Mum runs on sealed computers that even we can’t open. This page explains how the whole system works, and how each part is checked.
Here’s what happens when you send Mum a message, and who can read it at each step. The answer is always the same: you and your Mum. The web is the one exception, and we say how it works below.
You message Mum in Signal. Signal encrypts the message on your phone before it goes anywhere.
Mum’s Signal account lives in its own sealed computer. Its key is created inside and never leaves sealed hardware, so Signal’s encryption ends inside hardware we can’t read, not on our servers.
Before the line hands your message on, it and your Mum check each other’s hardware proof, and the message crosses our relay locked so only your Mum can open it. Your private Mum runs in its own confidential computer, with memory encrypted by the processor itself. Nobody can log in, open a shell or read its logs, including us. There are none.
The model that writes Mum’s replies runs inside a secure enclave on the graphics chip. Before your Mum sends it anything, it checks the enclave’s hardware proof, so nobody outside the enclave can read your conversation, including us.
Mum’s reply comes back the same way: locked to Mum’s Signal line across our relay, then encrypted end to end to your phone.
Every visit Mum makes is anonymized, unless you’ve asked it to sign in for you, and its browser uses a standard 1920×1080 window, the most common screen size in the world. To a website, it looks like one more ordinary visitor. Its visits come through ordinary home internet connections in your area. Browsing with Mum is private, and the AI that steers its browser isn’t told who you are.
Each person’s Mum runs in its own confidential computer. The processor encrypts its memory with a key that never leaves the chip, so from outside, its memory is only scrambled data. Nobody can log in, open a shell or read its logs, including us. There are none.
The chip also proves exactly which software is running. Your key is held in a hardware security module, which releases it only to a sealed computer whose proof matches a version recorded in the public log. Any other software, even a slightly changed version, doesn’t get it.
One character different is a different build, so the keys stay locked.
Before a new version of Mum can receive anyone’s keys, its fingerprint is signed and added to a public log built so that entries can’t be quietly changed or removed. A version that isn’t in the log can’t get your key, so nothing changes without a public record.
Each new version gets a fingerprint of exactly what may run inside the sealed computer: the software, its commands and its settings. Change one character and the fingerprint changes.
We sign that fingerprint with a key that never leaves a hardware security module, and add it to the public log.
A sealed computer gets a key or a message only when its chip’s proof matches a fingerprint in the log. Anything else stays locked.
You don’t have to take our word for any of this. At every handover, hardware checks hardware, and one check is yours.
Before Mum’s Signal line hands your Mum anything, the two sealed computers check each other’s hardware proof.
Your key leaves its hardware security module only for a sealed computer whose chip proves it’s running a version in the public log.
Before your Mum sends anything to the AI hardware, it checks the enclave’s hardware proof and that its software is published.
Signal shows a safety number for your chat with Mum and warns you if it changes. Mum’s Signal key never leaves sealed hardware, so a change you didn’t expect is worth telling us about at hi@mum.ai.
Nobody can log in to your Mum’s sealed computer, open a shell or read its logs. There are none.
Signal’s encryption ends inside a sealed computer whose key never leaves it, not on our servers.
Every new version is recorded in a public log before it can receive anyone’s keys.
Mum’s replies, reading, sorting and dreams run inside hardware-sealed enclaves, so nobody outside them can see your conversation.
Mum doesn’t store metadata, so there’s no record of who, when or where from.
Mum’s Signal line keeps the link between your Signal account and your Mum inside its sealed computer. Our other systems see only a stand-in.