Ethics & Data Governance

Built to protect the people
who generated the data.

This page describes Serraro LLC's approach to consent, data governance, and the independent Research Trust. It was written before the data exists — because the right time to build the right structure is before anyone wants to exploit it.

"Everything in this framework was designed to protect the people who generated the data. Not as an afterthought. As the foundation."

— Serraro LLC — Emori Clinical Insight Layer & Research Trust Framework, V2.0, March 2026

Emori is a monitoring system. We say so honestly.

A voice-based companion that observes daily patterns, logs what it notices, and reports to caregivers is a monitoring system. Describing it as anything else would be dishonest — and the people it serves deserve honesty above all.

What distinguishes Emori is not the absence of monitoring. It is the governance of it. Who decides what is observed. Who sees what. Who owns the data. And what can never be done with it, regardless of who owns Emori in the future.

What Emori monitors: Daily conversation patterns, word-finding, emotional tone, medication confirmation, session length, and engagement signals. Emori observes behavior — not content. Lumi notices patterns, not words.

What Emori never monitors: The content of any conversation. Any words spoken. Any names mentioned. Any story told. The content of every memory, every conversation, belongs entirely to the person and their family.


What is collected, who sees it, and who owns it.

Every interaction with Lumi generates two simultaneous data streams. They are separated at the source — before any data moves anywhere.

How data moves — from person to Trust
Stream A
Personal data — full audio, transcripts, names, account information, family profile, daily care logs. This stream stays within Emori's secure system. It belongs to the family. It is governed by their consent choices. It never crosses the wall.
Stream B
Pattern data — behavioral signals, linguistic patterns, pause data, topic response, daily care engagement. No words. No names. No content. Extraction happens locally before any data moves.
— Stream A never crosses this line. Ever. —
Trust receives
Only Stream B — and only with explicit research consent. Anonymous identifier, age range, gender, language, cultural region, behavioral pattern data. Anonymous by architecture. Not just by policy.

The path from research data back to the individual does not exist — because it was never built. One encrypted lookup table connects anonymous research identifiers to real accounts. It exists solely to enable consent withdrawal. It never leaves Emori's most secure environment and is never shared with the Serraro Research Trust.

Who owns the data

The family owns Stream A. Serraro LLC holds it under the governance framework. It is never sold. It is never used for advertising. It is never shared without explicit consent. If you leave Emori, your data leaves with you.

What Serraro LLC cannot do

Serraro LLC cannot access the research dataset for its own commercial purposes. The Trust holds it independently. If Serraro LLC is acquired, the research data does not transfer to the acquirer. This is built into the legal architecture — not promised in a policy.


Layered, person-controlled, and never bundled.

The clinical insight layer has two separate consent tracks. A family may say yes to one and no to the other. They are never bundled, never pre-checked, and never designed to nudge toward yes.

Both consent moments are honest about uncertainty. Track Two in particular cannot promise outcomes. The language reflects what is actually known — and what is not.

A note on Track Two — transparency about our default. Research contribution is enrolled by default. When a family completes registration, anonymous pattern data is contributed to the Serraro Research Trust unless they actively decline. We made this choice deliberately — and we say so openly.

Our reasoning: the populations Emori serves are the ones most absent from dementia research. Every family that participates brings us closer to care that is more personal, more effective, and more human for everyone who comes after. We believe most families want to be part of something bigger than themselves — and we designed the default to reflect that belief.

What makes this ethical is not the absence of a default. It is the honesty about it. The opt-out is a single checkbox, clearly labeled, never buried. Withdrawal is available at any time through the caregiver portal. Data is removed from the active research dataset within 30 days of withdrawal. The choice is real, reversible, and explained in plain language before it is made.

Track One — personal clinical report — remains a true opt-in. No default. No pressure. Separate decision entirely.


Designed and committed — to be formally established pre-Ring 3

An independent nonprofit that Emori cannot control.

Emori operates as two legally distinct entities. Serraro LLC builds and operates the product. The Serraro Research Trust — an independent nonprofit — holds and governs the anonymized research dataset.

The Trust is governed by an independent board that does not include Emori executives. Its board includes clinicians, ethicists, community representatives, and family advocates. Serraro LLC contributes data to the Serraro Research Trust under formal agreement — but does not control it.

"A company that holds valuable data and also benefits from it has incentives that will eventually diverge from the people who generated it. Even with the best intentions. The structure is wrong. The Trust is how Emori makes the right structure the only structure."
Why this structure

Serraro LLC is structured to prevent us from exploiting this data even if we wanted to. The people who generated it deserved that protection built into the architecture — not just promised in a policy.

If Serraro LLC is acquired

A new owner of Emori gets the product, the technology, the brand. They do not get the research data. It lives in the Serraro Research Trust. The Trust's charter governs it. This protection exists from the beginning — not added later when it is too late.

The Trust is committed in writing now — before the data exists, before the Serraro Research Trust is formally incorporated, before any research relationship is established. Phase 1 is the commitment. Phase 2 is the pilot, with consent boxes present and the research track honestly disclosed as not yet active. Phase 3 is formal establishment at scale.


The communities Emori serves are the ones most absent from dementia research.

Most dementia research data comes from clinical settings — controlled, infrequent, anxiety-producing. It is conducted primarily in English. The populations it studies skew white, educated, and English-speaking. Spanish-speaking elders from Latin American backgrounds are almost entirely absent. Filipino, Japanese, Korean, and other immigrant communities are studied in fragments, if at all.

Naturalistic longitudinal data — daily observation at home, in a person's own language, over months and years — does not currently exist at any meaningful scale.

The research gap is not an abstraction. It means that the grandmother who immigrated from Sonora in 1981, who speaks Spanish and carries the specific cognitive patterns of her culture and her history, has almost never been studied. Emori can be the one that looks.

The community benefit requirement built into commercial licensing of Trust data is not charity. It is a structural correction to a historical pattern. The community that gave the data receives something back. That's not optional. It's the architecture.


Infrastructure is not neutral. Ours was a deliberate ethical choice.

Lumi is powered by Claude, the AI model developed by Anthropic. This was not a technical default. It was a deliberate choice made for reasons inseparable from Emori's mission.

Anthropic was founded with a specific mandate: to develop AI that is safe, interpretable, and beneficial. For a product serving people with cognitive decline — among the most vulnerable users of any AI system — infrastructure built by people who take that responsibility seriously is not optional. It is the baseline.

"Lumi is powered by Claude, an AI model developed by Anthropic — a company built around the principle that AI should be safe and beneficial. We chose Claude because the people who built it share our values. We think that matters when the person using this product is someone you love."

— Emori onboarding disclosure, plain language version

Emori discloses its AI infrastructure to families. Not in fine print. In plain language, at onboarding, as part of the trust conversation. Families who bring Emori into their home deserve to know what it is built on and why those choices were made.