Security is not a layer.It is the skeleton.

Your vault is encrypted in transit and at rest. Keys are held under a documented custody procedure, separate from the data.

On servers we operate directly, today in the United States, not on a managed cloud service that holds the keys for us. The stack is portable by design, so where it runs can change without the product changing.

Nothing is shared by default. Every grant names what it covers, has an end date, and can be revoked at any moment.

An assistant reads only the categories you granted, for as long as you granted them. The most sensitive levels stay closed unless you open them.

Opening a sensitive item for one answer only, and closing it again when the answer is done.

Every read and every write is recorded with who asked, what was granted and when. Entries are chained, so a change to the past does not go unnoticed.

Not done yet. When an external audit happens, the result is published here, whatever it says.

Your vault is not used to train models, not by us and not by the providers we work with.

Exporting everything and deleting your account are part of the account, not a support ticket.

Against the document itself, including the chip in passports and modern ID cards, so what is verified is verified against the source.