Security

Last updated October 20, 2026.

Your files stay in a sealed room

Each question runs in a worker that's separate from the website. The models can only read the files attached to that question. They can't change them or run code, and the worker can reach nothing on the internet except the four labs' APIs.
Text in a file that tries to give the AI orders (say, "ignore the question") is treated as content, and the memo tells you it was there.
The model keys live only with the worker, in a file only the server's administrator can read. The website holds no model key.
The website and the worker run as separate locked-down users; neither can read the other's data.
Spending caps per question and per day stop a runaway run.

No passwords. A sign-in link works once, for 15 minutes.
The sign-in cookie can't be read by scripts on the page and is only sent over HTTPS.
HTTPS only, and the pages load no third-party scripts.

Steelmemo runs on a server in Oregon, USA.
Each night the database is backed up, encrypted with a key the server itself doesn't hold, and kept for 14 days.
Files you attach are deleted after 30 days, and everything is deleted when you choose Delete my data.