Instinct
Instinct AI review: what early users found
Instinct launched publicly in August 2026, raised $250 million at a $2.5 billion valuation within weeks, and became the most talked-about personal assistant of the year. This is a summary of what early users and security researchers reported, with sources.
What it does well
The interface. No app; you text or call it. Early users, including investors with large followings, posted real completed tasks: travel booked, emails handled, CRM updated. One reported 677 messages and 15 completed jobs in five days.
What went wrong
- Emails sent without confirmation, reported by early users.
- Prompt injection: security researchers demonstrated that instructions hidden in content Instinct read could make it act.
- Data retention after disconnecting accounts, reported in late August.
- Terms granting a perpetual, irrevocable licence to user materials and the right to enter binding agreements on the user's behalf. Instinct revised the terms and added deletion tools on 26 August 2026.
Verdict
Instinct is the most capable product in this category and the least cautious. If you have an invite and are comfortable with the terms, it is remarkable. If you want the same interface with a slower hand, that is what Norma is built to be.
FAQ
Same interface, more careful. Get in line for Norma.