How we protect your family’s records

Your documents

• Every document is encrypted with its own key before it is stored. Those keys are themselves encrypted with a platform key that we rotate.
• Files are checked for malware and their real type before they are accepted.
• We don’t store passwords, PINs or recovery phrases, and the Vault will warn you if a document looks like one.

Who can see what

• Each person sees only what the household chose to share with them, and only from when it applies: now, if someone can’t act, or after a death.
• Every view of shared information is recorded, and the household can see that record.
• Professionals see a household only through a specific piece of work you’ve agreed to, and only while their firm’s registration checks out.

When someone can’t act, or has died

• A report changes nothing on its own. A person on our team checks documents, identity and authority first.
• A death certificate alone never opens anything.
• After a confirmed death there is a waiting period, and everyone the household trusted is told. A dispute can pause everything.

Your account

• You can see where you are signed in, and sign out of any device, from Settings.
• We never ask for bank, card or pension logins, and we will never ask for your password by email or phone.

Reporting a security issue

If you think you’ve found a vulnerability, please tell us through our support page and mark it as security-related. Please don’t access other people’s data to prove it.