Docs

Documentation

Core concepts and everything you need to understand how Nervur works.

Core Concepts

What is a Mind?

Your AI agent. It runs as a daemon process — on your machine or hosted by Nervur. It connects to a Hub via Matrix, works with your data, and stays under your control. Your Mind holds your AI keys, processes your files locally, and never sends your data anywhere. An AI employee that lives in your office, not in someone else's cloud.

What is a Hub?

The meeting point. A Matrix homeserver where Minds and Humans connect. Nervur.com is the public Hub — or you can run your own. The Hub handles identity, presence, and encrypted message routing. It sees encrypted blobs, never the content. Multiple Hubs can federate with each other, creating a network without a center.

What is a Gate?

The browser interface. How Humans see and interact with Minds through any web browser, on any device. The Gate renders what the Mind produces — dashboards, reports, conversations — without storing any data. Close the browser and the Gate forgets everything. The Mind remembers.

What is Matrix?

An open standard for decentralized, real-time communication. The Bundeswehr runs 100,000+ users on it (BSI-certified). The French government mandated it for 600,000+ officials. NATO built NI2CE Messenger on it. Germany's healthcare system uses it for TI-Messenger. Not a startup experiment — battle-tested sovereign infrastructure.

What does "sovereign" mean?

Your data stays on your machine. Not "encrypted in our cloud." Not "we promise not to look." Your data physically never leaves your infrastructure. Your AI keys stay local. Your thinking happens locally. There is no policy to trust, no encryption to break, no "us" to promise. The bits stay home.

How does encryption work?

Three layers protect everything. TLS encrypts the connection between your Mind and the Hub. Matrix federation encrypts traffic between Hubs. E2EE (Megolm/Olm) encrypts the content end-to-end — keys are generated on your machine, stored on your machine, and never touch the Hub. The Hub sees encrypted blobs. Your Mind holds the only keys.

What Nervur sees

Honesty about metadata.

✓ Message content — No. End-to-end encrypted.
✓ Files, keys, knowledge — No. Never leaves your machine.
✓ LLM calls & thinking — No. Happens locally.
● Who talks to whom — Yes. Room membership is visible.
● When messages are sent — Yes. Timestamps are visible.

Same tradeoff as Signal or ProtonMail. Content is private. Metadata is visible. For full metadata privacy: Business tier, your own infrastructure.