LivingWillEncrypted with keys we cannot see
Your passphrase becomes a 256-bit key on your device. That key never leaves the device unencrypted, ever. The server sees ciphertext and minimal routing metadata. We could not read your vault if we wanted to.
Security
Built like a vault. Open like a library.
A platform that handles a family's most important documents has to do more than promise security. It has to make the promise verifiable.
Built like a vault. Open like a library.
A platform that handles a family's most important documents has to do more than promise security. It has to make the promise verifiable.
Open-source decryption tool
A standalone command-line tool, published under MIT license, decrypts any vault export given your recovery phrase. No LivingWill infrastructure required. If we vanish tomorrow, your family still gets in.
Encrypted data escrowed quarterly
Your encrypted vault is deposited with Iron Mountain every quarter. The escrow contract releases the vault to a trustee if we cease to operate. Iron Mountain cannot read it; only your recovery phrase can.
Source code escrowed too
Our source code is escrowed with Iron Mountain. If we are acquired and the new owner discontinues the service, the source code is released to a trustee for community continuation.
Exportable, anytime
You can download your full encrypted vault as an archive at any time. The open-source tool reads that archive offline.
Zero data retention on AI
Our AI assistant runs on Anthropic Claude under a commercial Zero Data Retention agreement. Personal information is tokenized in your browser before any prompt leaves your device. The model provider sees [NAME_001], not your name. AI conversations are never used for training.
Continuity
Continuity in writing
We commit, in our Terms of Service, to a 180-day notice of any intent to close the service. The notice includes export instructions, the open-source decryption tool, and a path to retrieve your physical wet-ink originals if you have used that service.
Our continuity promise
Continuity in writing
We publish an annual transparency report covering law enforcement requests, scope, and disposition. The first report runs after one calendar year of operation.
Built like a vault. Open like a library.
A platform that handles a family's most important documents has to do more than promise security. It has to make the promise verifiable.