About
We believe every family deserves to be remembered.
Henedo is the post-quantum digital will, vault, and eternal legacy platform, built for the first generation whose lives are more digital than physical, and whose documents, crypto, and stories would otherwise disappear.
Our mission
The incumbents sell documents,we sell peace of mind.
67% of Americans die without a will. 40 million own cryptocurrency, yet almost none have a plan for what happens to it. Billions of dollars in assets disappear every year not because the owners didn’t care, but because the tools to care were ugly, expensive, one-time purchases that never got updated.
We built Henedo because the incumbents sell documents. We sell peace of mind as an ongoing relationship. Every life change, marriage, new baby, property purchase, a new crypto wallet, is a reason to update. And the platform reminds you.
Your will is a single page in a much bigger story. The vault holds the documents, the journal holds the day-by-day you, and the Life Story holds the rest: 1,000 curated prompts across ten dimensions of a life, answerable in text, voice, or video. The things only you can leave behind. Encrypted end-to-end. Released only on your terms. Preserved for generations if you want.
Henedo is designed for individuals and couples, each person keeps their own private vault, but a household plan unifies the bill.
Daily, not just at death
Use it daily.Deliver it once.
A common critique of legacy platforms is that they are "binary, alive vs dead, no living interaction." That is a fair critique of any product that is just a vault. Henedo is engineered for daily use:
- Record a 60-second voice note for the people you love. Keep it in today's journal, or seal it as a capsule that opens on a day you choose.
- Seal a video message your grandkids will watch on a birthday you will not be there for.
- Update your will inline as life changes, marriage, birth, divorce, new property.
- Upload the new insurance renewal, the new mortgage doc, the new recovery phrase.
- One-click monthly check-in resets the Trusted Delivery timer.
- Access keys are emailed to your trusted contacts the day you designate them, while you are alive, so they hold the key the moment you decide they should.
The vault and the journal are objects you interact with regularly. The Trusted Delivery release is the once-in-a-lifetime delivery the rest of the platform exists to make possible. Use it daily. Deliver it once.
Engineered delivery
Wills tell.Henedo delivers.
"I have a will" is not the same as "my family actually got the right things at the right time." Probate freezes accounts. Lawyers move on. Spouses forget. Children argue. The gap between the legal document and the lived reality is where most inheritances quietly disappear.
Henedo is engineered to close that gap. Trusted contacts hold their decryption keys from the day you designate them, delivered by email years before anything depends on them. Trusted Delivery is a server-side policy gate, not wishful delivery. The 60-day access window after activation gives heirs time to download what is theirs. Underneath, Henedo provides portable encrypted exports. A complete archive copy and its full key support independent recovery. Current Eternal purchases are encrypted cloud archives; physical delivery applies only to older contracts that include it.
We are the only platform we know of that combines all four layers (pre-delivered keys + DMS + window + portable archive copies) in production. Wills tell. Henedo delivers.
Our principles
Six commitmentsthat we refuse to compromise.
01
The server is blind to your vault.
Your master key is derived in your browser from your password plus a device-bound Account Secret Key, and never reaches our infrastructure in any form. Vault contents are sealed with AES-256-GCM under that key, so a full breach of our database yields only ciphertext we cannot decrypt.
02
Contact keys are explicit, not magic.
Each contact's one-time key is generated in your browser, then routed through a single dispatch endpoint that forwards it to its delivery channel: email for trusted contacts and current Eternal cloud inheritors. Older contracts with disc delivery retain a split key across the disc and email. The physical half may be held in encrypted fulfillment escrow for those contracts; the full key is not stored. Hosted release follows your access settings. Full architecture on the security page.
03
Post-quantum by default.
Your Eternal Vault is triple-signed with Ed25519, ML-DSA-65 (NIST FIPS 204) and hash-based SLH-DSA (NIST FIPS 205), and every signature must verify before it opens. Your data is encrypted with AES-256-GCM, which retains 128 bits of security against Grover’s algorithm, and anything you share with your partner is wrapped with X25519 and ML-KEM-768 (NIST FIPS 203) together. We do not wait for the quantum era to protect the documents your grandchildren will open.
04
Transparency is not optional.
Every production build is signed in CI with an Ed25519 key and the manifest is published publicly. Visit the transparency log to verify the JavaScript in your browser matches the JavaScript we shipped.
05
Your family, not your lawyer.
Trusted contacts receive their access keys by email the day you designate them, years before they are needed. No escrow, no third-party intermediary, no hidden handoff at the worst moment. The platform is the gate, the keys are already home.
06
A separate encrypted archive.
Eternal Vault is $699 once for 100 GiB with a 100-year preservation term. After payment, upload files, choose inheritors and seal in your account. Cloudflare R2 stores the encrypted archive. Physical delivery and an invested preservation fund are not included in the current purchase.
Why us, why now
Security first,estate planning second.
Most legacy platforms are built by estate-planning teams who hire security later. Henedo was built the other way around. Our founders bring direct backgrounds in cybersecurity, blockchain, and AI, the three disciplines this product fuses, and v1 already includes what most products in this space add in v3.
Cybersecurity
Architecture-first, not policy-first.
Zero-knowledge, the device-bound Account Secret Key, WebAuthn PRF hardening, Web Worker isolation, canary-blob breach detection, and binary transparency all shipped in v1, because the people who built it have shipped this kind of system before.
Blockchain
User owns the key, by default.
Crypto-native founders know what happens when keys are lost. So Eternal Vault uses per-inheritor key wrapping at sealing time, ML-DSA-65 hybrid signatures shipped on day one, and a "decryptable without the platform" guarantee, all engineered into the product.
AI
AI composition, with your consent.
Journal and Life Story records are encrypted before storage. Optional Life Book composition sends selected written answers through our backend to Anthropic after your consent. The generated book is encrypted in your browser before storage. The proposed Echo experience has its own disclosure about sharing selected copies with AI providers.
The timeline
A young company,verifiable claims.
Honesty about youth, plus a concrete roadmap, plus named disciplines beats vague "team of experts." Here is the public timeline as of September 2026:
- Founding: 2026.
- Architecture spec: published in SECURITY.md and BACKEND_ARCHITECTURE.md, open for review today.
- Bug bounty: $5K to $25K range, see the security page.
- Transparency log: live since launch, see the transparency page.
- 18-month roadmap: ML-KEM for contact-key delivery, SOC2 Type II, ISO 27001.
How we measure ourselves
Confident about the architecture,precise about the scope.
Confident about the architecture, precise about the scope. Each item below leads with the real strength and quietly closes the precision gap.
Built once, properly, in 2026.
Most legacy apps are estate platforms that hired security later. Henedo's v1 already includes ASK, PRF, canary blobs, binary transparency, and ML-DSA-65 hybrid signatures because the founders have shipped this kind of system before. Lastkey, WonderVault, Inheritable also launched recently, the discriminator is depth of architecture, not age.
Endowment math, in the open.
The endowment model is a separate preservation-funding plan. Current checkout enables the encrypted cloud archive; it does not certify that a reserve has been independently held or invested. Investment returns and future storage costs are uncertain.
Post-quantum where it matters today.
Eternal Vault roots are signed with Ed25519 + ML-DSA-65 (NIST FIPS 204) plus a hash-based SLH-DSA leg (NIST FIPS 205), and partner sharing is wrapped with hybrid X25519 + ML-KEM-768 (NIST FIPS 203), all shipped in production via @noble/post-quantum v0.2.x, not on a roadmap. Everything else is symmetric, which is quantum-safe by construction rather than by retrofit. Most ZK competitors haven't shipped any PQ to consumers yet.
Zero-knowledge is the floor, not the ceiling.
Proton Pass, Bitwarden, 1Password, Lastkey have ZK too, that's table stakes for a privacy-first vault. Henedo's distinctive layer is the combination: ASK + WebAuthn PRF + Web Worker isolation + canary blobs + binary transparency + per-inheritor wrapping, all in one product. Each layer is documented on the security page so any auditor can verify.
The team
Built in 2026,by the people who needed it.
Henedo is a new company shipping the estate-planning platform the 2020s finally deserves. We are cryptographers, blockchain engineers, AI researchers, estate attorneys, and product designers who couldn't find anything on the market for ourselves, so we built it.
If you'd like to work with us, write at careers@henedo.com. For press or partnerships, press@henedo.com.
Get started
Ready to start your vault?
Free to start. Your first encrypted vault, your first will draft, and your first trusted contact, live in minutes.