Compliance for Individuals and Families

Establishing who signed is the first layer, and it is more than uploading a photograph of a document.

• A government-issued document: a passport or national identity document is verified at signing and captured in your evidence pack
• A cross-check, not just a scan: the document is machine-read, both the machine-readable zone and the printed text, and checked against the profile details you entered. A person reviews the result
• Processed on our own servers: identity documents are handled locally by default, and your data never leaves our servers without your approval. No external provider sees a document unless you specifically approve enhanced processing of that document

The short prompted video is the layer people ask about most, usually because they assume it is the witnessing. It is not.

Reads, edits and signature events are recorded as they happen, which is the difference between facts and a reconstruction attempted years later.

• Append-only: audit records cannot be back-dated or removed from the application surface, and each one is signed at the application layer so that tampering shows
• Version history kept: each version is recorded with who prepared it and when, so how the document developed stays visible, though a downloadable copy is not kept for every earlier version of a will
• Retained after the account closes: will documents, identity records and the audit trail have a regulatory retention floor, and are held for that period after account deletion rather than being removed immediately. The privacy policy carries the specifics

Your executors receive an evidence package rather than a single file. Three things go with it.

• The pack itself: the identity verification, the identity video, the audit trail and the signed snapshots are delivered together
• Provenance that can be examined: each document carries a device-anchored record of when it was created, from where and on what device
• The jurisdiction on record: the pack records which jurisdiction the will was generated against, which is what lets the right rules be applied to it

The honest answer is a short and published list, which you can read in full.

• Named sub-processors only: the published list is the complete set. Nothing is sold on, and nothing is routed to advertising networks
• Identity processing stays local by default: extraction and verification run on our own servers, and a third-party AI provider sees a document only with your explicit approval for that document
• Lawful disclosure only: releasing anything to an authority needs a valid legal order, and where the law permits it we tell you that it happened