GuardKin is one encrypted vault, seen three ways — by the family who builds it, the advisor who coordinates it, and the people who must act when it matters. Sensitive content is sealed with keys our servers have never held, so the right truth reaches the right person at exactly the right moment.
One vault
three lived surfaces
Zero-knowledge
content keys never reach us
Audit chain
every access, tamper-evident
GuardKin is not a folder of documents. It is one vault with three lived views — and the boundary between them is enforced by cryptography at the data-model level, not by a permission an admin can flip.
A living record of accounts, documents, property, contacts, and personal letters — encrypted in the browser before anything is stored.
Provisioned only under client consent, the advisor sees the estate’s structure they are entrusted to coordinate — never the sealed contents.
On incapacity or death, designated people gain exactly the access they were granted — and every event is written to an immutable audit chain.
The same record follows the family from a healthy day to the day it is needed most — surfacing the right thing to the right person at each stage, and only then.
The family seals accounts, documents, property, and letters. The advisor is invited to the planning-scope view. Readiness climbs as gaps are filled.
A designated person gains the precise access they were granted — enough to act, never more. The boundary holds even here.
Crisis mode unseals only what was meant for each person. The letter to a daughter reaches her; the account list reaches the executor.
The executor works from a map, not a mystery — every account, contact, and instruction in one place, with an audit trail of every access.
Six capabilities carry the whole product — from the moment a family starts the vault to the moment an executor settles the estate.
Accounts, documents, property, contacts, and letters — structured, searchable, and sealed client-side.
The assets and digital life a planning tool never sees: outside accounts, insurance, subscriptions, devices.
Name who acts, and exactly what they may reach — decided calmly, long before the moment arrives.
On incapacity or death, scoped access opens for the right people — unsealing only what was meant for them.
Every invite, unlock, and view written to a tamper-evident, signature-linked record. Trust, but verify.
The client revokes any access in one click. No firm contract, court, or admin setting overrides it.
In preparation · targeted Q4 2026
We are actively preparing for our SOC 2 Type II audit, on track for the next 4–6 months.
Content keys never reach us
Sensitive content is encrypted client-side. Our servers store only ciphertext.
Independent review · scheduled
Cryptographic design under independent review — scope on record, findings on completion.
A working walkthrough of the platform your firm can hand to its clients — no slideware, no sales theater.