ISO 27001 certified agent memory systems

Agent memory systems with an ISO/IEC 27001 information security certification. Ranked by maturity tier.

45 systems match this filter

Tier 1 — battle-tested (30)

  • Langfuse Memory ops as named spans + Agent Graphs

    Acquired by ClickHouse (2026-01-16); product and MIT-licensed repo continue under the Langfuse name. Memory module reads/writes captured as named spans. Trace Log View concatenates every agent step including memory ops. Agent Graphs (GA …

  • LangSmith Memory mutations as distinct span types

    Memory reads, vector DB retrievals, state changes are distinct span types in traces. RAG eval separates retrieval quality (context precision) from generation quality (faithfulness). Dataset versioning guards against eval drift.

  • Lakera Guard / Lakera Red Real-time prompt-injection + poisoning screen

    Acquired by Check Point Software (completed by 2025-11-11); being folded into Check Point's AI security platform. Screens every prompt, response, and retrieved document for indirect prompt injection — primary vector for memory poisoning.…

  • Acuvity (now Proofpoint) MCP / Shadow-AI runtime enforcement

    Acquired by Proofpoint (closed 2026-02-12). Runtime enforcement targeting memory poisoning, unauthorised execution, identity spoofing per the OWASP LLM threat list. Visibility/control over MCP servers and locally-installed AI tools — the…

  • Enkrypt AI Three-point RAG / memory pipeline guardrails

    Applies guardrails at three points: (1) before write to vector DB, (2) before query reaches embedding model, (3) before response. Detects malicious instructions in stored memory before retrieval; scans for PII/PHI in/out. Text + image + …

  • Abridge Grounded-transcript provenance

    Clinician-assist ambient documentation. Source mapping: every AI-generated summary element traced back to the source utterance. Audit-and-trust layer over episodic memory. Built on proprietary 1.5M+ medical-encounter dataset.

  • Anthropic Claude Memory File-backed + tool-driven + Auto Dream

    Memory tool API + consumer "Memory" feature + Auto Dream consolidation. Document-as-memory rather than extracted-fact-as-memory.

  • Cognigy (now NiCE Cognigy) Two-tier short + long-term, shared across agents

    Acquired by NiCE (closed 2025-09-08); continues as NiCE Cognigy, standalone and inside CXone Mpower. Enterprise contact centre (voice + chat). Short-term covers current session; long-term persists across sessions and is shared by every a…

  • Cursor Rules IDE-embedded code memory

    Persistent instructions injected at start of model context: Project Rules (.mdc files in .cursor/rules, scoped Always/Auto Attached/Agent Requested/Manual), global User Rules, and AGENTS.md; legacy .cursorrules deprecated. Codebase index…

  • Dia (Atlassian) Local-first browser-history + @history queries

    The Browser Company's AI-native browser; Atlassian acquired The Browser Company for $610M cash (announced 2025-09, closed 2025-10-21). Stores summaries and preferences locally; opt-in @history feature references up to 7 days of browsing …

  • Google Gemini Memory Personal Context + Personal Intelligence

    Gemini app learns from past chats via the Personal context setting (on by default, can be disabled; temporary chats excluded). Users can import memories and full chat history from ChatGPT, Claude and other assistants (18+, personal accou…

  • Harvey Memory 4-tier matter / firm / client-institution memory

    Memory carries forward user-chosen context (matter details, precedent, preferences, approved practices) and reuses past threads scoped to a user, client, matter or firm process. Firm admins enable/disable it; ethical walls and audit cont…

  • Interloom Enterprise tacit-knowledge memory

    Back-office operations platform where agents and domain experts triage and resolve cases; each resolved case feeds a context graph, and a 'MemoryRank' component reuses prior successful cases to route new work.

  • LinkedIn Cognitive Memory Agent Episodic + semantic + procedural (shared)

    Production memory infrastructure powering LinkedIn's Hiring Assistant and other GenAI apps. Three-layer (episodic/semantic/procedural) shared memory substrate across multi-agent systems; recent-context retrieval + semantic search + summa…

  • Luminance Institutional Memory Persistent negotiation history + accepted-risk registry

    Jan 2026 platform relaunch. Persists negotiation history, prior decisions, accepted risk positions across all contracts; new terms align with what the org has already agreed. Branded as the antidote to "enterprise amnesia."

  • Microsoft Copilot Memory Org / tenant-scoped (Exchange-backed)

    Microsoft 365 Copilot memory (saved memories, chat-history details, custom instructions) stored in a hidden folder of the user's Exchange mailbox under mailbox compliance; on by default, admin-controllable; available to Copilot Chat user…

  • Microsoft Edge Copilot Mode + Journeys (now Copilot in Edge) Tab-context + Journeys session-grouping

    Copilot Mode retired 2026-05-13; its features now ship as Copilot in Edge. Journeys clusters browsing history into topic cards on the new tab page (desktop, and US mobile); Copilot long-term memory can reference past chats and browsing h…

  • Mistral Agents API Platform-managed stateful conversation memory

    Mistral's Agents API provides persistent conversation state across turns and sessions; runtime maintains branching conversation trees. Memory is implicit in the stateful session model rather than a separate store — agents can branch, con…

  • Mistral Le Chat — Memories (now Vibe) Graph-contextual + explicit + implicit

    Le Chat is now Vibe; Mistral's help center describes Memories as a Vibe feature (article dated 2026-08-12). Memories in Mistral's consumer assistant: saves details on user request or automatically; user can view/edit/delete or clear all;…

  • Mistral Vibe (Remote Agents) + Mistral Medium 3.5 Cloud-hosted async coding agents with teleportable session state

    Vibe is Mistral's cloud-hosted coding-agent platform: each session runs in an isolated sandbox with task state, history, and approvals. Spawnable from CLI or Le Chat, with parallel execution. Local CLI sessions can be "teleported" to the…

  • Notion AI Workspace-scoped context + custom instructions

    Notion's first-party AI. Reads up to 50 pages per query (as of Jan 2026); Custom Instructions persist brand voice / team structure / preferences. Context follows you across model swaps. Notably not persistent cross-session learning — it …

  • Omi Open-source wearable orb + memory graph

    Wearable orb (necklace or clip) with open-source hardware + firmware. Continuous audio capture; real-time GPT-4o transcription; searchable memory graph. Supports app screen capture too. Hybrid privacy: cloud by default (SOC 2/HIPAA/AES-2…

  • OpenAI ChatGPT Memory User-scoped persistent facts

    First-party ChatGPT memory combining saved memories, reference to past chats, custom instructions and connected apps; 'improved memory' keeps an evolving summary (legacy list-style saved memories still selectable), with review/correct/de…

  • OpenAI Codex (cloud agent) File-backed ~/.codex/memories + Chronicle

    Memory under ~/.codex/memories/ : summaries, durable entries, recent-input logs, supporting evidence — generated in background after sessions go idle. Chronicle (opt-in macOS preview) uses screen-capture to seed memory. Off by default; o…

  • Perplexity Comet Conversation across pages + browser-history memory

    AI-native Chromium-based browser. Assistant operates across tabs and sessions; persistent memory of preferences; multi-step agentic tasks without leaving the browser. Memory is opt-in and server-side; enterprise memory tier separately av…

  • Perplexity Memory Auto-distillation across model swaps

    Stores preferences and details (and optionally search history) to personalize answers, citing which memory was used; user controls in Settings → Memory. 'Brain' adds structured self-improving memory for Max subscribers and shared project…

  • Plaud NotePin Magnetic clip-on + AI transcription

    Magnetic clip-on wearable. Records in-person conversations and calls; AI summaries, action items, searchable transcripts. AES-256 + TLS 1.2 in transit; doesn't retain audio after transcription. Also sells Note (card-form recorder) and No…

  • Relevance AI Memory Short-term metadata + persistent KV store

    Two memory scopes: conversation metadata (KV per-conversation) and persistent memory (cross-session). Enabling metadata auto-adds Add/Read conversation metadata tools.

  • Sierra Unified customer graph (Agent Data Platform)

    Bret Taylor + Clay Bavor. Agent Data Platform links unstructured conversation data to enterprise systems (billing, inventory, policies, transactions); persists across channels and time. Memory accumulates across every interaction, not ju…

  • Voiceflow Memory Sliding-window buffer (vf_memory)

    Agent platform. Keeps a configurable window of recent turns (default 50, range 10–100) in the {vf_memory} variable; older turns are summarized rather than dropped. Chat projects can persist history indefinitely or clear it on tab close/r…

Tier 2 — production-ready (12)

  • AWS Bedrock AgentCore Memory Managed memory in Bedrock AgentCore

    AWS managed memory service for agents running on Bedrock AgentCore. Native integrations with LangChain/LangGraph and Strands. Drives long-running MCP servers + agent workloads.

  • AutoGen Memory List + teachable vectors

    AutoGen's memory layer: ListMemory chronological context plus teachable agents that vectorise corrections; integrates with Mem0/Zep rather than building deep memory natively. Microsoft AutoGen is in maintenance mode (community managed, b…

  • Semantic Kernel Memory Memory plugin for SK agents

    Microsoft Semantic Kernel's memory plugin (Microsoft.SemanticKernel.Plugins.Memory): a plug-in approach to long-term memory in the SK agent framework (agent memory marked experimental). Semantic Kernel's README names Microsoft Agent Fram…

  • Vertex AI Memory Bank (now Agent Platform Memory Bank) Managed Vertex memory service

    Google Cloud managed memory service, now 'Agent Platform Memory Bank' in Gemini Enterprise Agent Platform. LLM-based memory extraction/consolidation from sessions (background, multimodal, custom topics), per-identity isolation, similarit…

  • Cloudflare Agent Memory Managed persistent memory service

    Managed persistent memory service for AI agents on Cloudflare's edge. Private beta announced 2026-04-17. Sits alongside Workers AI / Vectorize as the memory tier of the Cloudflare agent stack.

  • Google ADK Memory SessionService tiers + VertexAIMemoryBank

    Google's Agent Development Kit. Session services: InMemory / Database / VertexAI. Long-term: InMemoryMemoryService or VertexAIMemoryBankService (uses Vertex AI Memory Bank Preview for persistent cross-session memory).

  • Intercom Fin CRM attributes + roadmap lifecycle memory

    CX support. Currently CRM-backed customer attributes + conversation history lookup. Lifecycle-persistent memory ("priorities learned day one considered in year 10") on roadmap as of Pioneer 2025 — not yet shipped.

  • Lovable /docs folder + Knowledge Panel

    Long-term context stored as files in /docs that the agent reads on each session. Agent Mode (default since July 2025) holds working context within session but doesn't persist cross-session beyond filesystem state.

  • Retell AI In-call + integration-based long-term

    Voice agents. Short-term context within call native; long-term memory via webhook integration to CRM / external DB. Cross-agent memory sharing in multi-agent setups.

  • Stack AI Enterprise-KB RAG (no agent memory store)

    Acquired by Asana (completed 2026-05-28); continues as its own product and brand. Connects enterprise knowledge sources (SharePoint, Confluence, Notion, Drive, DBs) as memory layer with access controls, versioning, citations. Agents quer…

  • Strands Agents Memory (AWS) Mem0 + AgentCore-backed

    AWS code-first agent framework. Multi-LLM (Bedrock, Anthropic, Gemini, OpenAI). Memory via Mem0 integration (ElastiCache for Valkey + Neptune Analytics) or Bedrock AgentCore Memory. Local default uses FAISS; OpenSearch for production.

  • Tabnine Org-level Context Engine + Tabnine Agents

    Enterprise Context Engine builds a multi-dimensional knowledge graph from repos + CI/CD + PRs + tickets + docs at the org level. Individual completions stay session-scoped. Tabnine Agents (Nov 2025) adds team-shared agent context. Acquir…

Tier 3 — emerging (3)

  • Anthropic Managed Agents — Memory Filesystem-backed cross-session persistent memory

    Public-beta memory stores for Claude Managed Agents: workspace-scoped collections of text documents mounted into the session sandbox as a directory the agent reads and writes with its file tools; every change is versioned for audit and p…

  • Cursor Memories Product

    Project-scoped memories in Cursor, created either by a background 'sidecar' model watching chats or by the agent via tool calls, and managed as auto-generated rules in settings. Traction: First-party feature of one of the most widely use…

  • Perplexity Brain Product

    Topic-organised shared memory layer under Perplexity Search, the Computer agent and possibly Comet; stores projects, decisions and sources, retrieves selectively per task, and exposes topics plus a 3D connection map to the user. Traction…