Unshakeable Trust. Absolute Continuity.
Your assets, under your control.
KEYCOVAULT collects the important documents in your life (insurance policies, vehicle registration, warranty certificates, ID and passport, contracts) in one secure place, extracts the key information for you and warns you before they expire. Your data is kept on servers in Türkiye.
What problem does it solve?
Most of us have our documents scattered: photos on the phone, attachments in email, paper in a drawer. When does the comprehensive insurance end? Was the traffic insurance renewed? Is the washing machine still under warranty? When does the passport expire? The answer to these questions is usually “I need to check”, and it's often noticed only after the date has passed.
KEYCOVAULT tracks this for you: you upload the document, the information is extracted, you confirm, and you are reminded by email when the time comes.
How does it work?
- 1
Upload
Upload a PDF, JPG or PNG; on a phone you can take a photo directly with the camera.
- 2
Details are suggested
The system extracts the document type, institution, policy/document number, start and end dates, amount, plate, insured persons and installment plan as suggestions.
- 3
You approve
No information is final until you confirm it. If it is wrong you correct it; if you do not want it you reject it.
- 4
You get reminded
You receive emails only for dates you confirm: 30, 7 and 1 day before expiry; 3 days before the due date for installments. The bell icon in the app also shows what is coming up.
Which documents does it understand?
Insurance policies
Vehicle registration
Warranty certificate and invoice
Passport, ID card, driver's license
The Turkish ID number in documents is never parsed or stored; only the document itself is kept, encrypted.
Transfer plan: for your loved ones
Crypto wallet recovery words, phone passcode, email password, private codes… Information that stays with you throughout your life, but that your loved ones will one day need to reach.
- You keep the information in an encrypted vault.
- You designate someone you trust as an authorized person, set a passphrase of a few words for them and hand it over in person or through a private channel. The phrase is not stored in the system.
- When the authorized person requests access, you receive an email and the waiting period (3–90 days, chosen by you) begins. During this time you can object with one click.
- When the period ends, the authorized person opens the vault with the code sent to their email and the passphrase. If you wish, they can also download the documents you designate (for example policies). Documents you have not shared are never visible.
- Wrong attempts are locked out and every access is logged.
So the answer to “what if something happens to me” becomes an arrangement that nobody can reach without waiting for you, but that can be reached when needed.
Data security
Documents often contain personal and sensitive information. That is why KEYCOVAULT treats security as the foundation of the design, not an added feature.
Where is your data?
- Your documents, profile and account information are stored on servers in Türkiye. The web interface runs on a separate service but holds no personal data.
- Emails are sent through domestic email infrastructure.
- The system that reads documents runs on the server with rules; your documents are not sent to an overseas service such as an AI service.
Encryption
- Every user has their own encryption key. Files and the information in the transfer plan vault are stored encrypted with this key using AES-256-GCM; the user key is additionally wrapped with a master key.
- Even if the database or disk alone were seized, the content cannot be read.
- Connections are protected with TLS; session cookies are HttpOnly and Secure. Backups are encrypted too.
Account security
- Passwords are stored hashed with Argon2; your password itself is not kept anywhere.
- Password reset, email change and authorized-person verification links are single-use and time-limited, and only their digests are kept on the server.
- You can list and close your active sessions. Risky actions (adding an authorized person, deleting the account) ask for your password again.
- Two-factor authentication (authenticator app) and a Google sign-in option are available; no documents or profile data are sent to Google.
Infrastructure
- Every uploaded file is virus-scanned (ClamAV).
- The database has row-level security: even if the application has a bug, one user cannot see another user's rows.
- Only web traffic (80/443) is open to the outside on the server; the database and scanner are on the internal network.
- Rate limiting, security headers and a content security policy are applied. Important actions are written to the audit log (only the event, not the document content).
Control that stays with you (KVKK)
- You can export your data with one click.
- When you delete your account, your files and encryption key are permanently deleted within a short time.
- Only essential cookies are used; there are no analytics or advertising cookies.
- The privacy notice, cookie policy and terms of use are available on the site.
Honest notes
- The system is not zero-knowledge: the server manages the encryption keys. This is necessary for features such as document reading and reminders to work. Keys are kept separate from the data and are planned to move to a separate key management service in the future.
- Information extracted from documents may contain errors; that is why everything is shown to you first. Reminders are a helping tool, not a guarantee.
- The stronger the passphrase, the more secure the transfer plan vault; at least 5 words and 25 characters are required, 6 or more random words are recommended.
- KEYCOVAULT is not a legal advice, notary, inheritance or asset-transfer service.
Put your documents in order
Upload your first document; we'll find the expiry date and, with your approval, remind you in time.