Security
Built so that no one holds the whole picture, including ChainComply.
Reconstructing someone's wealth means holding, for a time, the most complete picture of their affairs that exists anywhere. DataPatrimony is built on the assumption that this picture must be protected from everyone who does not need it, including the people who run it.
No file ends unencrypted; no identity sits next to a wallet address in ChainComply's systems.
ChainComply's information security management, audited and certified rather than self-declared.
Four principles
What the design refuses to do.
Never hold your assets
The work is done from public addresses and exchange records. ChainComply never asks for a seed phrase or a private key, and nothing it holds can move funds.
Never keep the only key
At closure the record is encrypted with a key you hold. ChainComply keeps the encrypted file and cannot open it. It is reopened only when the key is sent back over a secure channel.
Never know more than is needed
If you prefer, ChainComply never learns who you are: a code name and no email, directly or through your notary or lawyer.
Never keep identity next to data
Before the record is sealed, identity and data are kept in separate stores, joined only when the case needs it, with a full audit log. See where your record lives.
Where your record lives
Three places, and none of them holds everything.
Identity store
- Your name and contact details
- Engagement documents
- Or, under a code name: nothing
Kept apart from the case store
Case store
- Wallet addresses and exchange histories
- The reconstruction, under a case reference
- No name, no address
Worked on during the engagement
Sealed record
- Identity and case store both encrypted at closure
- Opens only with your key
- Kept so it can be refreshed and handed over
The key is yours
The key
Where the key lives is your decision.
The key opens the record and nothing else. It gives no access to any wallet, account or asset. You decide who holds it, and you can change your mind.
-
With you alone
No one, including ChainComply, can reopen the record without you. If the key is lost, so is access to the sealed record.
-
With your notary
Lodged with the handover letter, alongside the will. The notary acts on the trigger you define.
-
In a bank safe
With the lifetime option, the keys may be stored in a bank safe for your successors.
Anonymity
What ChainComply knows about you depends on how you engage.
Anonymity protects you against one provider holding your identity, your addresses and your net worth in the same place. It is anonymity towards ChainComply, not towards your bank: the record is built to be shown, in your name, to a bank that will know exactly who you are.
| What is known | In your name | Under a code name | Through your notary or lawyer |
|---|---|---|---|
| Your name and contact details | Kept, stored apart from the data | Not known | Not known; held by your intermediary |
| How to reach you | Email and calls | An encrypted channel you set up | Only through your intermediary |
| Your wallets, exchange histories and their value | Known until encrypted, under a case reference | Known until encrypted, under a case reference | Known until encrypted, under a case reference |
| Who holds the key at closure | You | You | Your intermediary, or you |
How it is built
The technical set-up.
The engineering behind the principles above is classified, to reduce the attack vectors against clients' data. ChainComply does not publish how the record is encrypted, how keys are handled, where the data is hosted or who can access it.
Details on request
Contact ChainComply if you need more details.
The team takes clients, their notaries and their banks through the set-up on request.
Request the security detailsQuestions
About security.
What if I lose the key?
If you hold it alone, the sealed record cannot be reopened, by you or by ChainComply. That is why most holders lodge a copy with their notary or in a bank safe.
Can a bank check the record is genuine?
Yes. The bank can contact the case desk to confirm that the record is authentic and unchanged. The record remains your claim, so a bank usually verifies it independently as well.
Do you share my data with anyone?
ChainComply uses third-party providers to retrieve and augment the transaction data, and addresses are screened for illicit-activity indicators so that nothing your bank finds comes as a surprise. Nothing is shared with your bank unless you hand the record over.
Do you ever see my seed phrase, logins or write API keys?
No. ChainComply never asks for them and never needs them. The reconstruction runs on read-only API access and public addresses, and nothing the company holds can move funds.
Is anonymity a way around the bank?
No. It is anonymity towards ChainComply. Your bank identifies you through its own procedures, as it always does.
Where is my data stored?
The hosting is classified with the rest of the technical set-up, to reduce attack vectors. Identity and case data are kept apart. Contact ChainComply if you need more details.
Private by design, and in writing.
Request a private consultationAsk the case lead to walk you through the set-up at the consultation. Directly, or through your notary.