Trust & Protection
Security you can inspect, not a 50-year slogan.
EchoKindred security is encryption plus your control: everything is encrypted while stored (AES-256) and on its way to us (TLS), and verified heirs get only the access you authorize. We will not compare ourselves to a bank.
What we actually do
Three commitments behind every EchoKindred account.
Integrity
Your data lives in a private encrypted archive designed for continuity, not ad targeting or resale.
- AES-256 encryption at rest
- TLS 1.2+ in transit
- Strict separation between application data and credentials
Continuity
Estate guidance tools are built to work even if no one has touched your account for months. Your family can still follow the plan.
- Heir Dashboard always-free access
- Immutable activity history for key changes
- Simple export options for legal and financial professionals
Guarantee
EchoKindred is built and stewarded by a 38-year software veteran with a bias toward boring, durable infrastructure choices.
- No speculative crypto or ad-tech dependencies
- Transparent Data Guarantee and clear Terms
- Roadmap focused on longevity over growth hacks
How we protect your archive in practice.
Encryption
Sensitive records are encrypted at rest using AES-256. All traffic between your device and our servers is protected with modern TLS. Passwords are hashed using industry-standard algorithms and never stored in plain text.
Access control
You control who can see what. Heirs receive read-only access; they cannot edit or delete your instructions. We require authentication for all account changes and log critical security events.
Infrastructure
We host on professionally managed cloud infrastructure (Supabase and the providers behind it) with encryption at rest, TLS in transit, and redundant storage. We do not claim a bank threat model. Banks process daily payments. We store a family archive.
AI & privacy
AI features run through paid-tier provider agreements that contractually exclude your content from public-model training. Your stories are not used for advertising.
You own the data
You own the archive. Export a vault summary of account types and identifiers anytime. Verified heirs receive only the access you authorize. If a plan lapses, the archive stays readable. If EchoKindred ever winds down, we will publish a specific retrieval plan on Trust & Continuity before we close.
EchoKindred is an operational locator and intent map. It helps your family find accounts, documents, contacts, and wishes. It is not a law firm, not a hospital record, and not a replacement for signed originals or your clinic chart.
Medication lists and provider notes here are private family organization, not a HIPAA medical record and not a substitute for the chart at Dad's clinic or hospital.
What to store
- Institution names and account types (Wells Fargo checking, Fidelity IRA)
- Last-four masks and how the account is labeled at home
- Where the paper lives (blue folder in the desk, safe-deposit box, attorney office)
- Who to call first, and a note about why that person matters
- Healthcare wishes and provider names you want family to know
What not to store
- Full passwords, PIN codes, or one-time recovery codes
- Social Security numbers or complete account numbers
- Hospital portal logins or copies of the official medical record
- Anything you would not want a sibling to screenshot in a fight
What we avoid
- No selling or renting your data to advertisers.
- No public-profile directory for your vault.
- No shared-login family password sheet that exposes everything at once.
Security questions we hear most.
No, and we will not say it is. We use AES-256 at rest and TLS in transit, which is common for serious consumer software. Banks have a different threat model, regulators, and fraud desk. Compare our controls, exports, and access rules, not a slogan.
Security only matters if your family can actually use it.
EchoKindred balances encryption and access so your heirs get clarity, not just a list of logins they cannot decipher.