Security
Built like a vault. Felt like a hand on the shoulder.
Trust is the only currency that matters here. Here's exactly how we keep what you place inside, inside.
Encryption at rest & in transit
AES-256 server-side encryption on all stored vault data. TLS 1.3 in flight. Storage objects served only via short-lived signed URLs.
Zero-knowledge for your secrets
Passwords, private notes and account credentials are encrypted in your browser using a passphrase only you know. Our servers store ciphertext only and cannot decrypt it.
Authentication & access
Email & password (with leaked-password protection) plus Google sign-in. Row-Level Security policies isolate every vault by owner.
The release flow
You nominate an executor and a small set of trusted verifiers. A release requires the configured number of independent confirmations.
Owner override window
Once a release is triggered, you receive an email and in-app alert. A 7-day window lets you cancel before anything is delivered.
Granular grants
Each item — document, message, account — is assigned to a specific recipient. Nobody sees more than their portion of your vault.
Audit log
Every grant change, release request, verifier confirmation and beneficiary access is timestamped and reviewable.
Your data, your control
Export everything at any time. Close your vault and request full deletion. Your legacy is never anyone else's asset.
A note on honesty
The Legacy Capsule release flow is operated through trusted human verifiers — not a government-issued death-certificate API. We will be transparent with you and your beneficiaries about what we can verify and what we cannot. As we add legal partnerships in your jurisdiction, the verification standard will deepen.