How It Works Security Trust Center Pricing About Set Up Protocol
Founder Contingency Infrastructure

Business continuity, structured for founder-led companies.

Secure your company's critical access and operational control.

Released only if and when it's needed — on your terms, under your conditions. Most founders address this after a failure. TruthVault prevents one.

Set Up Your Contingency Protocol (10 min)

Private beta — onboarding early founders

See How It Works
AES-256 Encryption
Segmented Storage
Logged Release Events
Security best practices
app.truthvault.io / protocols
Overview
Protocols 3 Active
Check-ins Due
Vault Items
System
Audit Log
Trustees
Active Protocols
3 protocols active · last check-in 2d ago
Vault Items
14
Encrypted & segmented
Check-in Status
Active
5 days remaining
Trustees
2
Access verified
Protocol
Check-in
Next Release
Status
Operations Continuity
5d
Conditional
Monitoring
Infrastructure Access
2d
Escalation 1
Armed
Legal & Corporate Docs
14d
Manual only
Sealed
Live protocol interface — actively used in private beta

The Risk

Most startups have a single point of failure.

One person holds the keys to the entire operation. When that person becomes unavailable — planned or not — the company stalls.

Stripe Payouts
Payment access & keys
AWS Infrastructure
Root credentials & IAM
GitHub Repos
Source & deployment
Domain Access
DNS & registrars
Legal Documents
Cap table & contracts
Operational SOPs
Runbooks & procedures

When that single person is unavailable — due to illness, travel, or an unforeseen event — operations stall, access is lost, and continuity depends on luck. That's not infrastructure. That's exposure.

Founders rarely formalize this — until they see it.

From early founder users

What founders found when they looked.

I mapped out who actually had access to what, and it was just me — every credential, every root account, every billing seat. One unavailable week and the company stops. That's not a reasonable way to run a business.

The check-in model is what makes it work. A static document goes stale. A protocol that requires you to actively maintain it — and triggers if you don't — is a different category of thing.

I had a family medical situation that took me offline for two weeks. Nothing catastrophic happened, but I spent the whole time anxious about things I'd never formally handed off. I set this up the week I got back.

Investors asked about operational continuity during our seed round. Having a documented protocol — not just a verbal answer — was a more credible response than I expected it to be.

Testimonials from private beta participants. Names and companies withheld by request.

The Solution

Remove the single point of failure.

TruthVault structures and encrypts your critical operational data and conditionally releases it based on predefined rules — without requiring constant management.

01
Secure
Encrypt and segment your critical access credentials, documents, and operational instructions in a structured vault — separated so no single party holds everything.
02
Monitor
Maintain regular check-ins that signal everything is operating normally. Configurable intervals and escalation thresholds — the system watches without interrupting your workflow.
03
Release
Access is released only when defined conditions are met — a missed check-in window, a manual authorization, or a specified escalation trigger. Not before. Not by accident.

How It Works

Built around your protocol.

1
Create your contingency protocol
Define what should happen if you're unavailable. Specify which vault items each trustee can access, under what conditions, and in what order of escalation.
2
Define check-in and escalation conditions
Set your check-in interval — weekly, biweekly, or monthly. Configure what triggers escalation: a missed window, multiple missed windows, or a combination of conditions.
3
Maintain control
Day to day, nothing changes. You check in on your schedule. TruthVault runs silently in the background. Release only happens if the conditions you defined are actually met — never otherwise.
Contingency Protocol — Active
Check-in Window
7-day interval · Next due March 29 · SMS + Email
Monitoring
Escalation Tier 1
Triggered after 1 missed check-in · Notifies trustee A
Armed
Infrastructure Access
AWS root · GitHub org · Cloudflare DNS
Sealed
Full Release
Triggered after 2 missed check-ins · All trustees notified
Sealed

Set up your contingency protocol before you need it.

Set Up Your Protocol

Takes ~10 minutes

Security Architecture

Security-first, by design.

TruthVault is built on a security model designed so that no single party — including us — can unilaterally access your vault contents.

AES-256 Encryption at Rest
All vault contents are encrypted using AES-256 before storage. Keys are derived per-protocol and never stored alongside the data.
TLS 1.3 Encryption in Transit
All communication between your device and TruthVault is encrypted in transit. No plaintext data is transmitted at any point.
Segmented Storage
Vault contents are segmented so no complete record exists in a single location. This limits the blast radius of any hypothetical compromise.
Immutable Audit Log
Every access event, check-in, and release is logged with timestamps and context. The log is append-only and cannot be modified post-write.
System Security Status
Encryption at rest AES-256-GCM
Encryption in transit TLS 1.3
Key derivation PBKDF2 · HKDF
Storage architecture Segmented
Audit log Append-only
Release events Cryptographically logged
Availability Designed for continuity
Security approach Industry-aligned practices

Who It's For

Built for founders who build alone.

Solo Founders
You built it. You know where everything is. TruthVault ensures that knowledge is preserved and accessible if you're ever unavailable — on your terms.
Remote CEOs
Running a distributed team means operational continuity depends on async systems. TruthVault is the infrastructure layer your company needs but rarely builds.
Technical Founders
You own the infrastructure. You hold the root keys, deployment credentials, and internal tooling. TruthVault secures and transfers that context if it ever needs to move.
Agency Operators
Client access, billing accounts, vendor credentials — all concentrated in one person. TruthVault gives your operation a succession layer without the overhead.

Pricing

This replaces operational risk — not software.

The cost of downtime is measured in days. This is measured in minutes.

No setup fees. No contracts. Cancel anytime. Your vault remains accessible for 90 days after any cancellation.

Monthly Annual 2 months free
Starter
$ 39 /mo

For solo founders who need a single, well-structured contingency protocol.

1 contingency protocol
Up to 20 vault items
2 trustees
Weekly check-in schedule
AES-256 encryption
Audit log
Get Started
A Note from the Founder

"TruthVault exists because founder-led companies run on concentrated knowledge and access. That's a feature of how they operate — and a risk that most never address until they have to."

Most contingency planning tools are built for enterprises with legal teams and dedicated IT. TruthVault is built for the founder who is the IT team — who needs a quiet, reliable system that asks very little of them day to day, and works exactly as expected when it matters.

We built this because the risk is real, the solutions that existed were inadequate, and nobody was addressing the specific shape of the problem for founder-led companies.

Protect your company's continuity.

Most founders know this risk exists — but delay addressing it. Setup takes 10 minutes.

Most founders wait. The risk doesn't.

AES-256 Encrypted
Security-first architecture
Cancel Anytime
Built for reliability

Trust Center

How TruthVault handles your data.

Handling sensitive operational data requires transparency about how a system is built. This section documents TruthVault's architecture, access controls, and design principles — not certifications, but the actual decisions made in how the product works.

Encryption Model
All vault contents are encrypted using AES-256-GCM before storage. Encryption keys are derived per-protocol using PBKDF2 with a unique salt. Keys are never stored alongside encrypted data. TruthVault's infrastructure cannot decrypt your vault without your key material.
Segmented Storage Architecture
Vault contents are stored in segments across isolated data stores. No single database record contains a complete protocol. This limits the impact of any hypothetical storage compromise — an attacker would need to reconstruct segments while lacking decryption keys.
Conditional Release Controls
Release events are triggered only by conditions you define. No Anthropic employee, TruthVault team member, or third party can initiate a release outside of your protocol. Manual override requires authentication from the founding account.
  • 01 You control the keys. TruthVault is architected so that we cannot unilaterally access your vault contents. Access requires your key material, which is never transmitted in plaintext.
  • 02 Release only on your terms. Conditional release logic is defined by you at protocol creation and cannot be modified without re-authentication. No time-based expiry without your opt-in.
  • 03 Every access event is logged. The audit log is append-only and cryptographically linked. Any access or attempted release is recorded with timestamp, actor, and context. Logs cannot be deleted post-write.
  • 04 Data in transit is encrypted. All communication between clients and TruthVault services uses TLS 1.3. There are no plaintext fallback paths.
  • 05 Deletion is complete. When you delete a vault item or protocol, all associated data — including encrypted segments and key material — is purged from all data stores within 24 hours.
  • 06 No data is used for model training or analytics. Vault contents are not processed, analyzed, or used for any purpose beyond executing your protocol. This is a product constraint, not a policy.