Security
Built so one team can never see another team's notes.
What mem-sync shares, where it's stored, who can read it, and how you control who gets in.
What leaves your machine
Only the short notes claude-mem writes about a session, and only from folders you link to a space. Your prompts and raw tool output stay on your machine. Mark a folder as never shared and nothing from it is sent.
- Claude's notes (title, summary, files touched)
- Branch, commit, repository address and pull request of shared notes, if git is used
- Your prompts
- Stays local
- Raw tool output and file contents
- Stays local
- Folders not linked to a space
- Stays local
How hosted teams are kept apart
A database per team
Each team gets its own Postgres database and its own login. That login can't connect to any other team's database or create new ones.
Encrypted with your team's key
Note text is encrypted with AES-256-GCM using a key for your team alone. Titles are stored as keyed hashes. A copy of the disk or a backup shows nothing readable.
Encrypted in transit
HTTPS from your machine to the hub. Every connection from the hub to a database uses TLS with the server certificate verified.
Read only while answering
The hub decrypts notes in memory while serving your request. Logs record the route, your team's id, the status and timing, never note text.
Where it runs
Hetzner, Ashburn, Virginia (US), behind Cloudflare. The database isn't reachable from the internet.
Delete means deleted
Delete a note for everyone and it's removed from the hub and every linked machine. Delete your team and its database is dropped.
You control who gets in
Admins add people by email. Each team chooses how they sign in to its hub.
Google, GitHub or Microsoft
Sign in to the portal with an email the provider has verified; their two-factor applies. Machines connect with a key from the portal; one-click sign-in from Claude Code is coming.
Your Cloudflare Access
Put the hub on your own hostname behind your Access app: Okta, Entra ID, Google Workspace, any OIDC or SAML provider, and device rules.
API keys
For scripts and CI. Admins issue and revoke them per person, and can switch keys off.
Want the only copy?
Point your hub at your own Postgres (Supabase, Neon, AWS RDS or your own server). We copy your notes across and delete ours; your database then holds the only copy, readable by you. Or run the whole hub yourself with Docker Compose.
Compare plans →Report a security issue
Email [email protected]. We reply within 3 business days.