Español

SECURITY & TRUST

Security & Trust

Your important documents deserve thoughtful protection.

At ForeverVault, security and privacy are central to how we design our digital vault.

We help you organize, protect, and share important documents while giving you control over who can access them and under what circumstances.

Our approach combines encryption, account security, controlled document sharing, and optional enhanced privacy settings.

We also believe you deserve clear explanations of how your information is protected—including the differences between our web and mobile applications and the limitations of account recovery.

1. How We Protect Your Documents

Encryption during upload and storage

ForeverVault protects your documents using encryption, with different processing methods depending on how you upload them.

Web application and Android

Documents uploaded through our website and Android application are encrypted on your device before they are uploaded to ForeverVault.

iPhone application

Documents uploaded through our iPhone application are protected during transmission. ForeverVault encrypts these documents before storing them.

Encrypted storage

Documents are stored in encrypted form. ForeverVault uses Amazon Web Services (AWS) infrastructure and AWS Key Management Service (KMS) as part of its encryption and key-recovery architecture.

These protections help reduce the risk of unauthorized access, but no online service can guarantee absolute security.

2. Password Protection and Account Security

How your password is handled

ForeverVault receives your password over an encrypted connection to verify it.

The password information retained for your account is a hash—not your password in plaintext.

This distinction is important: password hashing protects stored authentication information, while encryption protects documents and other sensitive data.

Two-factor authentication

ForeverVault supports two-factor authentication (2FA), providing an additional layer of account protection beyond your password.

We encourage users to enable 2FA and use a strong, unique password.

3. Encryption Keys and Account Recovery

Standard protection with recovery

By default, ForeverVault maintains a protected recovery mechanism designed to help restore access when necessary and support authorized document-delivery features.

This architecture means ForeverVault is not a zero-knowledge service in its standard configuration.

Recovery-key access is subject to the controls and procedures described in our security documentation.

Total Privacy: enhanced control over recovery

For users who prefer additional privacy, ForeverVault offers an optional Total Privacy mode.

This mode removes ForeverVault's ordinary ability to recover the encryption key used to access your vault.

An important tradeoff: If you lose the credentials or recovery information required to access your vault while using Total Privacy, ForeverVault may be unable to restore access to your documents.

Total Privacy can also limit features that depend on ForeverVault's ability to recover or deliver encrypted information.

If you enable Total Privacy after you have used an account with recovery, some earlier backups may temporarily retain recovery material. Turning off the live key does not necessarily mean every earlier copy is removed at once. See our Privacy Policy and Terms of Service for these limitations.

We encourage you to understand these limitations before enabling the feature.

4. Sharing Documents With People You Trust

Your vault is designed to help you decide which information to share, with whom, and when.

ForeverVault supports several sharing options, including:

  • Immediate Share: Share selected information with designated recipients.
  • Delayed Share: Arrange for selected information to become available according to configured sharing conditions.
  • Legacy Share: Designate information for delivery through ForeverVault's legacy-access procedure.

Legacy access and verification

Legacy Share is governed by a defined procedure involving a designated recipient, a sworn declaration, notice to the account holder, and an opportunity to stop the requested release.

ForeverVault does not represent this process as an independent investigation or conclusive verification of death.

Users should carefully select trusted recipients and review their sharing settings.

Trusted Contacts

A designated Trusted Contact can open the current items in your vault, including documents you add later, but not Wallet contents. This access does not depend on a report of death.

You can revoke future access, but revocation does not remove copies the recipient has already downloaded. Designate only people you fully trust.

5. Recovery Controls and Activity Records

ForeverVault restricts use of recovery keys to authorized functions and records that use to support oversight and accountability.

ForeverVault does not have a console that lets employees browse vaults or freely view documents. Use of recovery keys requires active credentials that can be revoked.

On standard accounts, the architecture technically allows recovery of the keys needed to decrypt documents in the authorized circumstances, including applicable legal obligations. These mechanisms are subject to the controls and procedures described in our documentation.

For additional details, review our Privacy Policy and Terms of Service.

6. Backups and Data Availability

ForeverVault uses encrypted backups as part of its data-protection and recovery architecture.

Backups are intended to support recovery from certain operational failures, but they do not eliminate every risk of data loss or service interruption.

ForeverVault does not guarantee perpetual availability or indefinite document retention.

We recommend keeping independent copies of essential legal and financial documents, especially original documents that may be required for legal proceedings.

7. Privacy and Responsible Data Handling

Your documents may contain highly sensitive personal, financial, legal, and family information.

Our Privacy Policy explains the categories of information we collect, how information is processed, the circumstances in which information may be disclosed, and the role of encryption and recovery mechanisms.

We encourage users to read these policies before storing sensitive documents.

Privacy is not simply a promise that no one can ever access encrypted information. It is a combination of technical protections, operational controls, user choices, and clearly disclosed limitations.

8. Transparency About Our Security

We believe security claims should be accurate, understandable, and verifiable.

This page describes ForeverVault's documented security architecture and available features. It is not an independent security assessment.

We do not present our service as SOC 2 certified, ISO 27001 certified, or independently penetration-tested without corresponding evidence.

Likewise, we do not claim that our standard vault operates under a zero-knowledge architecture.

Our goal is to explain what our systems are designed to do, what users can control, and where important limitations exist.

9. What You Can Do to Protect Your Vault

Security is a shared responsibility. We recommend that you:

  1. Use a strong, unique password.
  2. Enable two-factor authentication.
  3. Protect your devices and recovery information.
  4. Review trusted contacts and document-sharing permissions regularly.
  5. Understand the consequences before enabling Total Privacy.
  6. Maintain independent copies of essential documents.

10. Learn More About Our Security and Privacy Practices

We encourage you to review the following resources:

Your documents. Your decisions. Clear information about how they are protected.

ForeverVault is designed to help you preserve important information and make it available to the people you trust, while keeping you informed about the security and privacy choices involved.