A moment at a demo company
Where it lives
Organizations on shared infrastructure
One connection, from consent to disconnect
Your rights under the GDPR
Certification status
Your export, one open JSON graph
Reporting something
11:05 · Proposed
Pallas drafted the renewal note for Alder Freight, from the agreement and the last emails.
11:05 · Waiting for Joana Reis
Every action runs inside a boundary your organization sets, and whatever crosses it waits for a named human.
11:09 · Approved
Joana Reis read it and approved it. Nothing went out before she did.
Sealed · unchanged since 11:09
The decision is kept on a sealed record: who approved it, why, and what it replaced.
Your data
Stored on access-controlled servers hosted in the European Union.
Isolated and governed
Only your organization can reach it, and only under your permissions.
At the provider
Timer never sees the password behind it.
Encrypted · stored in the European Union
Scoped to you, and removable on demand.
Disconnected
Our access is revoked and the tokens we held are deleted.
In Portugal · the CNPD
You can complain to a supervisory authority.
Part of enterprise onboarding
Data processing agreements, sub-processor detail and security documentation.
That sentence is the entire status
When the report lands, this page is updated the same week.
Separately
Mapped to the AI regulation now in force in Europe.
Entities
The entities it knows about.
Facts
The facts, with their provenance and confidence.
Relationships
The relationships between them.
History
The history of what superseded what.
Both clocks
When your memory first recorded it, and when it took effect.
Held separately
The memory graph is for reading, the sealed chain is for verifying.
No queue in front of it
We read every message ourselves.
Compliance
Trust and security.
A moment at a demo company
11:05 · Proposed
Pallas drafted the renewal note for Alder Freight, from the agreement and the last emails.
11:05 · Waiting for Joana Reis
Every action runs inside a boundary your organization sets, and whatever crosses it waits for a named human.
11:09 · Approved
Joana Reis read it and approved it. Nothing went out before she did.
Sealed · unchanged since 11:09
The decision is kept on a sealed record: who approved it, why, and what it replaced.
Where your data lives, who can reach it, what happens when an AI acts on your behalf, and how you get your memory back. Written for the person who has to sign it off.
Last reviewed 23 September 2026
01 Where it lives
In the European Union.
Your data
Stored on access-controlled servers hosted in the European Union.
Timer is built and run by Human Layer Technologies, headquartered in Lisbon, Portugal. Your organization's data is stored on access-controlled servers hosted in the European Union. Timer is a European company with European data residency, GDPR-aligned by design.
Transparency and accountability are design principles here rather than checkbox exercises, which is why the architecture is published rather than described.
02 Isolation
Organizations share infrastructure. Never memory.
Isolated and governed
Only your organization can reach it, and only under your permissions.
Each organization maintains its own isolated, governed Organizational Memory. Only your organization can reach it, and only under your permissions.
03 Access and accountability
Who reached it, and on whose authority.
11:05 · Proposed
Pallas drafted the renewal note for Alder Freight, from the agreement and the last emails.
11:05 · Waiting for Joana Reis
Every action runs inside a boundary your organization sets, and whatever crosses it waits for a named human.
11:09 · Approved
Joana Reis read it and approved it. Nothing went out before she did.
Sealed · unchanged since 11:09
The decision is kept on a sealed record: who approved it, why, and what it replaced.
- S1Permissions, not trust Every interaction remains governed. Access requires permissions, history requires accountability, and your organization always knows who knows, who changed it and who approved it.
- S2A named human on the way out Every action runs inside a boundary your organization sets, and whatever crosses it waits for a named human. What may run unattended is your decision, not ours.
- S3Provable a year later Who decided what, on what authority, and what it replaced. When somebody asks afterwards, the answer is in the record rather than in somebody's memory.
The record this moment leaves behind
Decision · demo company
Renewal note for Alder Freight
- Proposed
- Pallas, 11:05
- Approved
- Joana Reis, 11:09
- Why
- The renewal moved to November
- Replaces
- Proposal v2 of 3 October
Sealed · unchanged since 11:09
04 Connections and encryption
We never hold a password of yours.
At the provider
Timer never sees the password behind it.
Encrypted · stored in the European Union
Scoped to you, and removable on demand.
Disconnected
Our access is revoked and the tokens we held are deleted.
A connection is authorized by your organization through the provider's own consent screen, so Timer never sees the password behind it. Data and the tokens that authorize it are transmitted over encrypted connections and stored on access-controlled servers hosted in the European Union.
The credentials belong to your organization: encrypted, scoped to you, and removable on demand. Disconnecting revokes our access immediately and deletes the tokens we hold for it.
Disconnected
Our access is revoked and the tokens we held are deleted.
05 GDPR
Your rights, and the paperwork behind them.
In Portugal · the CNPD
You can complain to a supervisory authority.
Part of enterprise onboarding
Data processing agreements, sub-processor detail and security documentation.
Human Layer Technologies is the data controller for the personal data this website collects. Under the GDPR you can ask us to access, correct, delete, restrict or export the personal data we hold about you, and you can complain to a supervisory authority. In Portugal that is the CNPD.
Enterprise onboarding
Data processing agreements, sub-processor detail and security documentation are part of enterprise onboarding. Ask during your intro conversation, or write to us and we will send them.
06 Certification status
SOC 2 Type II audit in progress.
That sentence is the entire status
When the report lands, this page is updated the same week.
Separately
Mapped to the AI regulation now in force in Europe.
That sentence is the entire status, and it is the only way we will word it until the report is in our hands. Write to us for where it stands today. When the report lands, this page is updated the same week.
Separately, the architecture is published under permanent DOIs and mapped to the AI regulation now in force in Europe, so an auditor can read the architecture itself rather than a description of it.
07 Getting it back
Organizational memory belongs to the organization. Always.
Entities
The entities it knows about.
Facts
The facts, with their provenance and confidence.
Relationships
The relationships between them.
History
The history of what superseded what.
Both clocks
When your memory first recorded it, and when it took effect.
Held separately
The memory graph is for reading, the sealed chain is for verifying.
Ask for an export and you get your memory as one open JSON graph: the entities it knows about, the facts with their provenance and confidence, the relationships between them, and the history of what superseded what. Every fact carries both clocks, when your memory first recorded it and when it took effect.
- EntitiesThe entities it knows about.
- FactsThe facts, with their provenance and confidence.
- RelationshipsThe relationships between them.
- HistoryThe history of what superseded what.
- Both clocksWhen your memory first recorded it, and when it took effect.
You ask for it yourself and you download it yourself. The schema is published and the file is plain JSON on purpose, because the only meaningful test of whether memory belongs to you is whether it is readable without us.
| Held separately | What it holds | What it is for |
|---|---|---|
| The memory graph | The entities, facts, relationships and history above | Reading |
| The sealed chain | The event log, decision records and seal | Verifying |
Timer is also model-independent by architecture, so nothing your organization accumulates is tied to one AI provider. As better models arrive, Timer adopts them and the memory stays where it is.
08 Reporting something
Tell us, and a person reads it.
No queue in front of it
We read every message ourselves.
If you believe you have found a vulnerability, write to us with what you found and how to reproduce it. We read every message ourselves, there is no queue in front of it, and we will come back to you.
Write to
Get started
The future belongs to organizations that remember.
For companies of 50 people or more.