Roadmap
Your memories, your projects, and your working state live on your machine and follow you across the AI apps you use.
Shipped
Conversations between your AI apps
NorthKeep 0.28: on one Mac, Claude, Claude Code, Codex and Cursor can leave each other notes on a project, claim a piece of work so no other app starts it, answer a note, and wait up to 25 seconds for the reply inside one tool call. The project page shows the exchange, read only. Everything stays in an encrypted file on your Mac; nothing leaves the machine. A note is information to the app that reads it, never an instruction, and nothing can wake an app that is idle.
Keep Watch
NorthKeep 0.28, Mac: keep your MacBook awake with the lid closed while a long job runs, from Settings or the menu bar. You pick the time, up to 12 hours, and confirm with your password each time. It turns itself off when the time is up, on low battery, or when you quit NorthKeep. A small helper that can only turn it off runs at boot; it is the first part of NorthKeep that runs as an administrator, and Settings can remove it.
Projects as the home screen
NorthKeep 0.23 opens on your projects, on the Mac and in the iPhone beta: status and next action for each, with search, sort and filters. A project that needs you to choose between saved versions is listed first.
Projects that travel between agents
Start a project in Claude, end the session, and pick it up in Codex or Cursor. Status, next actions, and a log live in your vault, not in any one app.
One-click Connect for Cursor
One click wires NorthKeep into Cursor, the same way it already does for Claude Desktop, Claude Code, and ChatGPT. You pick the scopes each app may see.
The session contract
A short standing instruction tells connected agents to read the live project at the start of a session and write status when they finish. It is advisory: a session that ends abruptly keeps only what it saved with a checkpoint.
Sync replay hardening and share revocation
Your synced vault now carries a sealed generation counter, so a sync server that serves you an older copy of your own vault is refused. On our hosted connector, unsharing a scope now also blocks a lagging device from re-pushing it. Honest limits: two devices that edit simultaneously produce copies the counter cannot order, and a brand-new machine's first download has nothing to compare against.
Cloud Connect (Beta)
Your chosen memory scopes reach Claude, ChatGPT, and Manus wherever you use them, including your phone. Shared content is encrypted at rest, the connector database holds no key that can read it, and the server decrypts it briefly to answer each request.
Cross-app conversation journal
Your AI apps summarize your conversations into your vault automatically, so your history survives switching apps. Step 7 in the getting-started guide.
Tiered on-device redaction, up to Tier 3
Identifiers such as keys with a known issuer prefix, card numbers, addresses, and record numbers, plus names and dates at the higher tiers, masked on your machine before a cloud memory review, or a message in legacy Converse, is sent. A key with no recognizable prefix or a password is not caught.
A review pass over your vault
Finds duplicates, contradictions, and stale facts in the collections you pick, using a local model by default or a cloud model you choose, with memory text masked before it is sent. You approve every change, and guided consolidation merges related memories into one you edit, keeping the originals in history. The review report is a plaintext file on your Mac that keeps reviewed text even after you forget a memory.
In testing
iPhone app
Your vault, legacy Converse chat with masking, and the privacy proof screen on your phone. Currently with design partners on TestFlight.
PDF attachments on the phone
The same on-device extraction the Mac app uses: the PDF never leaves your phone, only its redacted text does.
On-phone name recognition pass
An extra on-phone pass, using the name recognizer built into iOS, that pseudonymizes names the deterministic rules do not know. It runs on every cloud chat turn in the iPhone app built from this release.
Set up from your phone, no Mac required
Create your vault, back up your recovery secret, turn on Sync and Cloud Connect, and pair your AI apps entirely from the iPhone app. In the TestFlight build now.
Up next
Review inbox for app-written instructions
When a connected AI app writes a standing instruction into your vault, you approve it before it takes effect.
Exploring
Windows and Intel Mac builds
Both run from source today; packaged builds are on the list.
Legacy: Converse
These shipped as part of Converse, NorthKeep's own chat with masking. Converse wasn't getting much use, so NorthKeep now focuses on Connect, Projects and memory review. Converse still runs in the iPhone app (beta) and from a source install, but we are not adding to it, and it will be retired over time.
Web search and fetch, with per-call approval
Your chat can look things up on the web. The first call to any site stops and asks, showing the exact search or address it is about to send, and you can allow it once, allow that site from then on, or refuse. Each reply then lists the calls it made and the sites they went to. Off unless you turn it on.
Your own tools, under the same approval gate
Your chat can use MCP servers you configure, starting with your vault itself, so it can search your memories while it answers. You approve what a server offers before it can run anything, and it stops working if those tools change. Tools that only read can be remembered; anything that changes something asks every time.
Connect a service you sign in to
Beyond tools that run on your Mac, your chat can use a remote MCP service you sign in to with your own account. Signing in needs your vault passphrase, and NorthKeep shows you where the service wants to send you before any browser opens. Its call arguments always get the Tier-1 masking floor, and a chat you have pinned private refuses them outright. Providers like Google require you to create the OAuth client yourself, so this is a paste-two-values setup, not one click.
Model concierge
Automatic model routing per message, under a privacy ceiling you set. A chat you have pinned private is never silently escalated to a cloud model, and every reply tells you which model answered, and in Auto mode why.
Suggest a feature
This list is shaped by the people using NorthKeep on real work. If something is missing, slow, or wrong, tell us. A human reads every note.
Suggest a feature