Security

The short version

Your records are encrypted in transit and at rest, kept separate from every other account at the database level, and never sold. Nobody sees them unless you invite them, and you can export or delete everything at any time.

Encrypted in transit and at rest

Every connection between your browser and the service uses modern TLS encryption, the same technology banks use. Stored data sits on encrypted disks managed by our infrastructure provider.

Your account is walled off from every other account

Access rules are enforced inside the database itself, not just in the app. Each request is checked against your signed-in identity before a single row is returned, so one account can never read or change another account's records — even if a bug were introduced in the app.

Passwords are never stored in readable form. Sign-in is handled by a dedicated authentication service, and repeated failed sign-in attempts temporarily lock an account.

What we ask you never to enter

Please do not enter bank or brokerage passwords, PINs, full account numbers, Social Security numbers or other government identification numbers anywhere in HoldingsHaven. This also means cryptocurrency seed phrases, recovery phrases and private keys — never type those here. For digital assets, record only what exists, the wallet or exchange it is held with, where the device or written backup is kept, and who to contact. The app is designed to work with institution names, nicknames, values and dates, and never needs those details.

HoldingsHaven is a record-keeping and organizing tool. It is not a bank, trust company, custodian, broker-dealer, investment adviser, insurance agency, lender, money transmitter or law firm. It does not hold assets, execute transactions, move money or place insurance, and it has no access to your accounts.

Sharing is always your choice

Nothing is shared by default. You decide whether to invite a spouse, family member, attorney, CPA or advisor, whether they can edit or only view, and you can remove that access at any moment.

Sharing is never all-or-nothing. You choose which parts of your picture an advisor can open — for example your property and tax records but not your personal bank accounts — and you can go further and leave out individual kinds of records inside an area.

You can also hide dollar amounts. An advisor can see how something is titled, who owns it and who inherits it, while balances and values stay hidden. Those limits are enforced in the database itself, not just on screen, so there is no way around them.

When an advisor invites you as a new client, they tell you what access they are asking for, and nothing is final until you review it and agree.

Printed binders, PDFs and spreadsheets leave the service and are no longer covered by these protections. Store them somewhere safe, and shred the copies you replace.

You can see what your advisor did

Your household keeps an activity history showing when an advisor opened, changed or exported your shared records, and when. Only you and your partner can see it, and entries cannot be edited or erased.

Bitcoin, wallets and other digital assets

You can write down what digital assets exist, which wallet or exchange holds them, where the device or written backup is kept, who the digital executor is, and who handles the taxes. Never type a recovery phrase or private key here — a pointer to where the real backup lives is all your family needs.

Our own staff are held to the same rules

Support and administrator actions are written to a permanent internal record: who acted on an account, what they did and when. Sign-in sessions can be revoked, accounts can be locked if something looks wrong, and lifting a manual lock takes an administrator. You see a plain-language history of security events on your own account.

We do not sell your information

Your records are never sold, rented or shared with advertisers, data brokers, insurers, lenders, sponsors or issuers. We do not build marketing profiles from what you enter.

You can take your data with you, or erase it

Every report exports to PDF and Excel, so you always hold your own copy. You can correct or remove individual records at any time, and you can permanently delete your account and everything in it from your account settings.

Responsible disclosure

If you believe you have found a security issue, please contact us at support@holdingshaven.com before sharing it publicly. We read every report and will work with you on a fix.

No guarantee of absolute security

No internet service can promise perfect security. We work hard to protect your records, and you help by using a strong, unique password, keeping your email account secure, and only inviting people you trust.

Questions

Security questions: support@holdingshaven.com. Privacy and data deletion requests: privacy@holdingshaven.com. See also our Privacy policy and Terms of use.