Security, in plain terms

You're trusting us with the instructions for your worst day. Here is exactly how that trust is handled.

What's encrypted

Every entry and every document in your file is encrypted with a key that belongs to your file alone. That key is itself locked by a master key that is kept outside the database. Someone who stole a copy of the database would have ciphertext and nothing to open it with.

Why there's no master password

If your file were locked with a password only you know, it would be useless the day you can't give it. So the lock on your file is not a secret — it's a process: a named person, a verified identity, a waiting period you control, and a record of everything that happened. That trade is the whole product, and we'd rather be clear about it than pretend otherwise.

What a keyholder has to prove

• They hold the phone number you listed (one-time code).
• They hold a valid driver's license in the name you listed (document scan).
• They are the person on that license (live selfie match).

We store the verified name and a pass/fail. We do not store license images or document numbers.

What you control

• Which sections each keyholder can see.
• The waiting period before access opens — from immediately up to a week.
• One-tap cancel on every request, which also pauses that keyholder for seven days.
• Revoke any active access, any time.
• Delete the whole file. It's gone, including documents.

What we log

Every unlock attempt, every cancel, every grant, every read. You can see it all on your activity page.

What we'd tell you to be careful about

Use keyholders' legal names, as printed on their license. Keep your own mobile number current — it's how we reach you fast. And put the Keys card somewhere your keyholder will find it; the best file in the world is no help if nobody knows it exists.