Our Commitment to Trust & Ethics

Memory is intimate. Mpalo exists in the space between preservation and manipulation, and chooses the harder path: building memory infrastructure honestly, with consent, and refusing to weaponize any of it regardless of who asks.

What Is True Today

This page states what trust means in practice: what is true today, what we commit to at launch, and what we intend as the company grows.

Palo Bloom is in development and not yet publicly available. The waitlist is active. No user memory data is currently being processed, stored, or used in any form.

All infrastructure is designed from the ground up with the following properties, which will be verified at launch:

Data encryption in transit and at rest. All data is encrypted in transit via TLS and at rest via AES-256.
You own your memories. The data you put into Palo and the memories it creates belong to you.
Bring Your Own Vector Store. Your memory data stays in your designated environment.
No base-model training without explicit consent. Personal adaptation happens within your own memory space.

What We Commit To at Launch

These are structural commitments that will be in place when Palo Bloom becomes publicly available. They are not aspirational; they are conditions of launch.

The Open Decay Protocol. If Mpalo is ever acquired or changes ownership, all user memory data is automatically deleted. It is not transferred to any acquiring entity. You cannot acquire Mpalo and receive its users' memories. This commitment will be formalized in our legal structure before launch.
Consent is a condition of operation, not a consideration to be weighed against other factors. Deploying memory capabilities on or about a person requires their prior, informed consent. Terms of service acceptance alone is not sufficient where the nature of the capability is material to what a person is agreeing to.
A preserved memory is a tribute, not the person. Mpalo will not design, describe, or market its products in ways that allow the distinction between a memory and the experience it represents to collapse. A record of what you shared is not an authoritative account of what happened.
Non-weaponisation. Mpalo will not develop or deploy cognitive manipulation systems targeting civilian populations, regardless of the identity or institutional standing of the requesting party. This is a charter-level constraint protected by our governance structure.

What We Intend as the Company Grows

These are genuine intentions, not current capabilities. We state them here because we believe accountability requires saying what you are working toward before you have achieved it.

An external Ethics Advisory Council. We intend to appoint an independent advisory council with published membership, a defined mandate, and the ability to issue public dissent. This does not exist yet. We will not describe it as existing until it does.
A Public Benefit Report published at minimum every two years, assessing performance against our stated public benefit objectives. Mpalo is incorporated as a Delaware Public Benefit Corporation. The report is the primary instrument by which that commitment is verified externally.
Reinvestment in research. We intend to reinvest a significant portion of profits into research on memory, cognition, and ethical AI infrastructure. This intention is not yet formalized in a binding financial instrument. When it is, we will say so explicitly.

What We Will Not Do

These are not policies subject to revision under commercial pressure. They are charter-level constraints.

We will not sell user memory data. Ever.
We will not use your memories to manipulate your behavior, target you with advertising, or optimize for your engagement at the expense of your wellbeing.
We will not comply with requests to build offensive cognitive manipulation systems, regardless of the requester.
We will not allow the distinction between a memory and a person to collapse in our product design, our marketing, or our research.

On Bias and Fairness

Palo Bloom's architecture is designed around personal episodic memory: what you specifically have experienced, rather than generalized world knowledge. This reduces but does not eliminate the risk of bias in how memories are weighted, retrieved, and represented. We treat bias mitigation as an ongoing research obligation, not a solved problem. We will provide mechanisms for users to report instances where they perceive biased behavior, and we will publish what we learn.

On Security

All memory data is encrypted in transit and at rest. Our infrastructure is built on Cloudflare with credential-level encryption for sensitive fields. For detailed security architecture, see our Safety & Security page.

We do not currently hold SOC 2 or HIPAA certification. We are designed with compliance in mind and will pursue independent audit as the product matures. We will say explicitly when that certification exists and will not imply it before it does.

Mpalo Inc. - Delaware Public Benefit Corporation

This page is updated when our commitments change. Previous versions are archived.

Last updated: May 2026