What is protected, and how.

Account-free viewing

Viewers open a revocable shared link and do not create a Vocevia account. Editors sign in. A viewer link is checked on every guide, vault, and media request and stops working when revoked, expired, deleted, refunded, or deactivated.

Protected written content

Urgent Information and Final Vault written content is encrypted in the browser with AES-GCM. The encryption key is derived from the normalized phrase using PBKDF2 with a unique salt. The cloud receives ciphertext, not the plaintext written content or unlock phrase.

The Final Vault date is also enforced by the server. An invalid or missing gate cannot be published as a completed Final Vault.

Viewer paths

Locked role-path guidance is withheld from the viewer response until its phrase is verified by the server. Short-lived role tokens are bound to one guide and role. Phrase attempts are rate-limited.

Video and audio

Media is stored separately and protected by guide access, vault phrase tokens, role tokens, and the Final Vault time gate where applicable. Media bytes are not end-to-end encrypted. Protected viewer media is not retained in the browser cache after the unlocked session.

What to put in Vocevia

Store calm directions and pointers: who to call, where the insurance folder is, which official number to use, and where recovery instructions are kept. Do not store passwords, PINs, full account numbers, recovery codes, identity documents, or complete medical records.

AI and payments

AI Assist sends only the text you paste after an explicit confirmation and is limited per guide. Stripe handles card entry and payment processing; Vocevia stores order and entitlement status rather than full card details.

Deletion

Deleting a guide immediately archives it, revokes active viewer links, voids its entitlement, and removes its shared guide, vault, and media blobs. Limited transaction and security records may remain where required for accounting, disputes, fraud prevention, and legal compliance.