
Continuity
Our continuity promise
The most important promise a platform like this can make is the one that survives the platform itself.
Our continuity promise
The most important promise a platform like this can make is the one that survives the platform itself.
Your data is encrypted with keys we cannot see. The server only ever holds ciphertext and minimal routing metadata.
Your encrypted vault is escrowed quarterly with Iron Mountain. If LivingWill ceases operations, Iron Mountain releases your encrypted vault to a trustee.
We publish the decryption tool as open source under the MIT license. Anyone, with no LivingWill infrastructure, can decrypt your vault given your recovery phrase.
Our source code is escrowed. If LivingWill is acquired and the new owner discontinues the service, the source code is released to a trustee for community continuation.
You can export everything, anytime, to a downloadable archive that the open-source tool reads offline.

Continuity
Why this matters
The product you are trusting with your most important documents has to keep working when we cannot answer the phone. That is the test. Every choice in the architecture, from the client-side encryption to the open-source decryption tool, is built around it.
How security works180 days, in writing
We commit in our Terms of Service to a 180-day notice of any intent to close the service. The notice includes export instructions, the open-source decryption tool, and a path to retrieve your physical wet-ink originals if you have used that service.

Why this matters
The product you are trusting with your most important documents has to keep working when we cannot answer the phone. That is the test. Every choice in the architecture, from the client-side encryption to the open-source decryption tool, is built around it.