to hold and buys you nothing.
I don't need your birthday to help you.
I don't need your number.
Not needed, and it is often a security question answer.
Your postcode is a risk to hold and buys you nothing.
I don't need your email list.
The difference
The best answer is still an answer
Somebody still has to run the week. That is a different job from answering well, and it is the one this was built for.
Answers what you ask, and is excellent at it.
Answers what you ask, and is excellent at it.
Carries the load you would hand a chief of staff.
Not a better answer. A different job: the prep, the follow-ups, the coordination, and the things that were owed to somebody.
Anthropic’s product, on Anthropic’s models.
OpenAI’s product, on OpenAI’s models.
You, and nobody else, by how it is built.
That is built in, not a value on a page, and it is why we will not take vendor money that touches a recommendation.
Agent modes act. You configure the permissions.
Agent modes act. You configure the permissions.
Approval is not a setting.
Anything that spends, sends, or cannot be undone waits for you. There is no toggle that turns it off, because the boundary is the product rather than a preference.
A privacy policy and data controls.
A privacy policy and data controls.
A record of everything it sent out, line by line.
What went, to whom, and why, line by line. Not a policy about what could happen. A record of what did.
Anthropic’s.
OpenAI’s.
Whichever is right for the step, and none of them keeps you.
We rent the thinking and keep your memory. It never becomes a model company's asset, which is why the model can be swapped.
Claude is a trademark of Anthropic. ChatGPT is a trademark of OpenAI. Neither is affiliated with Trellvix. Their columns describe those products as their own public documentation did on ; both ship quickly, so check them rather than taking our word for it.
Your agent.
Available today.
Start with the work that steals a week: follow-ups, drafts, reminders, context, and the loose ends nobody is holding.
- Memory
- Every fact, and how it is known
- Approvals
- Nothing sent or spent without your yes
- Decision trace
- Every field that left, itemised
- Research
- Sources cited, nothing invented
- Follow-ups
- Nothing dies in a past chat