Only your family can read your data

Your records are encrypted with AES-256 on your own device, before anything is saved or synced.

• The key comes from your master password, which only you know
• Unlock with your master password, or with Face ID, Touch ID or Windows Hello on a device you trust
• We can't reset your master password, and we can't read your data

Your Emergency Kit is a printable sheet with your recovery code, as text and as a QR code.

• With your Emergency Kit and your master password, you can get back in on a new device
• Keep it somewhere safe, apart from your devices
• Issue a new Kit from Settings at any time; the old one stops working
• There is no backdoor: without your recovery materials, no one, including us, can open your data

No AI sees your data unless you allow it, and you choose which AI, including your own model.

• Every request shows what will be shared before it goes
• Your office sets the limits; each person can narrow them
• Every AI action is logged on your device

Family members and advisers see only what you share with them.

• Roles for family members, staff and advisers, and approvals for important changes
• A tamper-evident activity history of who joined, left, changed roles or exported
• Estate handover packages are released by the check-in switch, with a key share held by your family's lawyer
• Handover keys are protected with post-quantum encryption (ML-KEM-768)