What happens when I save a secret?
The moment you add something to your vault, it's locked on your own device before it ever leaves. What you typed turns into protected information that only your vault can open.
When is my secret protected?
Right away — before it travels anywhere. Your secret is sealed on your device first, so it's already protected by the time it's sent for safekeeping.
What reaches the server?
Only the sealed, protected version. Think of it like a locked box: we keep the box safe for you, but we don't hold the key to open it.
What can the server actually see?
Not your real words. Your readable text becomes scrambled, unreadable data before it's stored. Here's an illustration of that transformation:
What you write
Bank PIN: 4827
What gets stored
8f3a:Xq9zL2vR7tKp1mW4eN6bH0cP5dY8gF…
Illustration only — not real stored data.
Who can open my vault?
You can, with your master password. And the trusted people you choose — but only under the conditions you set up in advance. No one else.
What does "only you hold the key" mean?
It means the ability to unlock your secrets stays with you. We designed the system so that we don't need to see your secrets to keep them safe.
Can this party read your secrets?
What happens if someone breaks into the server?
No computer system can promise absolute security. Our goal is that even if someone reached the stored data, they would find protected, unreadable information — not your personal secrets in plain text.
What if I forget my vault password?
When you set up your vault, you choose a personal security question. Its answer can help you recover access. But if both your password and that answer are lost, your secrets stay sealed — even from us. That's the honest trade-off of keeping the key in your hands.
Our Trust Roadmap
Where we are today — and where we're headed. We only mark things as done when they're truly in place.
- Vault ProtectionImplemented
- Master PasswordImplemented
- Access ControlImplemented
- Record-Level PrivacyImplemented
- Document ProtectionImplemented
- Session SafetyImplemented
- Independent Security ReviewUnder External Verification
- Penetration TestPlanned
- External AuditPlanned
- ISO 27001Planned
- SOC 2Planned
Independent Security Review
We're reserving this space for independent experts to examine and confirm our work.
Security Review
Coming soon
Penetration Test
Coming soon
External Security Expert
Coming soon
Security Certificate
Coming soon
Reviewing Company
Coming soon
Review Date
Coming soon
Trust built on transparency
We don't want trust to depend only on promises. We want it to depend on transparency, thoughtful design, and independent verification.