Where your information is stored and how it is protected.
1. Where your data is stored
- Everything you save — passwords, financial records, emergency contacts, bills and notes — lives in a private, managed cloud database hosted in a professional data center. Nothing is stored on your browser, and nothing is stored on individual office computers.
- Documents you upload (insurance policies, wills, medical records and similar) are kept in private cloud storage. These files are never publicly reachable: opening one requires your signed-in account, and links to them do not work unless you are signed in.
- Your vault is kept separate from the public website. Visitor activity, marketing tools and support chats run on their own systems and have no access to vault contents.
2. How your data is protected
- Encryption in transit and at rest — data is encrypted with AES-256 as it travels between your device and the vault, and again while it sits in storage.
- Per-account isolation — every record is tied to your account at the database level, so even a request from someone else's signed-in session cannot read your rows. This rule is enforced by the database itself, not just by the app.
- Private document storage — uploaded documents sit in private storage with access checks on every download.
- Email verification — accounts are protected by email-and-password sign-in, and every new account verifies its email address.
3. Your encrypted backup files — only you hold the key
When you download an encrypted backup of your vault, the file is scrambled with AES-256-GCM using a passphrase that you choose. Before encryption, the passphrase is stretched through PBKDF2-SHA256 with 250,000 rounds, so guessing it is extremely slow even for well-equipped attackers.
- The passphrase never leaves your device and is never stored on our systems.
- We cannot recover a lost passphrase — without it, the backup file cannot be opened by anyone, including us. Keep it somewhere safe.
- You can also download an unencrypted export if you prefer, and restore either kind back into VerentraVault at any time.
4. Backups and continuity
- The cloud database keeps its own backups so your vault survives hardware failures.
- You remain in control of your own copy: export your full vault at any time, and keep the file wherever you like.
- When you delete your account, your vault content is deleted or anonymised, as described in our privacy notice.
5. Who can see your data
- Only your signed-in account can reach your records — this is enforced by the database for every request, not by the app alone.
- A small number of authorized team members may access your information, only to help you when you ask for support. Automated marketing and visitor-analysis tools never touch vault contents.
- Payments: payments and subscriptions are processed by Stripe. We never see or store your card details.
- We will never ask for your vault passwords, account numbers or other secrets in an email or message. If someone claiming to be VerentraVault asks, do not share it — contact us instead.