Architecture crafted for
life's continuity.

Where does my data actually live?

We use Amazon's top-tier data centres in Mumbai (ap-south-1), with AWS Hyderabad (ap-south-2) as our backup region. Our system is “serverless,” meaning no computer stays on for hackers to poke at.

Where does each user's data go?

When you sign in, an Identity Directory checks your country and routes you to the right silo. Today only the India + GCC silo is live. Indian users sit there by default. GCC users sit there too, with explicit consent at signup. Each future silo stays isolated — data never crosses.

Local compliance and security.

AWS Mumbai provides the strongest data-centre footprint in India. Staying on Indian soil ensures your legacy follows local laws and remains available to your family without complications.

Sign up and log in safely.

Registration: verified via Phone OTP and Email OTP. You set a security question and a 4-digit MPIN. Trusted use: daily access requires only your 4-digit MPIN. New device: triggers 2-factor security — phone OTP first, then your MPIN.

Why can't my family open this?

In shared-phone homes, fingerprints allow anyone enrolled to enter. A private 4-digit PIN keeps your vault private while kids play games or your spouse uses the phone.

Is 4 digits really secure?

Yes — because the protection is the lockout, not the length. Three wrong tries and your vault locks for 24 hours. Even a thief with your phone gets only 3 guesses before the door slams shut. We chose 4 over 6 deliberately: longer PINs cause more forgotten codes, lockouts, and resets — and memory complexity is the real enemy of security in practice, not raw entropy.

What if someone steals a hard drive?

Data is AES-256 encrypted at rest. Stolen hardware contains only meaningless ciphertext. Master keys live in separate secure hardware modules, never on the same disk as the data.

Who holds the keys?

Amazon's hardware security modules hold them. Soult staff never see them. Think of a hardware safe whose lock only recognises a key the system itself constructs — no human ever holds the physical key.

Double-lock security for your most sensitive fields.

For your secrets (Will IDs, policy numbers, account numbers), we add a second lock. Inside our database, those specific fields look like scrambled gibberish even to engineers with database access.

Spy-proof Wi-Fi.

Data travels through a secure TLS tunnel. Anyone snooping on public airport or café Wi-Fi sees only encrypted gibberish — nothing about what you upload or read.

Can Soult staff see my secrets?

No. We built a restricted access mechanism. Staff have no “decrypt” button for your vault. Your content is scrambled code to our engineers in normal operations.

Who can ever see my vault?

Regular Executor (typically a family member): has their own dashboard listing the users they manage. Can raise a death or medical incapacity flag. OTP verified at every step. Every step emails you AND every executor you named.

Emergency Executor (typically the spouse, only one allowed): no flag check needed. Can log in to your vault any time. While they are in, your vault becomes read-only for you. You get an email instantly.

The emergency role is for medical emergencies and time-critical situations. The regular role is for handover after death or long-term incapacity.

How does my family actually get access?

The named Regular Executor raises a flag from their dashboard — death or medical incapacity. Each step is OTP-verified. Every step emails you and all your other executors, so nothing happens behind your back. Soult phones the executor on the registered number to confirm identity. Government registries (CRS and KRA) are used as a cross-check, but treated as supporting evidence only — records often take months to update. Direct phone and email contact with the executor and family is the primary verification. Two internal Soult approvers must both sign off before access is granted. The executor then sees the entire vault in read-only mode.

Can I share one document with my CA or spouse?

Not today. Your vault works like a private locker — only you have the key. There is no per-item sharing, no per-folder access for an accountant, no time-limited share link. The only way another person ever sees inside your vault is through the executor flow described above — and even then, they see everything in read-only mode. There is no per-item or per-folder granularity yet.

What are the risks?

We protect against hackers, account takeover, and insider access. We cannot stop you from being physically forced to share your PIN. Soult is for organisation and family continuity — not protection from a coerced disclosure under duress.

Where exactly does my data live?

Today, all user data sits in the India + GCC silo — Mumbai for live traffic, Hyderabad as the disaster recovery mirror. Indian users by default. GCC users with explicit consent at signup, since they share the same physical location. Future silos for the US, Southeast Asia, and a dedicated UAE region will be deployed as we expand. Each silo stays isolated — data of users from one region never crosses into another.

What happens at each level of failure?

Tier 1 — one server fails: invisible to users, AWS replaces in minutes.
Tier 2 — Mumbai region down: Hyderabad takes over within an hour. No data loss.
Tier 3 — both regions down at once: service stops. Operational recovery in 7–14 days. Full data integrity verified within 60 days.
Tier 4 — every Indian region destroyed: we cannot recover today. Cross-silo backup replication is on the roadmap as we add the US and SEA silos. Until then, manual user backup is the strongest mitigation.

Record of changes.

A complete footprint of every Create, Update, or Delete on your vault. You and your nominated notifiers will always know exactly what changes have occurred.

No selling, no training, no surprises.

Your vault content is never used to train AI models or for marketing. When AI features are used in the app, the data for that session is processed in-context only — never retained for model improvement. Revenue is subscription-only. If we ever consider a new way of earning — any change at all — we will ask you first. Not notify. Not announce. Ask. And we will only ask if we genuinely believe it benefits you.

The bridge choice.

Chat apps focus on absolute secrecy — if you lose a key, they can't help you. That is a failure for a life vault. We prioritise verified handover over total blindness. We keep staff out but maintain a human-verified path for family. Soult is a bridge to your legacy, not a digital dead end.

What is shipping next?

Near-term: one-click vault export (today users back up manually); US silo (N. Virginia, DR Oregon); SEA silo (Singapore, DR Jakarta); cross-silo backup replication so something always survives even if a whole region is lost.

Mid-term: dedicated GCC silo when AWS UAE region matures; SOC 2 Type II.

Always-on: ongoing audits, security hardening, infrastructure reviews.