Straight answers about your data

No — mathematically no, not just policy no. Every document is encrypted on your device (AES-256-GCM) with a key derived from your vault passphrase before it is uploaded. Our servers only ever store ciphertext. We cannot open your documents, and neither can anyone who breaks into our servers.

Full account, folio and policy numbers are encrypted at rest with a separate server-side key, and screens show only the last 4 characters (••••1234). What our systems can see in readable form: your name, email, phone, institution names, asset types and the valuations you enter — the minimum needed to compute your net worth and readiness score.

We cannot reset it — that is the price of real encryption. Instead, you choose trusted people who each hold a recovery share; the number of them who must come together (e.g. any 3 of 5) is your choice. You can also print an offline Emergency Recovery Kit. Both work without VanshEra's help.

Three protections: you can download your complete Estate Summary anytime; your printed Recovery Kit and recovery shares work entirely offline; and in a wind-down we would provide a full export window before any deletion. Your family's access does not depend on our company existing forever.

An attacker who stole our entire database would get: encrypted document blobs they cannot open, encrypted account numbers, and hashed passwords (bcrypt) and hashed tokens. What they would get in readable form is the same limited metadata we can see — names, emails, institution names, valuations. Painful, but your documents and full account numbers stay sealed. We fail-closed by design.

Nothing releases automatically on a single report. A release needs the quorum of trusted contacts you chose, a death-certificate check by our team, your chosen waiting period, and a final 48-hour warning to you on every channel — and signing in at any point freezes everything instantly. You can also configure the proof-of-life schedule yourself.

On encrypted infrastructure hosted with Vercel and Neon (currently in Singapore; an India region move is planned as we scale under the DPDP Act). All traffic is TLS-encrypted. Payments, when they launch, will be handled by an RBI-regulated processor — we will never store card numbers.

Download your Estate Summary, then email hello@vanshera.com from your registered address and we will delete your account and data. No lock-in, no dark patterns.