Agents › Hermes Cloud
Hermes Cloud
Agent Safeguards 2/10 Policy grade D4/12What it can do as you
Agent Safeguards
2/10What Nous Research says about how Hermes Cloud handles the access you give it. The five scores add up to a number out of 10, with no label.
A1Logins
Saved logins stay out of the model’s view (“the model never sees them”) in an encrypted vault, but for connected accounts “we and our integration service providers receive and store access credentials for the account”, with only a disconnect control and no expiry.
A2Capturetraining by default
Screenshots “are sent inline with tool results” to the model, and unless Privacy Mode is on, Nous stores those payloads and may use them for “training, fine-tuning”. Action logs are kept with no period.
A3Memory
Memory entries can be added, patched or removed, and memory can be reset or turned off, but no purge timeline covers the copies Nous stores with every prompt.
A4Where it runs
A standing cloud computer: “Your agent has its own dedicated, persistent workspace, so its files, memory, and configuration stay with it … whether it is running or stopped.”
A5Exit
“Destroy” exists with no stated scope, and Nous keeps action records and inference payloads under a licence that survives termination: data is left behind. Export exists (session JSON, backups).
Policy grade
4/12Read from the Nous Portal Privacy Policy and Terms of Service, the policy that governs Hermes Cloud.
Policy grade for Hermes Cloud: D4/12, read from Nous Portal Privacy Policy (updated 28 Sep 2026) and Terms of Service.
The 0 on Sells / shares caps the grade at 8, which does not bind at 4.
Access
The privacy policy has no rights section. It states no access right, form or timeline. The only paths are “When We Do Not Act on a Request”, which presumes requests the policy never describes, and a contact address for “questions regarding this Policy”.
Portability
A self-serve export exists only for the agent’s own data. The Hermes dashboard can “download a session (metadata + full message history) as JSON” and “create a backup”. No tool or right covers what the Portal account itself holds (stored inference payloads, action logs, billing).
Friction
The controls that exist are self-serve: Privacy Mode under Account Settings, and ending the account “by clicking the cancellation link on the Web Site”. Deletion then takes up to six months unless you ask: “If you have specifically requested for an earlier deletion of the Account, Nous Research shall fulfill such request within 1 month”. No other right has a documented path.
Deletion
A timeline is stated: “Nous Research shall deactivate and permanently delete the Account, within six months of the effective date of termination”, or within one month on request. But the §12 data licence survives termination, including the right to “provide, license, or otherwise make available Your Data … to third parties … for such third parties’ own use”, so copies already licensed out are never recalled.
Sells / shares
“You hereby grant Nous Research the right to provide, license, or otherwise make available Your Data and Service Data to third parties for any lawful purpose, including for such third parties’ own use, analysis, and product development.” There is no no-sell statement and no opt-out from the licensing.
Trains AI
Nous trains on your data by default, with a self-serve, account-wide opt-out: “When Privacy Mode is enabled, we will not store your inference payloads and will not use such inference payloads for training”. It is forward-only and does not cover “operational metadata” or connected-account action records.
Timeline
- Hermes Agent open-source release v2026.3.12
- Nous Portal privacy policy updated
- Hermes Agent v0.22.2 released
Every cell is stated: read from Nous Research’s published pages, not tested by us. Spot an error? Tell us. How agents are graded →