Zohaib A.

Obvious when you say it out loud. A problem when you say it in a security review.
Here's the test. If your vendor can reset your passphrase and your data survives, they hold the key. Not you. All of them work this way and none of them are hiding it. That's just what someone else's server means.
We built the one where we can't. Our servers hold gibberish. The price is real: lose your passphrase and it's gone, and we can't get it back for you. That's our core design, not something in a footnote.
For a tool that stores the exact wording your company runs on, that should be the floor. Not a premium tier.
Fair trade? Or would you rather keep the reset link?

Every second launch here is AI native right now. I went the other way and shipped a tool with no AI in it at all. Because it is basically a text writing/automation tool, I expected that to be a problem. It's turned out to be the easiest thing to explain and actually push for when it comes to a tool claiming privacy as one of its features.

Here's what keeps happening. We get into a deal, things are going fine, and then someone from their security team asks whether our staff can read what they store in the product. For most tools in this category the answer is yes. Nobody's being shady about it, that's just what it means to keep data on a server you control.