A seed phrase is worth everything in the wallet behind it.
The free vault stores your encrypted files locally. The managed vault stores them across multiple regions with an uptime SLA, full audit trail, and compliance documentation. Same client-side encryption. Multi-region AWS infrastructure behind it.
What you get.
Client-side encryption
Same as the free vault. Files are encrypted in your browser before upload. We store ciphertext. We never see your data. By design, not by promise.
Geographic redundancy
Encrypted data is replicated across multiple regions. A single data centre outage doesn't affect availability. Enterprise customers choose their regions.
Audit trail
Every access, retrieval, and modification is logged with timestamps and IP addresses. Full history available via API. Exportable for compliance reporting.
Access controls
API key scoping, IP allowlists, optional 2FA on retrieval. Configure who can store, retrieve, and delete. Separation of duties built in.
Plans.
Business
- 10,000 vault items
- Geographic redundancy (2 regions)
- 99.9% uptime SLA
- Full audit trail
- API access
- IP allowlisting
- Email support
- 30-day backup retention
Enterprise
- Unlimited vault items
- Geographic redundancy (3+ regions)
- 99.99% uptime SLA
- Full audit trail + compliance pack
- Dedicated API endpoints
- IP allowlisting + 2FA on retrieval
- Dedicated support + SLA
- 90-day backup retention
- SOC 2 Type II controls documentation (audit in progress)
- Custom data residency
Common questions.
Can I migrate from the free vault?
Yes. Export your items from the free vault and re-upload to managed. Same encryption, same format. We help with migration for Business and Enterprise customers.
What happens if I cancel?
You get 30 days to export your data. After that, encrypted data is deleted from all regions. We can't read it anyway, but we delete it regardless.
Do you have compliance certifications?
Enterprise plan includes SOC 2 Type II controls documentation; the third-party audit is in progress (results published when complete). ISO 27001 controls are mapped to Annex A; certification in progress. For specific compliance requirements, contact us and we'll scope what you need.
Can I choose specific regions?
Business plan stores vault payloads in eu-west-2 (London) by default with optional replication to a second region you select (e.g. eu-central-1 Frankfurt for EU-only, us-east-1 N. Virginia, or others) on request. Enterprise customers choose their regions. Where data is replicated outside the UK, transfers rely on UK-US Data Privacy Framework adequacy regulations or the UK International Data Transfer Addendum to the EU SCCs (see Privacy Policy §8).
Your backup is only as good as where you keep it.
Store it somewhere with an SLA.
Get started