Security

Every file has its own key. Your numbers never sit in plain text.

Every file is locked with its own key, every account with its own, and the master key lives in a separate key service, never on our servers. Deleting a document destroys its key that second.

Three layers of keys

A key per document, locked by a key per account, locked by a master key in a separate key service. Every use of the master is logged by the cloud provider.

Identifying numbers stay sealed

Social Security, account and policy numbers are sealed so an exact search still finds them, and blanked out before any page text is indexed or sent for search.

A log nobody can quietly edit

Every sign-in, view, download, share and correction goes into a log that only grows, for the life of the account.

Deleting means deleting

Delete a document and its key is gone that second. The file is unreadable from then on, backups included.

Details

  • Passkeys first, an email link as the fallback, no passwords.
  • A second layer underneath the app enforces the wall between families on its own.
  • The full write-up, with pictures, is on the security page.

Questions

Where is it hosted?

On Amazon's cloud in the United States, in a private network with one guarded way in.

Set it up once.

Connect the places your documents already land. From then on they arrive filed and understood, every date with what to do.

Everything in Family for your first 14 days, then free forever for your first 100 documents. No card to enter.

Emaila rule you set once3 this week
Google Drivethe Family folder, watched2 this week
Scannersends straight to Thaw1 this week
Phonethe camera, for what only exists on paper
This week: 6 arrived, 6 filed, none touched by hand.