Security
How Familiekluis protects your data
Familiekluis stores your documents encrypted, on infrastructure in Europe, with two-factor authentication and a split key model. This page explains how that works — and is equally clear about what we do not promise.
Encrypted storage
The contents of your vault are encrypted before they reach our systems and are stored encrypted. The decryption keys are split into shares — for example three shares of which two are needed to decrypt. No single party, ourselves included, holds every share.
Where your data sits
All data sits physically in Europe, on infrastructure run by European-operated providers, under European law. No American cloud providers — not even their "EU region" variants. The US CLOUD Act can compel an American provider to hand over data even when it is stored physically in Europe; we rule that risk out by working only with providers that operate under European jurisdiction.
What we do and do not promise
We are deliberately precise here. Familiekluis uses a hybrid key model: our systems can technically reach the contents of a vault. That is necessary in order to display documents, share them, and release them under an emergency scenario according to your settings.
So we do not claim that nobody can reach your data. We claim that access is limited, traceable and bound by rules: access by staff is limited to what is necessary and is recorded in an audit trail.
Access to your account
You log in with a password and two-factor authentication. In the phone app you can log in with face or fingerprint. Who gets access to which document is yours to decide, per person and per item — including within your own family.
No tracking, never resold
We never process data for purposes you did not set. No analytics on the contents of your vault, no training of AI models on your data, no selling, no reselling, no aggregation. We place no cookies at all on the public pages.
Leaving is a right
You export all your data in the format it is stored in, and you cancel monthly. After cancelling you keep read access for 90 days so you can export at your own pace; after that your data is permanently deleted. No lock-in.
More detail
The full details are in the privacy statement and the terms and conditions. Both are in Dutch, because they are governed by Dutch law and the Dutch text is the binding version. Questions? Email support@familiekluis.nl.