Down Under Vault

Your most important information deserves the best protection.

We built Down Under Vault with security at the foundation, not as an afterthought.

Encryption & data protection

  • Industry-standard encryption at rest (AES-256) and in transit (TLS 1.2+)
  • All uploaded files scanned for malware before storage
  • Secure authentication with AWS Cognito
  • Password requirements: 12+ characters, uppercase, lowercase, number, symbol

Australian data sovereignty

  • All data stored in AWS Sydney region (ap-southeast-2)
  • Governed by the Australian Privacy Act 1988
  • All vault data is stored exclusively in Australian data centres. Email notifications are processed through our email provider's infrastructure

Your data stays where you are.

Access control

  • You control who sees what — assign specific items to specific people
  • Delegate access to trusted people who can manage your vault on your behalf
  • 14-day escalation process with multiple SMS and email notifications
  • Pause Check-Ins for 30, 60, or 90 days when travelling
  • Revoke access at any time — you always maintain full control
  • Every action in your vault is logged — who changed what and when. Delegate activity is tracked separately, giving you full visibility

Communication compliance & data lifecycle

  • All communications with your nominees comply with the Australian Spam Act 2003. We use a two-phase notification system — your nominees first receive a purely informational message, and only receive action links after they acknowledge the relationship
  • When a vault is no longer needed, a configurable cooling-off period protects against accidental deletion. Data retention is time-limited and automatic

Our privacy commitment

  • No tracking scripts
  • No advertising
  • No selling your data to third parties
  • No third-party analytics
  • We only collect what is necessary to provide the service

Common questions

Is my data secure?

Yes. We use industry-standard encryption, secure authentication, and all data is stored in Australian data centres. Uploaded files are scanned for malware. This is purpose-built for sensitive personal information.

Can my family see my vault before it is released?

No. Your vault is completely private until release is triggered. Your nominees may know they have been added, but they cannot view any contents until the vault is released.

What if I forget to respond to a Check-In?

You will receive multiple reminders over 14 days across SMS and email. If you are travelling, you can pause Check-Ins for up to 90 days.

What if I recover after my vault is released?

You can revoke access at any time. If you respond after release, you regain full control and can remove family access.

Can someone else manage my vault on my behalf?

Yes. You can appoint delegates who receive full access to manage your vault while you retain ownership. This is useful for elderly parents, busy professionals, or anyone who needs assistance. Delegates can add, edit, and organise items but cannot delete your vault or change ownership. You can revoke delegate access at any time.

What happens to my vault if I transfer ownership?

Vault transfer allows you to permanently transfer ownership to a nominated successor (such as a spouse or adult child) if you can no longer manage it yourself. The successor receives full control, including the ability to update items, manage Check-Ins, and nominate their own people. All existing records and assignments are preserved during the transfer. This is a one-way, irreversible action that requires explicit confirmation.

Ready to protect what matters?

Create your vault in minutes. Your information is encrypted from the moment you start.

No credit card. No commitment. Australian-owned.