Release plans
Decide now what gets shared later.
Most software answers two questions: who can open this, and can they open it now. There is a third one nobody answers — when should this become accessible, and under what condition. That is what a release plan is for.
How it works
- 1
You set the condition
Either you stop checking in for a period you choose, or you start the plan deliberately. Nothing else triggers it — no algorithm deciding you look inactive, no support agent making a judgement call.
- 2
We warn you first
When the condition is met, a notice period starts and we tell you across every channel you have with us. The message leads with how to stop it, not with an explanation. Nothing has been shared at this point.
- 3
You can always cancel
One click stops it, and also resets your clock. If you are reading the warning and everything is fine, cancelling is the whole response. The plan freezes while the window runs, so nothing can be added to it behind your back.
- 4
Only then does anything move
If the window closes without you, the people holding shares of your material are told the moment has arrived. Recovery still needs your quorum acting together — the plan decides when, your people decide how.
What we will not do
- We will not release anything without warning you first. There is no configuration in which the condition and the disclosure are the same event. The shortest notice period you can set is one hour.
- We cannot read your material. It is end-to-end encrypted and split across the people you name. A release plan marks the moment; it does not hold a key, and neither do we.
- We will not decide you are gone. The condition is one you set. Nobody here makes a judgement call about your circumstances.
What people use it for
If something happens to you
Your partner needs the mortgage details, the insurance policy, and the account that pays the bills. Not today — but without a plan, "not today" turns into "not ever".
Digital legacySelf-custody that survives you
A seed phrase with no succession plan is a countdown. Split it across people you trust, and set the condition under which they may bring it together.
Crypto inheritanceKey-person risk at work
One person holds the registrar login, the payment processor, the production keys. A release plan is the answer to "what happens if they are unreachable for a fortnight".
Key-person riskSet the condition once.
Then check in occasionally and forget about it — which is exactly what you want from something you hope never happens.
Create a release plan