The encrypted vault your family will actually need.

Anything: insurance policies, property deeds, vehicle titles, tax records, bank statements, crypto recovery phrases, password manager exports, digital account credentials, medical directives, photos, videos, personal letters. If it’s a file, it goes in the vault.

Every file is encrypted client-side with AES-256-GCM using a random File Encryption Key (FEK). The FEK is wrapped with your Master Key (MK), which itself is derived from your passphrase + a device-bound Account Secret Key via Argon2id (64 MB). The server never sees plaintext, only ciphertext it cannot decrypt. Read the full architecture on the

The dead man’s switch activates after 180 days of inactivity plus a 5-week warning cascade. Trusted contacts you designated are activated and receive access. They’ve held their decryption keys the whole time, the platform was just refusing to serve the ciphertext until now. After 60 days, the Living Vault is permanently deleted.

No. Our architecture is zero-knowledge. Even with full admin access to every server, our staff cannot decrypt your vault, the keys never leave your device. This is cryptographically enforced, not a promise.

Witness (free): 1 GB. Guardian: 100 GB. Legacy: 100 GB to 1 TB depending on tier. Eternal Vault: 100 GB to 1 TB depending on purchase. Additional storage is available as an add-on.

No. Henedo's primary storage layer is geo-redundant: encrypted blobs are replicated across multiple regions on a current-generation cloud object store, with continuous SHA-3 fixity checks that detect silent corruption and re-replicate automatically. On top of that, Henedo runs an active-preservation cycle — roughly every 10 years the underlying drives, formats, and infrastructure are migrated to current technology, the way the Library of Congress, national archives, and other archival institutions do it (ISO 14721 / OAIS, PREMIS). Eternal Vault customers can add an M-DISC physical backup as an extra redundancy layer (ISO/IEC 10995:2011, rated up to 1,000 years) — never the only copy.

Yes — every file and every folder in the vault carries an optional written note (markdown supported, autosaves as you type) and an optional recorded voice memo (up to 30 minutes). Both are encrypted client-side under the same Master Key as the file itself, so the server is blind to all three. When the file travels — into a trusted contact's bundle or sealed into an Eternal Vault — the note and voice memo go with it, automatically re-wrapped under the appropriate envelope key. Inheritors don't just receive the document; they hear the voice of the person who saved it explaining what it is.

No. Transcription would require shipping audio to a model API, which would break the zero-knowledge boundary. Voice memos are stored as encrypted audio only. On-device transcription that never leaves your browser is on the roadmap.