Security

How we protect
your family's vault.

Your vault holds the most sensitive records your family has. Here is what we do to keep them safe, in plain language.

Encrypted at rest

Sensitive personal and financial data, and the documents you upload, are encrypted before they are stored, using Fernet (AES-128-CBC with HMAC-SHA256 authentication).

Protected in transit

Connections to Keeevo use TLS (minimum TLS 1.2) with HTTP Strict Transport Security, a content security policy and clickjacking protection on every response.

Passwords you can trust us with

Your password is hashed with bcrypt, so it is never stored in readable form. We will never ask for your vault password by email or phone.

Layered sign-in protection

Signing in needs your password and a one-time code sent to your email. You can add authenticator-app two-factor authentication and choose which devices to remember. Rate limiting slows down guessing attacks.

Access controls and an audit trail

Access to data inside Keeevo is restricted by strict access controls, and sensitive actions are logged. You can review your own account activity from your vault.

Safeguards for succession

Proof-of-life check-ins and a document-verified release process mean your vault is not opened for your family prematurely. Beneficiaries receive time-limited access through their own portal.

What we commit to

  • We never sell your data.
  • Connecting Gmail is optional and read-only. It is used only to find your CDSL and NSDL holding statements, and you can disconnect at any time.
  • Our AI assistant, Artha, runs on Azure OpenAI Service under our own private subscription. Your prompts and data are not used to train any model.
  • You can delete your account. Personal data is deleted within 30 days, except records the law requires us to keep.

Report a vulnerability

If you believe you have found a security issue, please tell us before sharing it publicly. Email security@keeevo.com with the steps to reproduce it, and allow us up to 90 days to investigate and fix it.

For the full picture of our standards, grievance process and regulatory contacts, read our Compliance page. Common questions are answered in the FAQ.

Start with confidence.

Create your vault in about two minutes.

Last updated: 21 October 2026