Skip to content

The research memory your team keeps losing. Kept. Cited. Administered.

Give the team one library. Everyone asks in scoped chat and gets the exact passage back — owners get roles, SAML SSO, SCIM provisioning, and an exportable audit log.Replies from a human, usually within a day.
Admin console

Roles, seats, SSO — administered, not improvised.

Invite the team, set roles, and watch every change land in the audit log.

XESO · Admin console
Admin console: Roles, seats, SSO — administered, not improvised. — product screenshotFive roles, enforced in code
Roles

Five roles. Sixteen capabilities. Enforced in code, not in a PDF.

OwnerBilling, workspace transfer, delete — the keys.
AdminMembers, roles, SSO/SCIM, audit export — not billing.
MemberWrite, capture, and ask — the working seat.
ViewerRead and ask, change nothing.
GuestSees only the folders you explicitly share.

Every mutation checks the capability table before it runs.

Authorization layer — workspace capabilities

assertWorkspaceCapability(userId, workspaceId, capability) guards every workspace mutation — sixteen capabilities across five roles, covered by the capability, seat-cap, and invite-lifecycle test suites.
Identity

Sign-in your IT team already trusts.

  • SAML 2.0, SP-initiated
  • SCIM 2.0 provisioning
  • WebAuthn step-up on sensitive actions
  • One-click session revocation
We run identity-provider setup with you during pilot onboarding — Okta, Entra, Google Workspace, OneLogin, JumpCloud, or generic SAML. Request the setup guide.
Knowledge boxes

Publish the canon once. Everyone asks it, cited.

Managed, read-only sources your whole workspace can attach and question.

XESO · Knowledge boxes
Knowledge boxes: Publish the canon once. Everyone asks it, cited. — product screenshotAttached boxes stay read-only
Connectors

Drive, Gmail, and Zoho arrive with their source.

Imports keep a source badge and link back to the original record.

XESO · Connectors
Connectors: Drive, Gmail, and Zoho arrive with their source. — product screenshotFilter the library by where notes came from
The boundary

Your library is yours. The workspace is a choice.

Personal libraries stay personal — admins cannot read members' private notes.

Workspace content isolation — tested at the database layer

Content isolation between personal libraries and workspaces is enforced in the data layer and pinned by integration tests — not a settings toggle, a contract.

Sharing into the workspace is per-folder and opt-in, never a default.

Folder-level sharing — explicit, revocable grants

A member chooses a folder and shares it; the grant is explicit and revocable. Everything else stays private. Every change lands in the hash-chained audit log.
Trust

Bring your security review. We answer it.

US-hosted. EU residency is on the roadmap. Customer content is never used to train models.

Plans

Free$0 — 25 notes
Pro$19/mo — one person, unlimited room
Team$24 per seat/mo — workspace, roles, SSO, audit
EnterpriseTalk to us — pilots, procurement, custom agreements
Full plan comparison →
Questions

The answers procurement asks for

What does the Team plan include?

Everything in Pro for every seat, plus a shared workspace with five roles, an admin console for invites and seat caps, SAML SSO with SCIM provisioning, hash-chained audit log export, and knowledge boxes for managed sources. $24 per seat per month, monthly-only.

Do you support SSO and SCIM?

Yes — SAML 2.0 (SP-initiated) single sign-on and SCIM 2.0 user provisioning. We run identity-provider setup with you during pilot onboarding: Okta, Microsoft Entra ID, Google Workspace, OneLogin, JumpCloud, or any generic SAML IdP.

Can workspace admins read members' personal notes?

No. Personal libraries stay personal — workspace content isolation is enforced at the database layer and covered by integration tests. Sharing into a workspace is per-folder and opt-in, never a default.

Do you offer invoices or longer-term agreements?

Billing is monthly-only at launch. Organizations that need invoices or a custom agreement can email us — we answer every note personally and route you to the right paperwork.

Where is data hosted?

US-hosted today. EU data residency is on the roadmap for enterprise workspaces — tell us if that gates your pilot and we will keep you posted honestly.

Is customer content used to train models?

No. Your library is yours: answers are grounded in your saved sources with citations, and export to Markdown and JSON stays available at all times.

Bring one team and one project.

A deal, a course, a research push — pilot in days, not quarters.