How Trust Blocks protects your data

The short version

Your data is encrypted using Google Cloud's enterprise-grade infrastructure — the same systems that protect data for major hospitals, banks, and government agencies. Your data is yours. We don't sell it, we don't use it for advertising, and we don't read it.

How it actually works

Trust Blocks uses a security technique called envelope encryption, powered by Google Cloud Key Management Service. Here's what that means in plain language:

• Every piece of sensitive data you save — passwords, accounts, security questions — is locked with its own encryption key.

• Those keys are themselves locked by a master key that lives in Google Cloud's most secure infrastructure.

• When you open the app, your PIN unlocks your access. No one else has access to your data while it's stored.

What this means for you

It means you can lose your phone, you can drop your tablet in the lake, you can have someone steal your laptop — and your data stays safe. The app on your phone is just a door. The data lives in encrypted form on infrastructure that takes professional adversaries months and millions of dollars to even attempt to crack.

What this means for us

It means we are the custodian of your data, not the owner. We're the team responsible for keeping the building secure, but we're not allowed to walk into your apartment.

• We will never sell your data. Not to advertisers. Not to data brokers. Not to anyone. Ever.
• We will never read your vault for our own purposes.
• If a court orders us to provide data, we will notify you wherever legally permitted before we comply.
• We will publish a transparency report every year showing how many data requests we received and how we responded.

What if I lose my PIN?

This is where Trust Blocks differs from password managers, and we think this difference matters for the kind of product Trust Blocks is.

Many apps in this space tell you that if you forget your master password, your data is gone forever. That's a perfect security promise. It's also a terrible match for a digital legacy product designed for families.

We're built differently. If you forget your PIN, we can help you recover your account after verifying your identity. We hold a separate recovery key, in tightly controlled infrastructure, specifically so we can help you in the moments your family will need this app most.

That's a deliberate choice. We believe a digital legacy app should help you get back in. Not lock you out forever.

Where we are

First-Rate Tech Corp. is a US-based company. Our team is US-based. Our infrastructure is hosted on Google Cloud's US regions. We are subject to US privacy laws and US legal processes — not foreign jurisdictions you've never heard of.