The boring stuff is done

The foundation is built. You can register, log in, set up two-factor authentication. Email verification works. 177 automated tests confirm everything functions correctly.

You can't see any of this yet. There's no vault interface. No file uploads. Just authentication infrastructure.

Here's why that matters.

We build security first

Password hashing uses Argon2id. Two-factor authentication is mandatory. Every login, every password reset, every account change gets logged. Email addresses must be verified before accounts activate.

These decisions slow down development. They add complexity. They require more testing.

They're also the difference between security that looks good in marketing and security that actually protects your files. Security matched by transparency: you’ll have access to the full audit logs in your dashboard.

You're trusting us with sensitive documents. Legal documents. Financial records. Medical directives. Things that could damage you if leaked.

We're not treating that casually.

What comes next

Phase 2 starts now. Vault creation, file uploads, folder organization.

Files get encrypted on your device before transmission. The server receives encrypted data only. 10GB storage per vault.

When this is done, you'll see the actual interface.

On automatic release

Your files stay encrypted. The server can't read them during normal operation. When you stop responding to check-ins and after we’ve tried to reach you, the system releases decryption keys to people you've chosen.

Two encryption modes: one where we hold a release key, one where only you do. Different threat models, always secure. You pick. Full technical documentation before launch.

A note on email delivery

Some email providers block messages from Buttondown, which we use for these updates. If you signed up but haven't received anything until now, check your spam folder or ask your provider to whitelist Buttondown. Not much we can do from our side.

Next update when Phase 2 is complete — not before. You won't hear from us every week with minor progress. Only when something meaningful is done. If someone you know needs this, send them to trustbourne.com.

—Frank