Your memory, kept like it matters.
Alwen holds the context behind your work. Here's where it lives, who can reach it, and what we do to keep it safe.
- Your notes stay yours.They live in a private repository: in your own GitHub, or one Alwen keeps for you that only Alwen's systems can open. Alwen's servers keep only an index they can rebuild.
- One repository, nothing else.Alwen can reach the vault it creates for you and none of your other code.
- Never used to train models.Not by us, and not by the model provider we use, under its commercial terms.
- Encrypted and backed up.Protected in transit and at rest, and restorable to any point in the last week.
Two places, one source of truth.
Your notes live in a private repository, in your GitHub or kept by Alwen. Alwen's servers keep only what they need to answer quickly, and all of it can be rebuilt from that repository.
- Every note, rule and decision
- The full history, commit by commit
- Yours to clone, or download any time
- Your account: name and email
- Connection tokens, encrypted
- A search index of your notes
- Job records and a log of what Alwen did
Who can reach it
Alwen's GitHub App gets one repository and can't see the rest. A vault Alwen keeps sits in a separate organization, reached by a separate app that has no access anywhere else. Each tool connects with its own sign-in and can be disconnected any time. In Slack, Telegram and Discord, @alwen only reads messages meant for it. In a team, everyone reads the shared vaults, never each other's own; on Business you choose which tools read each vault, and the team's log shows what Alwen did.
What AI sees
Only the notes a request needs — never your whole vault — sent to Claude through Anthropic's commercial API, which by default doesn't train on inputs or outputs. Alwen doesn't train models on your notes either.
Encryption
TLS in transit. Tokens encrypted before they're stored. Database and backups encrypted at rest.
Backups
The database can be restored to any point in the last seven days, and your vault's history is in Git.
Leaving
Disconnect and your vault stays where it is. Delete your account and Alwen removes what it stores — details.
Certifications
Alwen doesn't hold a SOC 2 report or an ISO 27001 certificate yet. If your company needs one, tell us — it shapes what we work on next. Which companies process data for us, and why, is in the privacy policy.
Found a vulnerability?
Tell us first, with what you found and how to reproduce it. Give us a chance to fix it before you share it. We read every report.