Security & Privacy

VitalDocSafe holds the most important details of your life. We treat that responsibility seriously.

Your data is yours alone

Every user can only ever access the information they entered. Data is partitioned per account at the database level, and every request is checked against your session.

Encryption

Highly sensitive fields — passwords, codes, and combinations — are encrypted at rest using AES-256-GCM. Account passwords are hashed with bcrypt and never stored in plain text.

You're always in control

From your account settings you can export all of your data, delete all of your data while keeping your account, or permanently delete your entire account. These are three separate, deliberate actions.

Sharing on your terms

Sharing is opt-in and scoped. When you invite someone, they can view only the specific category or item you chose — and you can revoke access at any time.