Security & privacy

Treat estate data like an estate.

An estate plan touches everything you own and everyone you love. We built kýklos around that responsibility — not around growth at any cost.

Every household gets its own encryption key. A breach of one tenant cannot expose another. Keys are managed in HSM-backed key management.

Exchange and brokerage connectors are read-only by design. No withdrawal scope is ever requested — even if the API supports it.

Your data lives in EU/IL data centers. We do not transfer estate data to jurisdictions outside the GDPR perimeter.

We don't sell anonymized data. We don't sell aggregated data. We don't sell any data. Our only revenue is your subscription.

Tenant data is isolated at the database level via row-level security. Application-level access checks are layered on top, not relied on alone.

Optional: designate a trusted executor who receives access to the document vault only after a verified inactivity period. You're always in control.

Our promises, in plain language.

01We will never sell, license, or aggregate your data for resale.
02We will never read your data except to operate and improve the product, with strict role-based access logged on every event.
03We will request the minimum scope on every external connector. If the API offers a read-only scope, we use it.
04We will notify you within 72 hours of becoming aware of any incident affecting your data, in accordance with EU and Israeli law.
05If you cancel, we will export your data on request and delete it within 30 days.