Security
Zero-knowledge encryption
XChaCha20-Poly1305 with keys derived on your device. We hold ciphertext we cannot unwrap.
verified 2d ago · 2026-06-25
Roadmap
An honest, dated plan for the next three years.
This is the part of the company we don't usually show publicly. The whole plan — what's shipping, what's spec'd, what's exploring, and what we won't build. Updated as we ship, not as we promise.
Page rebuilt just now1 commit since last shipRSS
Now
Phase 1 — the v1 launch set. Shipped or shipping.
Trust
Immutable audit log
Every view, share, and export is logged locally and exportable. You can see who saw what and when.
verified 2d ago · 2026-06-25
Capture
On-device data extraction
OCR pulls expiry dates, document numbers, and issuing authorities on the device. Nothing is sent to a server.
verified 2d ago · 2026-06-25
Capture
Smart categorization
Auto-suggest the right category — passport, ID, insurance — as you save. You confirm before it sticks.
verified 2d ago · 2026-06-25
Reminders
Type-aware renewal engine
Passport: 9 months. Insurance: 60 days. Lead time is matched to the document, not a generic 30-day warning.
verified 2d ago · 2026-06-25
Reminders
Multi-channel alerts
Push and email, synchronized. SMS is opt-in and ships in a later phase.
verified 2d ago · 2026-06-25
Family
Time-locked release
A dead man's switch. If you don't check in for 30/60/90/180 days, your trusted contact gets access automatically.
verified 2d ago · 2026-06-25
Family
Veto-based approval
A request-and-release window. A trusted contact can request access; you can decline before it unlocks.
verified 2d ago · 2026-06-25
Family
Elder-care shared vault
A shared vault for managing an aging parent's records. The parent stays in control. You get visibility.
verified 2d ago · 2026-06-25
Travel
Offline travel mode
Critical travel documents available on your device when you have no signal. The vault is local-first.
verified 2d ago · 2026-06-25
Export
Multi-format export engine
Export three ways: an encrypted `.restkin` bundle, organized folders, or a single document. You always own a copy.
verified 2d ago · 2026-06-25
Next
Phase 2 — locked direction, not built. We have specs, not dates.
Security
FIDO2 / hardware-key sign-in
Sign in with a YubiKey or any FIDO2 security key. Primary and second factor.
verified 2d ago · 2026-06-25
Family
Family-wide notifications
When a child's passport is expiring, both parents get notified. No silent dependencies.
verified 2d ago · 2026-06-25
Family
The Emergency Brief
An AI-distilled dashboard showing the top five critical actions during a crisis. Opt-in only.
verified 2d ago · 2026-06-25
Family
Granular permissions matrix
Specialized roles per trusted contact — Co-Owner, Successor, or limited Viewer for specific documents.
verified 2d ago · 2026-06-25
Family
Trusted advisor portal
A secure interface for lawyers, accountants, and financial advisors to interact with a client's vault.
verified 2d ago · 2026-06-25
Insight
Family readiness score
An informational metric — how prepared your family is for life events. No badges, no leaderboard.
verified 2d ago · 2026-06-25
Later
Phase 3–4 — exploring, gated on regulatory and retention reviews.
Capture
Inbox sync
Forward receipts and policies to a private email address. On-device extraction, never server-side OCR.
verified 2d ago · 2026-06-25
Family
Executor mode (full)
Post-mortem access with death-certificate verification, multi-day hold, and witness requirement.
verified 2d ago · 2026-06-25
Insight
Insurance market comparison
Non-commissioned, side-by-side policy comparison. Gated on regulatory review per jurisdiction.
verified 2d ago · 2026-06-25
Identity
Decentralized identifiers
Replace account-bound recovery with portable identifiers. Exploring — gated on SOC 2 Type II + Family Pro ≥ 10K paying.
verified 2d ago · 2026-06-25
Not yet
The permanent 'won't build' list. Reasons live in the body of each card.
Won't build
Banking or payments
Regulatory burden is incompatible with a privacy-first product. We connect to banks for read-only detection; we will never hold funds.
verified 2d ago · 2026-06-25
Won't build
Will or trust drafting
Estate planning is a regulated profession. We point to vetted attorneys; we don't draft.
verified 2d ago · 2026-06-25
Won't build
Family social feed
A shared journal is a different product. It dilutes the renewal-vault focus and trains users to share privately. We will not ship it.
verified 2d ago · 2026-06-25
Won't build (default)
AI on your documents by default
AI features are opt-in, per-feature, and we never train on your data. The default for any AI capability is OFF.
verified 2d ago · 2026-06-25
Deferred
Open developer API
Deferred to v3+ at the earliest. A public API is a trust surface that requires SOC 2 Type II and a long audit runway first.
verified 2d ago · 2026-06-25
Beyond Phase 2
We don't ship what we don't have a plan for.
Beyond Phase 2 we have a three-year vision in our internal blueprint, but we don't publicly commit to dates we can't keep.
If a feature is on this page in the 'Later' column, it has a spec and a gate. It does not have a date.
If a feature is in the 'Not yet' column, we've decided not to build it, and the card explains why. We're explicit so you don't wait for something that's not coming.