Aegis

Everyone deserves a chief of staff. Now anyone can have one.

Aegis is a digital chief of staff that works only for you. You talk; it remembers, looks things up, and keeps your world in order - and it answers to no one but you.

Free to start. No invite, no waitlist. Your memory is yours - export it any time.

Listening
Nothing is heard until you start it.
One agent, one person - never shared Passkey ownership, no password to leak Fiduciary by construction
How it works

Three steps, and then you just talk.

01

You talk

Say it the way you'd say it to a person. No commands to learn, no menus - Aegis listens only when you start it, and only to you.

02

It remembers

Everything you tell it is kept and made searchable by meaning, not just words. Ask months later and it recalls - because your memory is the whole point.

03

It acts - once you approve

It drafts the email, finds the time, lines up the call. Anything that spends, sends, or can't be undone waits for your yes. It proposes; you dispose.

What it does

A chief of staff handles the admin so you don't.

It remembers, and it remembers how it knows

Names, numbers, the thing you said once in passing. Every fact carries where it came from - whether you told it, it read it somewhere, or it worked it out. So you can always ask why it thinks something.

What it knows home.city — Bengaluru · you told me bill.electricity — 4,200 · a letter from BESCOM habit.morning — reads before email · I worked it out

It drafts. You send.

It reads what arrives and writes the reply in your words. Nothing leaves without you seeing it first - and anything irreversible needs your fingerprint, not just a click.

Waiting on you Email ravi@…: "Thursday, 4pm instead?" Touch ID to send. Nothing has gone yet.

It tells you what left

Every time it goes out to the world, it writes down where, why, and which of your details travelled. Not a policy - a record you can read, and take with you.

What left this machine Brave Search · steel prices · nothing about you was involved Claude · work out what you meant · home.city

Books and schedules

Finds the slot, holds the time, sets the reminder - and never double-books your life.

Looks things up

Goes and finds the price, the hours, the answer - and tells you plainly when it can't.

Keeps your world in order

Follows up on the loose ends, surfaces what's due, quietly holds the threads you drop.

Calls on your behalf

Makes the appointment, asks the question, waits on hold - with your approval, in your name.

Why Aegis

Most assistants work for whoever pays them. This one works for you.

01

Works only for you

No ads, no rankings, no vendor money can ever touch what it recommends. If loyalty were for sale, it would not be a chief of staff.

02

You approve what matters

It proposes; you dispose. Anything that spends, sends, or cannot be undone waits for your explicit yes - every time.

03

You can always leave

Full export of everything it knows about you is a button, not a support ticket. Portability is the promise, not the roadmap.

What it feels like

You just talk. It handles the rest.

Aegis
You
Remember my plumber's number is 998877.
Aegis
Kept.
You
What've you got on the plumber?
Aegis
Your plumber's number is 998877.
You
Book a slot Thursday and email him the details.
Aegis
Here's the draft and the time. Say the word and I'll send it.

Your life admin, handled. Your data, never anyone's product.

The difference

Every other assistant is paid by somebody who isn't you.

Ads inside the answer. Sponsored results in the recommendation. Your conversations used to target you somewhere else. None of that is a bug in those products - it is how they are funded. Aegis has one client, and there is no second party to sell.

Yours to own

It's your agent. In every sense that matters.

Owned by a passkey, not a password

You claim your agent with Touch ID or Windows Hello. There is no password to phish, reuse, or leak - the key never leaves your device, and only you can open the door.

One agent, one person

Your agent is a single isolated thing with its own memory - not a row in a shared table with your name on it. Nobody else's agent can ever see inside yours.

Leave with everything, or leave nothing behind

Export the whole of what it knows about you, any time, in one move. And when you want out, closing your agent really does delete it - the memory, the ledger, the attachments, the passkey - and retires the name so nobody else is ever given it. Both are day one, not roadmap items.

Told plainly where things go

When Aegis goes out to the world to look something up, it records the trip. You are never left guessing what left, or why.

Where your things are

Your memory lives in its own database. Not a row in ours.

One database per person, not one table for everybody

Most products keep everyone in one place and separate you with a filter on a query. Get that filter wrong once and somebody reads somebody else. Your agent is its own database with its own storage - there is no shared table, so there is no query to get wrong.

Encrypted where it sits

What it knows is encrypted on disk under a key derived for your agent alone. A stolen disk, a leaked backup, a snapshot: bytes. And the honest limit, since a padlock should not imply more than it does - that protects the storage, not us.

Some things even we cannot open

Anything you seal is encrypted in your browser with your passkey before it reaches us. We hold the bytes and the label you wrote. We cannot read the rest - not for you, not for anyone, not if we were asked to.

What we could be made to hand over

Everything else it knows, readable - because it has to read your memory to think. We would rather say that plainly than let encryption imply otherwise. Anything you sealed is the exception, and it is the only claim here that survives a subpoena.

The limits

Four things it cannot do. Each one is why the rest is worth having.

It cannot spend, send, or delete on its own

Anything irreversible stops and waits for you - and not by policy. The code that carries out an action accepts only one that you approved, so there is no path where a scheduled job or a clever sentence talks it into acting alone.

Nobody can pay it to change its answer

There is no advertiser in this product and no paid placement in anything it suggests. When it recommends, it is reading what it found, not what somebody bid. You are the only party it has.

It cannot give you a number it cannot source

A figure it cannot trace back to something you told it or something it actually read does not get spoken. Ask what it found when it found nothing, and it says so. Being confidently wrong is the failure that ends the relationship, so it is treated as the one that matters.

It cannot install a skill from a stranger

There is no marketplace and nothing to publish into. When a rival opened one, roughly a fifth of what appeared there in its first month was malicious. What your agent can do ships with your agent.

Questions

The things worth asking first.

Do I have to keep re-explaining myself?+
No. It keeps what you tell it and connects it up, so "my accountant" and "Priya at Deloitte" are one person rather than two facts. It also keeps where each thing came from - whether you said it, it read it, or it worked it out - and it will tell you which.
How do I know it isn't confidently wrong?+
It would rather say it does not know. A figure it cannot trace to something you gave it or something it actually read does not get spoken, and when a search turns up nothing it says so instead of filling the gap. Being confidently wrong is the reason people quit assistants, so it is treated as the failure that matters.
How long does it take to set up?+
You name it and claim it with Touch ID. There is nothing to configure and no accounts to connect before it is useful - you talk to it, and it starts keeping what matters.
What about things I do not want it to read at all?+
Seal them. Anything you confide is encrypted in your browser with your passkey before it reaches us, so we hold the bytes and cannot open them - not for you, not for anyone. It can tell you something is there; it cannot tell you what it says.
Who pays for it, and could that change what it tells me?+
You do. There is no advertiser in this product and no paid placement in anything it recommends. Perplexity wound its advertising down in February 2026 on exactly this reasoning - that ads make people suspicious of every answer.
Can I make it forget something?+
Yes, and it is the one thing it does that cannot be taken back, so it asks first. It records that a deletion began before anything is removed, which is how you can tell a finished deletion from an interrupted one.
What does it do when I am not there?+
It looks, and it never acts. A routine you write in your own words lets it notice things while you are away, but anything that spends, sends or cannot be undone stops and waits for you - being on a schedule is not permission.
What could you be forced to hand over?+
Everything it knows about you, readable - because it has to be able to read your memory in order to think. Encrypting it does not change that, and we would rather say so than let a padlock imply otherwise. The exception is anything you sealed: those we could only produce as bytes we cannot open.
Is it really free?+
Yes - free to start, no invite and no waitlist. Fair-use limits keep it sustainable while it's early; nothing you have to think about in ordinary use.
Who can see my memory?+
Only you. Your agent is isolated to you and opened by your passkey. No shared database holds everyone's data behind a query someone could get wrong.
Can it do things without asking?+
No. Anything that spends, sends, or can't be undone waits for your explicit approval. Aegis proposes; you decide.
Can I change its name?+
It starts as Aegis. Rename it to anything you like just by asking - it's your chief of staff, so it answers to whatever you call it.
What if I want to leave?+
Export everything it knows in a single move and go. If you want it gone as well, closing your agent deletes all of it - what it learned, the record of what left, anything you sealed, and the passkey itself - and retires the name so it is never given to anybody else. Take your copy first, because afterwards there is nothing left to export. No lock-in, ever - that's the point.

Meet your chief of staff.

It starts as Aegis. Rename it whatever you like - just ask. It's yours.