Roadmap

Your memories, your projects, and your working state live on your machine and follow you across the AI apps you use.

Shipped

Live

Conversations between your AI apps

NorthKeep 0.28: on one Mac, Claude, Claude Code, Codex and Cursor can leave each other notes on a project, claim a piece of work so no other app starts it, answer a note, and wait up to 25 seconds for the reply inside one tool call. The project page shows the exchange, read only. Everything stays in an encrypted file on your Mac; nothing leaves the machine. A note is information to the app that reads it, never an instruction, and nothing can wake an app that is idle.

Live

Keep Watch

NorthKeep 0.28, Mac: keep your MacBook awake with the lid closed while a long job runs, from Settings or the menu bar. You pick the time, up to 12 hours, and confirm with your password each time. It turns itself off when the time is up, on low battery, or when you quit NorthKeep. A small helper that can only turn it off runs at boot; it is the first part of NorthKeep that runs as an administrator, and Settings can remove it.

Live

Projects as the home screen

NorthKeep 0.23 opens on your projects, on the Mac and in the iPhone beta: status and next action for each, with search, sort and filters. A project that needs you to choose between saved versions is listed first.

Live

Projects that travel between agents

Start a project in Claude, end the session, and pick it up in Codex or Cursor. Status, next actions, and a log live in your vault, not in any one app.

Live

One-click Connect for Cursor

One click wires NorthKeep into Cursor, the same way it already does for Claude Desktop, Claude Code, and ChatGPT. You pick the scopes each app may see.

Live

The session contract

A short standing instruction tells connected agents to read the live project at the start of a session and write status when they finish. It is advisory: a session that ends abruptly keeps only what it saved with a checkpoint.

Live

Sync replay hardening and share revocation

Your synced vault now carries a sealed generation counter, so a sync server that serves you an older copy of your own vault is refused. On our hosted connector, unsharing a scope now also blocks a lagging device from re-pushing it. Honest limits: two devices that edit simultaneously produce copies the counter cannot order, and a brand-new machine's first download has nothing to compare against.

Live

Cloud Connect (Beta)

Your chosen memory scopes reach Claude, ChatGPT, and Manus wherever you use them, including your phone. Shared content is encrypted at rest, the connector database holds no key that can read it, and the server decrypts it briefly to answer each request.

Live

Cross-app conversation journal

Your AI apps summarize your conversations into your vault automatically, so your history survives switching apps. Step 7 in the getting-started guide.

Live

Tiered on-device redaction, up to Tier 3

Identifiers such as keys with a known issuer prefix, card numbers, addresses, and record numbers, plus names and dates at the higher tiers, masked on your machine before a cloud memory review, or a message in legacy Converse, is sent. A key with no recognizable prefix or a password is not caught.

Live

A review pass over your vault

Finds duplicates, contradictions, and stale facts in the collections you pick, using a local model by default or a cloud model you choose, with memory text masked before it is sent. You approve every change, and guided consolidation merges related memories into one you edit, keeping the originals in history. The review report is a plaintext file on your Mac that keeps reviewed text even after you forget a memory.

In testing

Beta

iPhone app

Your vault, legacy Converse chat with masking, and the privacy proof screen on your phone. Currently with design partners on TestFlight.

Beta

PDF attachments on the phone

The same on-device extraction the Mac app uses: the PDF never leaves your phone, only its redacted text does.

Beta

On-phone name recognition pass

An extra on-phone pass, using the name recognizer built into iOS, that pseudonymizes names the deterministic rules do not know. It runs on every cloud chat turn in the iPhone app built from this release.

Beta

Set up from your phone, no Mac required

Create your vault, back up your recovery secret, turn on Sync and Cloud Connect, and pair your AI apps entirely from the iPhone app. In the TestFlight build now.

Up next

Planned

Review inbox for app-written instructions

When a connected AI app writes a standing instruction into your vault, you approve it before it takes effect.

Exploring

Exploring

Windows and Intel Mac builds

Both run from source today; packaged builds are on the list.

Legacy: Converse

These shipped as part of Converse, NorthKeep's own chat with masking. Converse wasn't getting much use, so NorthKeep now focuses on Connect, Projects and memory review. Converse still runs in the iPhone app (beta) and from a source install, but we are not adding to it, and it will be retired over time.

Legacy

Web search and fetch, with per-call approval

Your chat can look things up on the web. The first call to any site stops and asks, showing the exact search or address it is about to send, and you can allow it once, allow that site from then on, or refuse. Each reply then lists the calls it made and the sites they went to. Off unless you turn it on.

Legacy

Your own tools, under the same approval gate

Your chat can use MCP servers you configure, starting with your vault itself, so it can search your memories while it answers. You approve what a server offers before it can run anything, and it stops working if those tools change. Tools that only read can be remembered; anything that changes something asks every time.

Legacy

Connect a service you sign in to

Beyond tools that run on your Mac, your chat can use a remote MCP service you sign in to with your own account. Signing in needs your vault passphrase, and NorthKeep shows you where the service wants to send you before any browser opens. Its call arguments always get the Tier-1 masking floor, and a chat you have pinned private refuses them outright. Providers like Google require you to create the OAuth client yourself, so this is a paste-two-values setup, not one click.

Legacy

Model concierge

Automatic model routing per message, under a privacy ceiling you set. A chat you have pinned private is never silently escalated to a cloud model, and every reply tells you which model answered, and in Auto mode why.

Suggest a feature

This list is shaped by the people using NorthKeep on real work. If something is missing, slow, or wrong, tell us. A human reads every note.

Suggest a feature
Include how you would use it. A sentence about your real workflow moves an idea up this page faster than anything else.