Yes. The Cortex is your company's asset, and it is readable: through the product, through the REST API, and through the MCP surface. Your brain is not held hostage.
You can read entities, facts, and recent learnings programmatically, with receipts. What Heidi knows about your company is inspectable by your company, by design.
The data-control principle runs through the whole product: your context, your rules.