Skip to content
Agents for Humanity
Public draft. All results are preliminary desk assessments against criteria v1.0, updated 27 Sept 2026. No agent has been certified yet. How we assess
AssistanthybridProprietary

Perplexity Comet

Perplexity AI, Inc. · perplexity.ai/comet

Comet keeps browsing data on the device by default and gives owners strong in-product controls: site blocklists, permission prompts before logins and purchases, a Stop button, and editable memory. The agent itself (assistant logic, instructions, model routing and memory) runs on Perplexity's servers and cannot be exported, inspected or run independently, so it fails most portability, auditability and verifiability tests. AI data retention for training is on by default for consumer plans.

Strengths
  • Browsing data stored locally by default
  • Per-site blocking and allow/prohibit controls for assistant actions
  • Pauses for permission before logins and purchases; Stop button
  • Memory can be viewed, searched and deleted
  • Self-serve data export and account deletion
Gaps
  • Assistant runtime is closed and cloud-dependent; no agent export
  • System instructions not disclosed; no complete, tamper-evident action record
  • Model choice limited to Perplexity-hosted models, gated by plan
  • AI training data retention enabled by default (opt-out)
  • Post-deletion retention no longer time-bound in the privacy notice
Evidence

All 34 findings

Comet desktop browser with the Comet Assistant, as documented in September 2026 under the Perplexity Privacy Notice of July 2, 2026. Free, Pro and Max consumer plans; Enterprise controls noted where relevant.

Portable · Can you leave, and take the whole agent with you?

8%
  • P1
    Round-trip portability

    Incomplete, delayed and not restorable: 'Export my data' delivers a ZIP of threads by email without instructions, connectors or logic, and Perplexity documents no import.

    Fail
  • P2
    Complete export

    Threads come through the account export and browsing data sits in the local profile, but assistant instructions, model routing, connector credentials and executable logic stay with Perplexity, as does anything that identifies the agent.

    Partial
  • P3
    Independent execution

    The browser runs locally, but the Comet Assistant's inference and agent logic run on Perplexity's servers. No exportable agent runs on an open-source runtime.

    Fail
  • P4
    Identity continuity

    Assistant identity is the Perplexity account, and nothing lets others verify it is the same agent without Perplexity.

    Fail
  • P5
    No kill switch

    The Assistant needs a Perplexity account and servers, and features are gated by plan, so the provider can disable or degrade it.

    Fail
  • P6
    Capability independence

    Memory, connectors, background assistants and agentic browsing are Perplexity-hosted services that do not survive a move to another model provider.

    Fail

Transparent · Can you see everything the agent is, with ordinary tools?

25%
  • T1
    Open storage format

    Local browsing data uses Chromium's on-device storage (largely SQLite and JSON), which ordinary tools can read. Assistant memory and threads sit in Perplexity's cloud in undocumented formats.

    Partial
  • T2
    No hidden instructions

    Perplexity does not show owners the Comet Assistant's system prompt or the tool instructions it adds to the model context.

    Fail
  • T3
    No shadow memory

    Queries sent to the Assistant are processed and kept by Perplexity, crash reports and IP data are collected, and consumer data is kept for model improvement by default. Provider-held data therefore exists outside owner-inspectable state.

    Fail
  • T4
    Complete action history

    The Assistant sidecar shows its reasoning and steps as it works, and threads persist in the account, but no complete record of every action and tool call is documented as available to the owner or leaving with the export.

    Partial
  • T5
    Readable logic

    The Assistant's executable logic is proprietary and server-side. Owners can save prompts and shortcuts but cannot read the agent logic.

    Fail
  • T6
    No third-party influence channel

    Perplexity says it does not send prompts or conversation content to advertisers, and it confirmed in 2026 that it is winding down its ads programme (sponsored follow-up questions). Owners cannot see or switch off how merchant and publisher partnerships affect ranking, and web-page content can inject instructions, as Brave's prompt-injection research showed.

    Partial

Auditable · Can you reconstruct exactly what the agent did?

0%
  • A1
    No unrecorded actions

    No durable record of every consequential Assistant action is documented, nor that an action which cannot be recorded does not proceed.

    Fail
  • A2
    Tamper evidence

    Threads and local history can be deleted without a trace, and no other way to detect changes to an action record is documented.

    Fail
  • A3
    Separation from the audited

    Perplexity does not document whether the Assistant, which operates the browser, can alter or delete records of its own actions such as threads or history.

    Unverified
  • A4
    Readable with ordinary tools

    There is no audit trail of Assistant actions. Only threads, through the account export, and local browser history can be read.

    Fail
  • A5
    Corroborated interactions

    No record of the Assistant's exchanges with other agents or services is documented that could be matched against a counterpart's record.

    Fail

Verifiable · Can you prove the agent runs what it claims?

0%
  • V1
    Open, reproducible runtime

    Comet is built on open-source Chromium, but Comet and its Assistant are proprietary and have no published reproducible builds.

    Fail
  • V2
    Active config is inspectable config

    Owners can see their settings but not the effective server-side configuration, such as system prompt, routing and model versions.

    Fail
  • V3
    Attributable messages

    The Assistant acts through the owner's web sessions and Perplexity-held connector grants; recipients have no way to verify a message came from this agent under the owner's authority.

    Fail
  • V4
    Independently checkable record

    No action record with checkable integrity exists, so nothing can be verified with open tools.

    Fail
  • V5
    Comparable state

    Agent state is split between the local profile and Perplexity's cloud, where memory and configuration are not fully exposed, so the owner cannot verify whether the whole state changed.

    Fail

Modifiable · Can you change anything, without asking?

33%

Controllable · Is your word final?

50%
Something wrong or out of date?

Vendors and the public can dispute any finding with evidence. Disputes and their resolutions are published.

Dispute a finding