Architecture Crafted
For Life’s Continuity

"Where does my data actually live?"

We use Amazon’s top-tier data centers in Mumbai, with AWS Hyderabad as our backup fallback. Our system is "serverless," meaning no computer stays on for hackers to poke at.

"Where does each user's data go?"

When you sign in, an Identity Directory checks your country and routes you to the right silo. Today only the India + GCC silo is live. Indian users sit there by default. GCC users sit there too, with explicit consent at signup. Each future silo stays isolated - data never crosses.

"Local compliance and security."

Amazon Mumbai provides the highest standard of security in India. Staying on Indian soil ensures your legacy follows local laws and remains available to your family without complications.

"Sign up and log in safely."

Registration: Verified via Phone OTP and Email OTP. You set a security question and a 4-digit PIN.

Trusted Use: Daily access requires only your 4-digit PIN.

New Device: Triggers 2-Factor Security: Phone OTP first, then your PIN.

"Why can't my family open this?"

In shared-phone homes, fingerprints allow anyone registered to enter. A private 4-digit PIN keeps your vault private while kids play games or your spouse uses the phone.

"Is 4 digits really secure?"

Yes - because the protection is the lockout, not the length. Three wrong tries and your vault locks for 24 hours. Even a thief with your phone gets only 3 guesses before the door slams shut.

We chose 4 over 6 deliberately. ICICI Bank uses 4-digit PINs for the same reason: 6 digits cause too many forgotten PINs, lockouts, and resets. Memory complexity is the real enemy, not entropy.

"What if someone steals a hard drive?"

Data is AES-256 encrypted. Stolen hardware only contains meaningless characters. Master keys stay in separate secure hardware safes.

"Who holds the keys?"

Amazon’s hardware holds them. Soult staff never see them. It's like a bank vault where the machine only recognizes your key.

"Double-lock security."

Most data is already out there. For your secrets (Will/Policy IDs), we add a Double Lock. Inside our database, those specific fields look like scrambled gibberish.

"Spy-proof Wi-Fi."

Data travels through a secure tunnel. Hackers on public airport Wi-Fi cannot see what you upload or read.

"Can Soult staff see my secrets?"

No. We built a Restricted Access Mechanism. Staff have no "Decrypt" button for your vault. Your content is scrambled code to our engineers.

"Who can ever see my vault?"

Regular Executor (typically a family member): has their own dashboard listing the users they manage. Can raise a death or medical incapacity flag. OTP verified at every step. Every step emails you AND every executor you named.

Emergency Executor (typically the spouse, only one allowed): no flag check needed. Can log in to your vault any time. While they are in, your vault becomes read-only for you. You get an email instantly.

The emergency role is for medical emergencies and time-critical situations. The regular role is for handover after death or long-term incapacity.

"How does my family actually get access?"

The named Regular Executor raises a flag from their dashboard - death or medical incapacity. Each step is OTP-verified. Every step emails you and all your other executors, so nothing happens behind your back.

Soult phones the executor on the registered number to confirm identity. We use government registries (CRS and KRA) as a cross-check, but treat them as supporting evidence only - records often take months to update. Direct phone and email contact with the executor and family is the primary verification.

Two internal Soult approvers must both sign off before access is granted. The executor then sees the entire vault in read-only mode.

"Can I share one document with my CA or spouse?"

Not today. Your vault works like a bank locker - only you have the key. There is no per-item sharing, no per-folder access for an accountant, no time-limited share link.

The only way another person ever sees inside your vault is through the executor flow described above - and even then, they see everything in read-only mode. There is no per-item or per-folder granularity yet.

"What are the risks?"

We protect against hackers. We cannot stop you from being physically forced to share your PIN. Soult is for organization and family continuity.

"Where exactly does my data live?"

Today, all user data sits in the India + GCC silo - Mumbai for live traffic, Hyderabad as the disaster recovery mirror. Indian users by default. GCC users with explicit consent at signup, since they share the same physical location.

Future silos for the US, Southeast Asia, and a dedicated UAE region will be deployed as we expand. Each silo stays isolated - data of users from one region never crosses into another.

"What happens at each level of failure?"

Tier 1 - One server fails: invisible to users, AWS replaces in minutes.

Tier 2 - Mumbai region down: Hyderabad takes over within an hour. No data loss.

Tier 3 - Both regions down at once: service stops. Operational recovery in 7-14 days. Full data integrity verified within 60 days.

Tier 4 - Every Indian region destroyed: we cannot recover today. Cross-silo backup replication is on the roadmap as we add the US and SEA silos. Until then, manual user backup is the strongest mitigation.

"Record of changes."

Footprint of every Creation, Update, or Deletion. You and your notifiers will always know exactly what changes have occurred.

"No selling, no bots, no surprises."

Soult does not currently use AI in the app. Your data is never used for training or marketing. Revenue is subscription-only.

If we ever consider a new way of earning - any change at all - we will ask you first. Not notify, not announce - ask. And we will only ask if we genuinely believe it benefits you. Consent without user benefit is not enough.

"The Bridge choice."

We keep staff out but maintain a human-verified path for family. Soult is a bridge to your legacy, not a digital dead end.

"What is shipping next?"

Near-term: one-click vault export (today users back up manually); US silo (N. Virginia, DR Oregon); SEA silo (Singapore, DR Jakarta); cross-silo backup replication so something always survives even if a whole region is lost.

Mid-term: dedicated GCC silo when AWS UAE region matures; SOC 2 Type II.

Always-on: ongoing audits, security hardening, infrastructure reviews.

"How do I delete my data?"

Deletion is immediate and permanent. After a 10-second confirmation pause, we destroy your encryption key. Old backups become unreadable from that moment.

Take a manual backup first if you want to keep anything - the one-click export feature is coming in an upcoming release.

"What if Soult shuts down?"

We open a 90-day sunset window. You download everything in plain readable formats. We will not sell your data, transfer your vault to a buyer without consent, or delete vaults during this window.

"Subscription payments?"

Managed via Razorpay on the Soult website. No in-app purchases. This keeps billing separate from your vault device.

"The wrong tool for a private vault."

Soult vaults are the opposite of public - they are private by design. The user is the only party with stake in the data. Tampering intent is low - it is the user's own data, kept for the user's own family.

For change tracking, we use audit logs (see Section 14) - every Create, Update, Delete is recorded with timestamp and actor. Blockchain would add cost, complexity, and reduce privacy by exposing patterns to a public ledger - without solving any user problem.