BeforeHand
Sign inStart your plan
Menu

Security & trust

Protection families can understand—without vague security claims.

A continuity plan can contain deeply personal information. Here is what BeforeHand currently does to protect it, where your choices matter, and what no software can replace.

Built into the product

How BeforeHand protects your plan.

These statements describe protections implemented in the current product. We do not display certifications, audit seals, or compliance claims that have not been independently earned.

Sensitive data is encrypted

Sensitive plan details and uploaded documents are encrypted with AES-256-GCM before storage. Distinct encryption keys are used for separate data surfaces so one key is not reused across every kind of protected information.

Two-factor authentication is available

Account holders can add authenticator-app verification and receive backup codes. This adds a second check beyond the account password when signing in.

Access follows the role you assign

Plan owners control which trusted people receive access. A contact can be limited to assigned categories or grants, while owner-level information remains unavailable to people without permission.

Files include an integrity check

Uploaded files receive a SHA-256 digest. That fingerprint helps the system detect whether stored file contents no longer match the file that was originally recorded.

Sensitive activity is recorded

BeforeHand records important events such as protected-information views and role-grant changes, creating an activity trail that supports review and accountability.

Life-event access is not an instant unlock

Reporting incapacity or death does not simply expose an entire plan. Evidence and workflow status are tracked, and executor access remains restricted until the applicable verification stage is satisfied.

Your controls

Good security also depends on the choices you make.

  • Use a unique password and enable two-factor authentication.
  • Grant each trusted person only the access their role requires.
  • Review access after family, advisor, or responsibility changes.
  • Avoid using shared accounts or sending sensitive details by email.
  • Keep signed originals where the authorized person can reach them.
Sign in to manage account security →

Important boundary

Privacy on screen is not the same as legal authority.

A security PIN can help conceal sensitive fields from someone looking at an unlocked screen. It is not a substitute for an account password, server-side permission, power of attorney, executor appointment, or an institution's identity checks.

BeforeHand helps organize and coordinate a plan. It does not bypass a bank, court, health provider, or digital platform's requirements.

Questions or concerns

Security communication should stay open.

Read our privacy notice for information about data handling. If you believe you found a security issue or need help protecting your account, contact us with enough detail to investigate—do not include passwords, backup codes, or sensitive documents.

Read the privacy notice →

Contact BeforeHand →

Start before it is urgent

Build a plan with access you control.

Start your planSee how it works