Sovereignty means three things at once
For Familiekluis, sovereignty means jurisdiction, control and keys. Data is only truly sovereign when all three hold.
Jurisdiction. All data sits physically in Europe, on infrastructure run by European-operated providers — not the “EU regions” of American companies. The US CLOUD Act can compel an American cloud provider to hand over data even when it is stored in Europe. We rule that out by working only with cloud storage providers that operate under European jurisdiction.
Control. We never process your data for purposes you did not set. No analytics on the contents of your vault. No AI model training. No selling, no reselling, no aggregation.
Keys. Content is encrypted before it reaches our systems. The decryption keys are split into shares — for example three shares of which two are needed. No single party, ourselves included, holds every share.
We are equally precise about the limit of that. Familiekluis uses a hybrid key model: our systems can technically reach the contents of a vault, because that is necessary in order to display documents, share them and release them under an emergency scenario according to your settings. So we do not claim that nobody can reach your data; we claim that access is limited, traceable and bound by rules. The security page sets out exactly how.
