Security
How amoviti protects your family
Wills, passports, insurance, the steps your family would follow — the things you keep in amoviti are the most personal records you have. Here is what stands between them and everyone else.
TLS in transit · AES-256 at rest · Stored in the United States · Never sold, no ads
Architecture
Four layers around your records
Your records sit at the centre. To reach them, a request has to pass every layer — and each one is enforced by our servers, not by what an app happens to show.
- 01
Encrypted on the way
Every connection between your browser or phone and amoviti uses TLS. Nothing you send travels in the clear.
- 02
A sign-in only you can pass
No password to steal or reuse: a six-digit code sent to your email, or Google. Codes expire after 10 minutes and allow 5 attempts.
- 03
Rules the database enforces
Your records are scoped to your household, and a request for anyone else’s is refused by the database itself — whichever app or device asks.
- 04
Encrypted at rest
Documents and records are stored in the United States, encrypted with AES-256.
Every access, on the record. Who opened or downloaded what, and when, is written to an append-only audit trail — never the contents of your documents — and kept for 7 years.
Sign-in
Proving it is really you
No password to lose
Sign in with a code sent to your email, or with Google. Codes are limited, rate-limited and destroyed once used.
A second check for what matters
Exporting everything or deleting your account takes a fresh emailed code — or Face ID on a phone you have set up for it — and our servers check it before anything happens.
Your phone, locked to you
On mobile, turn on Face ID or fingerprint so the app opens only for you. Your face and fingerprint never leave your phone.
Access
When someone else needs access
amoviti exists so the people you trust can act. Every route to your records is one you set up, and each has its own check.
A document you share
The person you choose receives a code at the address you picked — never at one a visitor types in — and sees only what you shared.
In an emergency
A workflow starts when you start it, or when the people you named report and confirm what happened. Going quiet on its own releases nothing.
After a death
What is released, and when, depends on the people you named confirming it. Any one of them can object and hold it. Handing over your account also needs a death certificate checked by a person.
Document intelligence
Document intelligence, kept inside
Your documents are understood by enterprise AI services running inside amoviti’s own cloud environment in the United States. Never public AI services, and never used to train models.
amoviti’s own cloud · US
Enterprise AI services
No model trainingNo public AI
Your control
In your control
Your records are yours — and so are the switches.
Take everything with you
Download all your records and original files at any time. A fresh emailed code confirms it is you first.
Delete your account
Delete it yourself in Settings. You have 90 days to change your mind; after that, your records are permanently deleted.
Stop sharing at any time
Stop sharing a document whenever you choose, and the person you shared it with can no longer open it.
Sign out everywhere
End every session on every device from Settings. A device already signed in is cut off within the hour.
Encrypted — and still useful
Your records are encrypted in transit and at rest, though not end-to-end or client-side: amoviti can open them, which is what lets it find the right document in seconds, remind you before things expire and answer your questions. That access is limited to running the service, and every action is recorded.
The full detail is in our Security practices and Privacy Policy.
Found a security issue? Email security@amoviti.com. We welcome good-faith research — how we handle reports is on our Security practices page.