Security
Your attorney recommended Trustfecta for a reason. Here is what sits behind that recommendation — in plain terms first, then in full technical detail.
When you hand us a document, we scramble it into unreadable code before it is ever written down. The method is called AES-256 — the same standard used by banks, hospitals, and government agencies, and the one the U.S. government approved for classified information. Unscrambling it requires a key, and we keep the keys somewhere separate from the documents themselves. Someone who stole the files would get nothing but noise.
The one thing we do not do is throw the keys away. That is a deliberate choice, and we explain it below.
Every document is encrypted with AES-256-GCM. Each file gets its own key, wrapped by a master key held in the application layer — separate from the database and file storage, so a breach of one layer alone can't expose your documents.
All traffic runs over TLS. Documents are never transmitted or stored in the clear.
Your keys aren't derived from your password, so forgetting it never locks you out. A deliberate trade-off: Trustfecta can restore your access, so you never lose your documents to a lost password.
Only you, the people you authorize, and — where you enrolled through a firm — your attorney of record can reach your vault. Access is enforced on the server, not just hidden in the interface.
Every access to a document is recorded in an append-only audit trail — who, what, and when.
Documents are stored on infrastructure with built-in redundancy and many-nines durability, so a single hardware failure can't lose them.
Read our privacy summary.