Skip to contentalgnTry theDEMO

Technical

Transparency & Verification

Trust shouldn't rest on taking our word for it. We publish how algn works so it can be checked.

Under open reviewUpdated This work is still developing. We welcome corrections and contributions.

Most technology asks you to accept a privacy policy while keeping everything that matters behind closed doors. You are asked to trust that data is safe, that algorithms are fair, and that corporate promises will not change when incentives shift.

algn is built in the opposite direction. Trust cannot be established by marketing slogans. The only way to prove a platform respects your mind and protects your memory is to make the system verifiable in the open.

Most people will never read a cryptography specification or inspect a network payload, and they shouldn’t have to. We publish our technical architecture so security researchers, academics, and sceptics can audit our claims and verify them for everyone.

How we operate

  • Publishes the architecture behind every privacy and AI claim
  • Open-sources the on-device memory vault as public infrastructure
  • Provides in-app cryptographic inspection, outbound egress receipts, and local embedding checks
  • Separates plain explanations from deep technical specifications
  • States what our research does not prove and where gaps remain
  • Maintains an open review ledger and credits independent corrections

What we refuse to do

  • Ask you to trust promises that can quietly be rewritten
  • Hide behind vague marketing copy when explaining data flows
  • Publish abuse thresholds that help bad actors game the system
  • Expose proprietary routing and weights that drive Sera
  • Bury trade-offs, limitations, or negative results in fine print

If a claim matters to your privacy or your agency, you shouldn’t have to take it on faith. Publishing the architecture is what turns a promise into something verifiable.

Scroll to go deeper

This website is structured to match how people explore ideas. We separate the human experience from the engineering underneath:

  • The Surface (plain white): The human experience in plain language. How algn feels to use, what we believe, and the choices we make. No jargon and no unexplained system names.
  • The Depth (technical dark): The mechanics. How data travels, where encryption keys live, how background agents coordinate, and what each choice costs.
  • Whitepapers & Research (/research): Academic papers with numbered claims, citations, formal threat models, and explicit statements of what the research does not prove.

Every content page and research paper carries a public review status at the top, linking directly to a review ledger and correction form at the bottom. Anyone can challenge our claims, submit missing sources, or flag errors.


This website reflects what actually shipped in the build today.

When code ships or policies change, public documentation updates to match the current build. Public review ledgers on each content page record changes and verified corrections over time, keeping the platform accountable to the people who use it. Research papers remain formal, static academic records with published versions and errata ledgers.


Pending release Open repository pending release.

Most deployed AI memory treats personal reflections as an append-only cloud database: flat lookup tables that hoard personal data on remote servers and degrade over time.

algn built a different foundation. Sera’s memory is a biological-inspired, local-first cognitive system that consolidates similar reflections, fades situational noise while preserving core values, clusters themes across weeks, and operates entirely on your device under keys only you hold.

Because solving longitudinal, privacy-preserving memory is a foundational challenge for human-centred computing, we are releasing the vault core as an open-source project.

  • Verifiable privacy: Security researchers can inspect the local key generation, encryption primitives, and deletion routines to confirm that memory keys never leave the device.
  • Public infrastructure: Universities, research institutions, grant-backed initiatives, and independent developers can reuse the memory architecture for their own use cases without needing to build centralised surveillance infrastructure.
  • Data-flow manifest: Every background process, the data it touches, where inference occurs, and its zero-retention guarantee is published in an inspectable manifest.
Nature photograph 02Nature photograph 03Nature photograph 04Nature photograph 05

Solving privacy-preserving memory is bigger than one product. The architecture belongs in the open.

Claims on algn are designed to be checked directly rather than taken on trust.

  • Encrypted-at-rest inspection: Free text in the vault inspection view is displayed as a SHA-256 hash and byte length by default. Revealing a record displays the raw initialisation vector and record-bound AES-256-GCM ciphertext stored on your device alongside its plaintext hash.
  • Outbound network receipts (Egress): A rolling 24-hour log records every request leaving your device, showing Measured client payload bytes and SHA-256 hashes (which you can match against your browser’s developer tools) side-by-side with server Declared zero-retention hop receipts.
  • On-device embedding check (Clusters): You can inspect the 384-dimension vector for any memory and run a local Re-embed check to verify that cosine similarity matches (1.000) on-device without network traffic.
  • Metacognitive and voice logs (Meta and Voice): A rolling 24-hour log displays background pattern analyses, safety grounding, and Be readings, including the exact note passed to Sera on each turn.
  • Key integrity and crypto-shredding (Keys and Sync): You can verify that your browser’s Web Crypto keys are non-extractable, test your passphrase against its key check value, or inspect the .algn backup file. Deleting your vault permanently destroys the encryption key (crypto-shredding).
  • In the code: The open-source memory vault repository lets cryptographers and developers audit the cryptographic implementation (AES-256-GCM via native Web Crypto) and verify that no telemetry or backdoors exist.
  • In the research: Every research paper publishes its methodology, citations, and explicit limits. If our data or reasoning is flawed, the open review ledger records the correction publicly.

Unconditional disclosure is reckless. Total secrecy is extractive. algn draws an explicit boundary between what must be public and what must be protected.

Our standard is simple: we publish what the system does and why it works; we withhold what would help a bad actor break it or a competitor clone it.

PUBLISHED OPENLY (to enable verification) · Record-bound AES-256-GCM client encryption, Web Crypto key derivation, and cryptographic shredding · 24-hour Measured vs. Declared egress receipt audit schema and SHA-256 payload matching · On-device 384-dimension vector embedding and local cosine re-embed verification · Zero data retention guarantees and data-flow routing manifests · Multi-agent orchestration principles and memory consolidation mechanisms · Empirical research, statistical timelines, and full citation libraries · Known architectural gaps, limitations, and public correction ledgers

WITHHELD BY DESIGN (to protect members and security) · Anti-abuse detection heuristics and crisis classification thresholds · Matching salt algorithms and network defence configurations · Model-per-role prompts and proprietary conversational steering assemblies · Internal scoring weights and commercial operational infrastructure

Publishing safety thresholds would provide an instruction manual for malicious actors looking to bypass crisis protocols or harass matched members. Keeping those heuristics private protects the people inside the community. Similarly, proprietary prompt steering assemblies represent years of careful research and engineering that make Sera unique, and are kept to protect the organisation’s viability.


How can I verify what leaves my device?

Open the vault in the app. The Egress tab logs every outbound turn for 24 hours with its exact byte count and SHA-256 payload hash, which you can compare directly against your browser’s developer tools, alongside the server’s zero-retention receipt confirming the hop.

How do I know my vault is really encrypted on my device?

The in-app vault inspection view displays raw AES-256-GCM ciphertext and initialisation vectors directly from your device’s storage. Device keys are generated through your browser’s native Web Crypto API and marked non-extractable, so algn never holds them. When you delete your vault, the key is destroyed (crypto-shredded) on your device.

Why do you share so much technical information if most users won’t read it?

Because trust should not depend on taking an organisation’s word for it. Publishing our architecture allows independent security auditors, researchers, and critics to inspect our claims. That verification protects every member who uses the platform, whether they read the technical papers or not.

Why are you open-sourcing the memory vault?

First, to prove our claims: client-side encryption is only meaningful if the code running on your device can be independently verified. Second, to give back: building a local-first memory system that consolidates, decays, and clusters patterns is an important problem for AI, and making it available as open infrastructure helps researchers, grant-funded projects, and developers build tools that respect human autonomy.

What does algn keep private or redact?

We withhold safety classifier thresholds to prevent bad actors from gaming crisis detection or matching protections, server-side salt configurations to safeguard user privacy, and proprietary model assemblies and scoring weights that represent our core engineering.

How does the review and verification ledger work?

Every content page and research paper on this site is under open review. If you identify a factual error, a broken citation, or a flawed technical claim, you can submit a correction using the form at the bottom of the page. Substantive corrections are applied, logged with dates and rationales in the public review ledger, and credited to the contributor if requested.

Open review

This is a living document. Our thinking is still developing and some of it will turn out to be wrong. If a claim looks off or a source doesn't hold up, tell us below.