The most dangerous failure is not losing a message.
It is releasing a private one to the wrong person. Everything here is built around that.
How it is kept safe
Six things that are true of every item you store
Each is enforced in code and covered by tests that fail the build if anyone weakens it. The details are in our deployment documentation for anyone who wants to check.
01
Encrypted per item
Every document, note and recording gets its own encryption key, itself sealed by a key held in a hardware security module. We can rotate the master key without ever decrypting your content.
02
Nobody at Dead Man Wish can read your vault
Administrators have no route to member data. That is enforced in code and covered by tests that fail the build if anyone adds one.
03
Scanned before it can be released
Every recording and upload is checked for malware, verified against its checksum, transcoded and encrypted before it becomes eligible for any release plan.
04
No single person can trigger a release
Sensitive material can require several trusted people to agree. A single objection stops the process and brings in a human rather than being outvoted.
05
Everything is written down
Every verification, state change, approval and access is recorded in an append-only log, chained so that tampering is detectable.
06
Two-factor authentication
Available to everyone, required before your plan can be activated, and required for anyone with administrative access.