Roles of the parties
For personal data that a firm’s clients place into GuardKin, the firm (and, where applicable, the client) is the data controller and GuardKin is the data processor. GuardKin processes that data only on documented instructions from the controller and only to provide the service.
Scope & nature of processing
GuardKin processes account, financial-readiness, estate-designation, and document data so that families can assemble their estate operational record and the right people can access it after a death. A handover opens for a death only. GuardKin does not open a handover for incapacity. Sensitive content is encrypted client-side with keys GuardKin’s servers never receive — so for that content GuardKin is a processor of ciphertext it cannot read. See the security architecture.
Security measures
GuardKin maintains the technical and organizational measures described on the Security page and committed to in the Trust Center: zero-knowledge encryption of sensitive content, encryption in transit and at rest, a signed, hash-chained audit log that is append-only by policy, least-privilege access, and MFA enforcement.
Two assurances are not in place yet. No independent cryptography review has been done; one is scheduled and no firm is engaged. GuardKin holds no SOC 2 report: no auditor is engaged and no observation period has started, and a Type II covers at least six months, so there is no date to give. GuardKin uses Vanta, a compliance-automation service, to monitor its controls continuously. That is preparation. It is not an audit, and it is not evidence that one is under way. Where each framework stands is on the compliance page.
Subprocessors
GuardKin engages a limited set of subprocessors, each listed with its purpose and location at /security/subprocessors. The DPA commits GuardKin to flow-down obligations and to advance notice of new subprocessors, giving controllers the opportunity to object.
International transfers
Data is US-resident by default. Where personal data of EU/UK data subjects is processed, transfers rely on the Standard Contractual Clauses incorporated into the DPA. EU/UK data residency is available at Stage 3+ by firm contract.
Data-subject rights & assistance
GuardKin assists controllers in responding to data-subject requests (access, correction, deletion, portability) and supports them, taking into account the nature of processing. Individuals’ rights and how to exercise them are described in the Privacy Policy.
Breach notification
GuardKin notifies controllers without undue delay after becoming aware of a personal-data breach affecting their data, with the information needed for the controller to meet its own notification obligations.
Return & deletion
On termination, GuardKin returns or deletes personal data at the controller’s election, subject to retention required by law. Export is free and available in standard formats at any time, regardless of subscription status.