Backups and their encryption
What the nightly copy holds, how it is locked, and where the second copy is kept. Said from the record the backup leaves each night, read each time this page is drawn.
Every night
A copy of your account and your work is taken every night. The most recent was taken on 11 October 2026. If two nights pass without one, this page stops saying so by itself.
What a copy holds
Everything members enter and every document in the library, with the site's own files. The copies of public records that the product reads again from their sources are left out, because they can be read again.
How it is locked
Each copy is one file, locked with AES-256 before it is kept. The key is made from a long random passphrase through 200,000 rounds of PBKDF2, with a salt. Each file also carries a seal made with the passphrase, so a copy that was changed anywhere no longer matches it. Without the passphrase a copy cannot be opened, and the passphrase is not sent anywhere.
A second copy in another place
A second copy of each night's file is kept in another place. It is locked before it is copied there, and the place it is kept never holds the passphrase. It travels there over an encrypted connection.
The rest of the Trust Portal
- Trust PortalWhat is true today, in one list.
- How data is keptWhere documents sit, who can read them, and what goes to an AI model.
- Access controlRoles, two-step sign-in, sessions and the account history.
- Incident responseWhat we do when member data may have been reached.
- Vulnerability disclosureHow to report a weakness, and what is in scope.
- Outside servicesThe kinds of service that touch member data.
- Security questionnaireAsk for it, under a non-disclosure agreement.
- Security and privacyThe whole of what is stored, in one page.