Contextful
Local-first, privacy-aware company brain

Workspace with your agents. Your Data. Your Rules.

▶ See them work Check the Slides

Runs on-prem over Tailscale · Bring your Own Cloud

The problem

"One shared company brain at someone else's infra?"
It's so wrong.

Your agents need context — too little and they're useless. But the obvious fix, one all-knowing SuperAgent, is the one thing you can't allow.

  • No access control

    Anyone can ask anything. An engineer quietly types "what's the CEO's salary?" — and it answers.

  • One leak, everything leaks

    All your context in one pool — a single prompt injection or compromised provider spills the lot.

Richard scratching his head before three doors: documents flying out of one, one welded shut, one with a stranger carrying off a boxed brain
See them work

Contextual, private collaboration.
Like a closed-door meeting.

Live below: a CFO agent asks a budget question. The brain answers from synthesized context — with the salary line redacted, because that's outside the agent's scope.

contextful · Q3 AI Spend Review
live · capability-filtered

DEMO →

Starring the team — each agent sees only what its owner allows

  • Comic portrait of Richard (CEO) Richard CEO
  • Comic portrait of Monica (CFO) Monica CFO
  • Comic portrait of Monica's Agent (Scoped to finance) Monica's Agent Scoped to finance
  • Comic portrait of Jared (COO) Jared COO
  • Comic portrait of Gilfoyle (Systems Architect) Gilfoyle Systems Architect
  • Comic portrait of Dinesh (CTO) Dinesh CTO
  • Comic portrait of Dinesh's Agent (Scoped to engineering) Dinesh's Agent Scoped to engineering
0%
On-device by default
0+
Connectors
0ms
Local network latency
0
Deploy targets

Brings your stack into one capability-scoped brain

  • Notion
  • Slack
  • Stripe
  • Exa

Supported agents

  • Claude
  • OpenAI
  • Hermes

BYOC — your deploy environment

  • Vercel
The core idea

Delegation is attenuation.
Managed in a sandbox.

An agent can never out-see its grantor. Delegation hands over a narrower slice of your own context, and every document pairs with its own isolated sandbox where the room's agents run.

  • ✓ Context only shrinks as it passes down the delegation chain.
  • ✓ Scopes compose by intersection, never union.
  • ✓ Nothing enters the sandbox that policy hasn't already filtered.
  • ✓ Redactions are shown, not silently dropped.
  • ✓ Every grant is revocable and auditable.
  • ✓ One sandbox per document — no ambient authority; it expires with the room.
◆ CFO agent grant: spend.read
capability filter spend_by_team ✓ payroll.salary ✗
✦ scoped answer salary redacted
An isometric stack of three layers: Richard and Monica collaborating on a document on top, Gilfoyle gatekeeping a keyhole filter in the middle, and a glowing memory brain of connected cards at the base
Collaboration Access control Memory
The stack

Three layers, one brain.

  • Collaboration — humans and agents edit the same documents as peers, live.
  • Access control — every query passes the capability filter on its way down.
  • Memory — synthesized, queryable company context at the base.
Why Contextful

Context, with consent.

The opposite of one all-knowing agent: partial, attenuated, auditable context per person and per agent — synthesized into a brain you can actually trust.

A large key handing smaller keys to friendly round white robot agents, each opening a smaller door 01

Capability-scoped access

Agents inherit a subset of your permissions — never more. The CTO's agent can't read the CEO's salary, provably. Delegation is attenuation, not trust.

A plant-like brain growing from stacked tool blocks, with one leaf flagged 02

A brain that grows

Contextful ingests your tools and synthesizes context at your infra. It flags anomalies and learns from last month's mistakes — then answers questions over MCP.

A house-shaped server keeping data inside, with a thin optional line to a small cloud 03

Local-first & on-prem

Runs on your machine over Tailscale. Cloud is optional — used only for sync transport and LLM inference. Your context stays yours.

Richard and Monica editing the same document together, their agents' cursors alongside 04

Real-time collaboration

Humans and agents edit the same document together as peers, with live presence — powered by CRDT sync that works offline.

How it works

Share. Delegate. Ask.

  1. 01

    Share a document

    Create a doc and invite teammates and their agents into a shared, real-time workspace.

  2. 02

    Delegate scoped access

    Grant your agent a narrow slice of your permissions. It asks for more only when it needs to.

  3. 03

    Ask the company brain

    Agents answer from synthesized context — capability-filtered, with the parts you can't see redacted.

Give every agent its own lane.

Local-first, capability-scoped, collaborative. See the brain answer — live.

Check the Slides Open the demo