WillBot uses military-grade encryption and a zero-knowledge architecture — nobody can access your vault, not even us.
Every piece of data in your vault is encrypted with AES-256 before it leaves your device. Only you hold the keys.
Your data is encrypted client-side. We never see, store, or transmit your plaintext information. Not ever.
All data in transit is protected by TLS 1.3, the latest security standard — the same used by top financial institutions.
Every account requires 2FA. No exceptions. An extra layer between your data and anyone who shouldn't have it.
Your app locks after 2 minutes of inactivity. Five failed attempts trigger a full account lockout until you reset it manually.
Each account has its own unique encryption key. A breach of one account does not affect any other account on the platform.
WillBot was designed so that no single person — not even a trusted contact acting alone — can access your vault.
Your vault can only be opened when all three conditions are met simultaneously:
1. 2 of your 3 designated trusted contacts confirm your passing
2. A death certificate is reviewed and approved by our human team
3. A 72-hour waiting period has passed without a freeze being triggered
You are alerted immediately when any verification attempt begins. If anything looks suspicious — unusual timing, inconsistent documents, incomplete records — we freeze the account and investigate before any access is granted.
We comply with GDPR and CCPA from day one. Export your data, request deletion, or revoke access at any time — no questions asked.
WillBot does not sell, share, or monetize your personal data in any way. We make money from subscriptions, not your information.
Every vault interaction is logged. You can review who accessed what and when — including death verification attempts and their outcomes.