... Mosslet s privacy-first AI features. You're right that they pull in opposite directions: AI needs context to be helpful, but context means data exposure. The fact that you're having those internal conversations about what stays ephemeral vs. what gets stored is exactly the right instinct. Most teams don't even ask the question. I d also look into Confer and Proton Mail s Lumo if you haven t already. To answer your question: your encryption keys aren ... ... constraint. A few things that I think help: Password reset flows preserve data . When users reset their password, their data stays accessible we use password-derived keys with a recovery mechanism that doesn't give us access to the cleartext