Security and safeguards

Where your data lives, and who can reach it

• EU company, EU servers. Legamap is operated by a Lithuanian company. Your data stays in the EU, under GDPR, outside the reach of the US CLOUD Act.
• Minimal by design. No passwords. No seed phrases. No full account numbers — the last four digits are enough for a notary to identify an account.
• Two-factor authentication is mandatory, not optional.
• Field-level encryption on access instructions and attached documents, on top of full encryption at rest and in transit.
• Access logs on every read of customer data, including ours.
• Independent penetration test before we accept a single payment. Full security audit once revenue supports it, and we will publish the date.
• If we shut down, your encrypted export already exists on your own machine, and the transparency page explains exactly what happens next.

Read the transparency page →

What happens if you stop paying

Most subscription products have a quiet problem in this category: the payment stops exactly when the product is needed. So the promise does not end with the subscription.

• Stop paying and your map goes read-only. It does not disappear.
• For two years from your last payment, the check-ins continue and delivery still happens.
• Every payment resets the clock to two more years.
• Before the guarantee runs out, we escalate warnings and send you a final encrypted export, so the map survives us either way.

No competitor offers any guarantee after you churn. We offer two years, in writing, in the terms.

The protocol is built to be slow

Declaring a living person dead is the worst thing this system could do, so every default is set against it.

• Missing a single check-in does nothing at all. The process runs long, and it runs across more than one channel.
• Nothing is released until a person you have named confirms it.
• After a declaration there is an undo window, and your recipients see nothing until it closes.
• Travelling, hospitalised, off-grid? You can pause check-ins from your account.

A late delivery costs your family a few weeks. A false one costs everyone something you cannot get back. We optimise for the second.