One object, one turn. Every stage the records pass through is somewhere in it, from the phone you fill in to the phone that opens them.
Scroll, and it turns
Facing you
Accounts and cards. Policies and the numbers to quote. Passports, prescriptions, and the things that only make sense to you. Five categories, filled in as far as you want to fill them. While you are here, it is only a place you keep things.
Turning
Everything is encrypted on your iPhone before it leaves. Eterni holds the encrypted blocks, so they survive a lost device, and holds nothing else. The key that opens them is made on your phone and never sent to us.
Almost edge on
The turn does not continue on its own. Only a Beneficiary you named can ask, and you can say no. Nobody at Eterni can open it for them.
Past the edge
The Beneficiary opens the claim screen and confirms identity with a code.
The owner is emailed and can deny the request within their response window, 7 days unless they change it.
If the owner does not deny it, it opens only on the Beneficiary's device, and only there.
Turned
We cannot read your records. We cannot recover a lost passphrase: if that and the Recovery Key are both gone, nothing opens the vault again, including us. We cannot open anything without a request you could deny. And we cannot lock your data in, because you can export all of it at any time.
Facing them
Alongside the records you can leave messages in your own voice, and the photographs that go with the stories only you can tell. They are sealed the same way, and they open at the same moment, for the same person.
No stage of the handover happens without a person, and no stage of it lets us read what we are handing over.
The screens the app actually ships tell the same story.
Encrypted on your device · Eterni cannot read your records