Security and the release process

How your data is protected

• Every connection uses HTTPS. Passwords are stored only as salted, slow hashes.
• Your family file, notes, captions, and every keepsake file are encrypted at rest with AES-256-GCM. Each file has its own key.
• Files are stored outside the website's public folders. There are no public links: every request is checked against who you are.
• Minimal data: The Handoff refuses full account numbers, SSNs, and passwords.
• An activity log records sign-ins, changes, downloads, and every release step.
• Repeated wrong passwords lock sign-in for 15 minutes. Changing your password signs out every other device.

How a release works

1. You name 1 to 3 trusted people (who handle things and receive your plan) and, optionally, keepsake recipients. They accept an invitation using the exact email address you entered.
2. They request a release by uploading proof (a death certificate, or a physician's letter for incapacity) and a photo of their government ID, and attesting that it's true.
3. We review it by hand. Staff check the documents and that the ID matches the person you named.
4. You get a waiting period (you choose 1 to 7 days; 3 by default). You're notified, and one click stops the release. If a death certificate or obituary is attached and our team approves it, the release happens 1 hour after we contact you unless you respond.
5. Release. Your executor gets the closeout plan, your notes, and drafted letters. Each recipient sees only the keepsakes you assigned to them.

If you recover from an incapacity, sign in and lock your file again.

Found a security issue? Email sales@jandjtechserv.com.