At a glance. Your data is encrypted, you control who can see it, and we follow Canadian privacy law. Our Privacy Policy and Terms of Use are the canonical sources for how we handle your data and the rules that govern your use of Estate Kit. Our Trust Center lists the security controls we have in place.
How we protect your data
- Everything you enter is encrypted in transit and at rest.
- Your sensitive information gets an extra layer of encryption.
- Your account and vault data are hosted in Canadian data centres.
- We use institutional-grade security practices throughout.
Who can see what
Only you can see what's in your Estate Kit unless you choose to share specific items with a Trusted Contact (see How sharing and permissions work).
By design, Estate Kit staff do not read your vault items. In the rare cases where elevated access is required, it's restricted to authorized personnel, requires documented justification, and is logged in tamper-evident audit records.
If you can no longer manage your account
The Trusted Contacts and Status Verifiers you designate are the primary path for access if you're no longer able to manage your account yourself.
For situations not covered by your designations, email support@estatekit.com.
Independent standards
We follow Canadian federal privacy law (PIPEDA). We have completed independent penetration testing and are undergoing a SOC 2 Type II audit. Our Trust Center lists the specific security controls we have implemented.
Legal requests
In limited circumstances we may be legally required to disclose information (for example, in response to a court order, subpoena, or other valid legal request). Our Privacy Policy lists the full circumstances.
What you can do to keep your account safer
- Turn on multi-factor authentication (MFA).
- Use a unique, strong password.
- Be careful about who you invite as a Trusted Contact.