Security & privacy
The documents that matter, sealed before they leave your hands.
The Vital Vault is end-to-end encrypted. Passports, policies, wills, account details — the paperwork a family needs exactly when it's hardest to find, protected so that only you can open it.
Encrypted on your device
Your passcode derives a key with Argon2id — a deliberately slow, memory-hard function — right on your phone. Files and fields are sealed with AES-256-GCM before anything leaves the device. We upload ciphertext, never plaintext.
We can't read your vault
There is no plaintext on our servers, and no master key that unlocks everyone. A database dump would be a directory of unreadable blobs. Sherpsy staff can't open your vault, because the ability to do so doesn't exist.
A recovery kit, not a back door
Real encryption means no password-reset that recovers your data — a reset that could recover it could be abused to steal it. Instead, at setup you save a 24-word recovery phrase, and we make you prove you wrote it down.
In Case of Emergency, on your terms
You designate emergency contacts. If one requests access, a visible 48-hour countdown begins — and any admin can deny it instantly. Alarming by design. Every state change is written to a log you can read forever.
Beyond the vault
The rest of Sherpsy is built the same way.
Tenancy
Every row is fenced to your household by database row-level security — the same rule that governs a read governs the realtime push. One family's data cannot appear on another's screen.
Keys
The privileged service key never ships to the app or the website. Our build pipeline greps the shipped bundles for it and fails the release if it appears.
Access
Sign in with Google, Apple, Facebook, or Microsoft. There is no household password to share or leak — new members join by single-use invite only.
Children
Kids' accounts fire no behavioral advertising and no third-party analytics. Location is never collected in the background. Ever.
Audit
Adding a member, changing a role, opening the vault, an emergency request — each writes an append-only record that can't be edited or deleted.
Deletion
Delete your account and it's a real deletion — a grace period, then a hard purge of your data and stored files.
Your household's data, and only yours.
Set up the vault in minutes. Keep your recovery phrase somewhere safe.