How your words outlive us.

We build from the assumption that companies end. Your words shouldn’t have to.

We build for recovery, portability, and responsible succession.

A code in your hands

Every Capsule has a six-word claim code. Keep it on paper. The public share card never exposes it.

Open, portable formats

Versioned JSON and CSV manifests keep every record exportable. Original media remains in its original format.

Encrypted private Capsules

Private Capsule messages and recipient details use AES-256-GCM envelope encryption at rest.

Independent backups

The live database is backed by weekly encrypted B2 archives and monthly encrypted R2 archives.

Audit history

Authorized decryptions and publication events create audit records for operational review.

Export and handover planning

Versioned exports, a restoration runbook, key-escrow instructions, and a named-successor plan support recovery and migration.

What the lock really means

Your message is encrypted the moment you build the seal. There is no route in our product that opens a future-locked Capsule. Every authorized decryption is audit logged. We would rather explain the architecture than make a promise nobody can prove.