Encrypted on the bot
AES-256-GCM before upload. The server stores ciphertext, lossy vectors, and HMAC keyword hashes.
For Grok Bot
Memory your bots can't lose, and we can't read.
Exact recall after compaction, shared across all your Grok Bots, encrypted before it leaves the bot.
The marketplace listing is not live. The button is a placeholder.
Also works with Claude Code, Cursor, Codex, and OpenClaw.
What it does
A store outside the context window. The bot writes a line before compaction, then reads that line back.
Recall scope
Own tag, a list of up to 32, or every bot. A search can narrow that scope. It cannot widen it.
No model call
Retayn does not send memories to an AI model. The passphrase never leaves the bot’s computer.
After compaction
The summary keeps the topic. The stored line still has the fingerprint, the date, and the exact wording.
Same store
Claude Code, Cursor, Codex, and OpenClaw use the same account, each with its own tag.
Plugin free
Hosted Pro is $19 a month ($190 a year). Ultra is $49 ($490). Encryption does not change by plan.
Security
On the Grok Bot plugin, the passphrase derives the keys on the bot’s computer. The server stores ciphertext. It does not receive that passphrase.
What the server stores
- AES-256-GCM ciphertext
- Lossy 384-dimension vectors
- HMAC-SHA256 keyword hashes
- Plaintext agent tags, timestamps, layer, and session id
- A 16-byte salt, so the same passphrase can derive the keys again
What the server cannot do
- Decrypt the content
- Read a search as words
- Rebuild the text from the vectors
- Recover the passphrase
PBKDF2-SHA-256 stretches the passphrase for 600,000 iterations into a 32-byte AES-256-GCM key and a 32-byte HMAC-SHA-256 key. Each message gets a new 12-byte nonce. Keyword search and vector search are fused on the server. The server scores hashes and vectors, not the original text.
On Grok Bot the passphrase stays on the bot’s computer. It is private from Retayn. It is not private from that host. A lost passphrase leaves ciphertext nobody can open.
- Memory injection attacks on LLM agents — arXiv:2503.03704
- Memory poisoning attack and defense — arXiv:2601.05504
Comparison
Four products with public pages, checked October 2026. A dash means those sources do not say.
| Feature | Retayn | Mem0 | Supermemory | Vertiso | Zep |
|---|---|---|---|---|---|
| Client-side encryption | Yes | No | No | No | No |
| Server reads plaintext | No | Yes | Yes | Yes | Yes |
| Sent to an AI model | No | Yes | Yes | Yes | Yes |
| Grok Bot | Coming soon | Yes | Yes | Yes | No |
| Recall scope | Own, list, or all | User or agent | Namespace | Shared tools | Per graph |
| Paid plan from | $19 | $19 | $19 | $24.99 | $125 |
| LoCoMo | 85.5% | 68.4% | —Not in these sources | —Not in these sources | 75.1% |
| Search | Coming soon | 148 ms | 356 ms | —Not published here | —Not published here |
Retayn 85.5% on LoCoMo (categories 1-4, LLM-judged, internal run, Feb 2026). Published scores: Zep 75.1%, Mem0-Graph 68.4% (2025, different judge).
Later published scores are higher, including Mem0 92.5%, Backboard 90%, and Hindsight 89.6%. These figures use different judges. This is not a ranking.
Notes and sources
Retayn’s LoCoMo run is internal: lab note and result files (retayn_locomo_v10*.json, commit 2147ac0). Zep’s corrected score is 75.14%. Mem0-Graph in the 2025 paper is 68.44%.
Retayn’s search time is not published yet. The cell stays “Coming soon” until the final benchmark. Mem0’s 148 ms is the p50 from their paper. Supermemory’s 356 ms is their end-to-end search claim for their own production traffic.
Encryption at rest is not client-side encryption. Mem0’s docs say to encrypt secrets yourself before add. Supermemory and Vertiso document TLS plus encryption at rest. Zep Cloud can add AWS KMS at rest on Enterprise. On Cloud, those servers can read stored text. Retayn stores ciphertext.
Mem0 sends text to an extraction model; BYOK sends it to the provider you choose. Supermemory’s learner-1 extracts memories. Vertiso sends memories to third-party AI providers (Google Gemini). Zep uses extraction models. Retayn does not call a model.
Mem0, Supermemory, and Vertiso are listed as Grok Bot marketplace plugins. Retayn’s listing is not live. Zep’s published plugins are for Claude, ChatGPT, and Cursor; no Grok Bot marketplace plugin was found. Cursor and Claude Code are documented for Mem0, Supermemory, and Vertiso. Graphiti’s MCP docs list Cursor and Claude Desktop; Zep Cloud’s Cursor support is not stated.
Mem0 scope is a user, agent, run, or app id. Supermemory uses a namespace or space. Vertiso shares memory across connected tools; a per-bot allowlist is not documented. Zep is per user or graph.
Prices, monthly unless noted. Mem0: Free / $19 / $249. Supermemory: Free / $19 / $100 / $399. Vertiso: Free / $24.99 / $119 / $349, remote OAuth MCP. Zep: free 10,000 credits a month, Flex $125, Flex Plus $375. Retayn’s plugin is free. Hosted plans are Free, Pro $19 ($190 a year), and Ultra $49 ($490 a year).
Retayn makes no SOC 2 or HIPAA claim. Mem0: SOC 2 Type I, HIPAA self-attested, SOC 2 Type II in progress. Supermemory: SOC 2 Type II, HIPAA BAA on Scale and Enterprise. Vertiso is not certified; the terms say they intend to pursue SOC 2. Zep Enterprise: SOC 2 Type II and a HIPAA BAA.
Letta is not in the table. Cloud can read agent state. A local runtime keeps state on the machine. Memories go to the agent model and a compaction summarizer. Plans: Free, Pro $20 a month, API $20 a month plus usage. Grok Bot, Cursor, and Claude are not listed. Compliance was not checked.
Pricing
The plugin is free. Hosted plans are optional. Encryption is the same on every tier.
Hosted
Free
$0
- 10,000 messages
- 30-day retention
- 1,000 actions a day
- Client-side encryption
Hosted
Pro
$19 / month
- 100,000 messages
- Kept until you delete them
- 10,000 actions a day
- $190 a year
Hosted
Ultra
$49 / month
- 1,000,000 messages
- Kept until you delete them
- Unlimited actions
- $490 a year
Setup
Three steps on the Grok Bot. The passphrase stays on that computer.
- 01
Install the plugin. The listing is not live, so the button above is a placeholder. The plugin is free.
- 02
The skill installs the client and asks for a passphrase once. That passphrase stays on the bot’s computer.
- 03
New lines are encrypted before they are stored. After compaction, the bot can recall the exact line inside its scope.
Questions
What does Retayn store?
AES-256-GCM ciphertext, a semantic vector, HMAC keywords, and metadata such as the agent tag and the time. The server does not receive the passphrase or the plaintext.
Who can see the passphrase on Grok Bot?
Retayn cannot. The passphrase stays on the bot’s computer, so anyone who can read or administer that computer is outside this promise.
Can I delete everything?
Yes. The dashboard and POST /v1/wipe remove the index, the ciphertext, and the keyword index. Deletion cannot be undone.
What if I lose the passphrase?
The data stays encrypted. Retayn never had the key. Keep the passphrase somewhere you control.