Roadmap

Your memories, your projects, and your working state live on your machine and follow you across the AI apps you use.

Shipped

Live

Projects that travel between agents

Start a project in Claude, end the session, and pick it up in Codex or Cursor. Status, next actions, and a log live in your vault, not in any one app.

Live

One-click Connect for Cursor

One click wires NorthKeep into Cursor, the same way it already does for Claude Desktop, Claude Code, and ChatGPT. You pick the scopes each app may see.

Live

The session contract

A short standing instruction tells connected agents to read the live project at the start of a session and write status when they finish. It is advisory: a session that ends abruptly wrote nothing.

Live

Sync replay hardening and share revocation

Your synced vault now carries a sealed generation counter, so a sync server that serves you an older copy of your own vault is refused. Unsharing a scope now also blocks a lagging device from re-pushing it. Honest limits: two devices that edit simultaneously produce copies the counter cannot order, and a brand-new machine's first download has nothing to compare against.

Live

Cloud Connect (Beta)

Your chosen memory scopes reach Claude, ChatGPT, and Manus wherever you use them, including your phone. Shared content is encrypted at rest and the server stores no key that can read it.

Live

Cross-app conversation journal

Your AI apps summarize your conversations into your vault automatically, so your history survives switching apps. Step 9 in the getting-started guide.

Live

Tiered on-device redaction, up to Tier 3

Secrets, names, dates, addresses, and record numbers masked on your machine before anything is sent, with on-screen proof of exactly what left.

Live

Web search and fetch, with per-call approval

Your chat can look things up on the web. The first call to any site stops and asks, showing the exact search or address it is about to send, and you can allow it once, allow that site from then on, or refuse. Afterwards it shows you precisely what left your machine. Off unless you turn it on.

Live

Your own tools, under the same approval gate

Your chat can use MCP servers you configure, starting with your vault itself, so it can search your memories while it answers. You approve what a server offers before it can run anything, and it stops working if those tools change. Tools that only read can be remembered; anything that changes something asks every time.

Live

Connect a service you sign in to

Beyond tools that run on your Mac, your chat can use a remote MCP service you sign in to with your own account. Signing in needs your vault passphrase, and NorthKeep shows you where the service wants to send you before any browser opens. Its calls always get the secret-masking floor, and a chat you have pinned private refuses them outright. Providers like Google require you to create the OAuth client yourself, so this is a paste-two-values setup, not one click.

Live

Model concierge

Automatic model routing per message, under a privacy ceiling you set. A chat you have pinned private is never silently escalated to a cloud model, and every reply tells you which model answered and why.

In testing

Beta

iPhone app

Your vault, chat with masking, and the privacy proof screen on your phone. Currently with design partners on TestFlight.

Beta

PDF attachments on the phone

The same on-device extraction the Mac app uses: the PDF never leaves your phone, only its redacted text does.

Beta

Apple Intelligence masking pass

An extra on-phone model pass that pseudonymizes names the deterministic rules do not know. It ships only when it beats our published evaluation bar.

Beta

Set up from your phone, no Mac required

Create your vault, back up your recovery secret, turn on Sync and Cloud Connect, and pair your AI apps entirely from the iPhone app. In the TestFlight build now.

Up next

Planned

A review pass over your vault

A memory review pass that finds duplicates, contradictions, and stale facts across your vault, using a model of your choice, local by default. You approve every change.

Planned

Review inbox for app-written instructions

When a connected AI app writes a standing instruction into your vault, you approve it before it takes effect.

Exploring

Exploring

Windows and Intel Mac builds

Both run from source today; packaged builds are on the list.

Suggest a feature

This list is shaped by the people using NorthKeep on real work. If something is missing, slow, or wrong, tell us. A human reads every note.

Suggest a feature
Include how you would use it. A sentence about your real workflow moves an idea up this page faster than anything else.