Because trust is everything.

Y.O.D.O. isn't just about what you leave behind - it's about trust in how it's kept. Every message, every check-in, and every confirmation is guarded by encryption, layered verification, and a system built to protect you and the people you love.

Data protection at every step

• Encryption at rest: All messages and files are encrypted using AES-256 encryption, both when stored and when sent.
• Encryption in transit: TLS 1.2 and above encryption for all communications between devices, servers, and third-party integrations. Your data is shielded the moment it leaves your device until it reaches Y.O.D.O.'s servers, and again when delivered securely to those you trust.
• Layered security: Firewalls, monitoring, and strict access controls ensure no one who is not supposed to can ever view your private content.

Identity and verification

• Two-way authentication: Every account can be shielded with 2-way authentication, preventing unauthorised access.
• Delegates: When a passing is confirmed, any delegate uploading a death certificate must also verify their identity - stopping fraudulent triggers. Once verified, all delegates are notified of the confirmation.
• Recipients: Every recipient must also verify their identity before opening a message - ensuring your words are never read by the wrong person.

Check-ins and account safety

Missed check-ins: If you miss your regular check-ins and no delegate confirms your status, your account enters a grace period.

Grace period (30 days): Delegates can confirm your status in three ways:

• Confirm you are safe (resets check-ins)
• Confirm you are incapacitated (pauses check-ins for 15 or 30 days, then restarts)
• Confirm your passing (begins verification with a death certificate + ID check).

Pre-deletion phase (30 days): If no action is taken during pre-deletion phase, account goes into permanent deletion phase.

Permanent deletion: Data is permanently deleted - ensuring compliance with GDPR's strict data minimisation rules.

Message delivery safeguards

• Messages are released only after a verified passing is confirmed with both a death certificate and delegate ID verification.
• If a death is verified during the grace or pre-deletion period, your words are still delivered. Otherwise, they are not.
• An encrypted record of verification (who, when, how) is kept according to GDPR requirements - available only if required by authorities.

Why this matters

Leaving notes in drawers risks discovery too soon. Files on a computer can be hacked or stumbled upon. With Y.O.D.O., your words remain private until the exact moment they are needed - never earlier, never by the wrong eyes.