Straight answers.

We can't read your stored data — it's encrypted under keys only you hold. During an active session it's decrypted only in memory, never logged or persisted in the clear.

Self-hosted runs on your own hardware with no operator in the loop — genuinely end-to-end, and the engine is open source so you can audit it. Hosted Symmate is encrypted at rest under your keys and decrypted only in memory under zero-retention; hardware attestation (coming) will make in-use blindness verifiable rather than trusted.

Warrant-proof against us — we have nothing readable to hand over. But you remain a keyholder and can still be compelled, so we keep that caveat honestly attached.

The data-egress gate is deterministic — code, not a language model — and on your own hardware you can audit it. Behavioural refusals are prompt-level and probabilistic: strong, but jailbreakable in principle. We never call those proven.

No. The engine (Mox-Framework) is open source under AGPL-3.0 and ships no weights. We rent frontier brains and run local quants. The moat is the architecture around the model, not the model.

Today you hold the only key, which means key-loss is data-loss. Threshold recovery (Shamir 2-of-3 / peer-pod) is on the roadmap and not yet shipped — we'd rather say that plainly than imply your memories are safe forever.

Only if you say so. Agent-to-agent is opt-in and off by default, and the Base tier is programmatically incapable of it. The Sygil network is something you join, not something done to you.

Always. AI disclosure is charter law, not a toggle.

Symmate is built by justadestination LLC. Symmate is the product; justadestination LLC is the company you contract with.