The cloud that cannot read you.
Aevoris builds family software where the operator is mathematically incapable of seeing your data. Your documents, your credentials, your locations — sealed on your devices, opened only by your family.
Not policy. Physics.
Every privacy policy is a promise.
Promises can be broken. Mathematics cannot.
Aevoris runs on the second kind.
The principle
Locked before it leaves your hands
Locked on your device.
Before anything leaves your hands, it is locked. The key is made on your device and never leaves your family — we never hold a copy.
It travels unreadable.
An SOS and a routine check-in are the same 553 bytes on the wire. Even the shape of your life is hidden — a cry for help is indistinguishable from silence.
Unlocked only by your family.
On arrival, only a device that belongs to your family holds the key that opens it. Not us. Not a subpoena to us. No one.
Product I
Vault For Us
Your family's papers and passwords, in a vault only your family can open.
- Passkey sign-in, no passwords anywhereWebAuthn passkeys are the only way in. A new device is enrolled by your family in person — never by a reset email an attacker can intercept.
- Credentials vault with hardware-key unlockBanking logins, card PINs, and recovery codes open only with your passkey physically present. Each record is envelope-encrypted, so you choose exactly who in the family can see it.
- Encrypted drive with private OCRScan passports, deeds, and prescriptions, then search them by their text. OCR runs in your own browser — the plaintext never leaves your device, not even to us.
- Per-record sharing & member permissionsModule by module, record by record: parents see everything, teens see their own documents, grandparents see what they need.
- The paper passkeyA printed recovery kit that restores the whole vault after every device is lost, stolen, or dead. Keep it in a drawer; it never touches a server in plaintext.
- Immutable backups with an integrity monitorObject-locked encrypted copies that ransomware cannot rewrite, checked continuously for silent corruption. Reminders can reach you on WhatsApp — opt-in, off by default.
Product II
FamilySecure
Know they're safe. Without anyone else knowing anything.
- Live family map & presence boardEveryone who matters on one quiet map, with an at-a-glance board of who is where — rendered only on family devices, never on a server.
- SOS & check-in, held to 553 bytesA cry for help travels in the exact same envelope as a routine check-in. Anyone watching the wire — including us — sees identical bytes.
- Places & arrival alertsHome, school, practice — geofenced arrivals and departures, computed from a place vault that is named on your devices and sealed everywhere else.
- Escort mode with stall detectionA late walk is watched with the screen off; if the journey stalls, the family knows. Shared for exactly as long as it lasts, then sealed again.
- A precision dial and quiet hoursEach person tunes how precisely they are seen, per circle, and when — teenagers earn autonomy on a schedule the whole family can read.
- Guest passes & a recovery codeSitters and grandparents get limited, expiring access. A lost phone is restored from a recovery code — same identity, same safety numbers, no session needed.
The ledger
Claims we can prove
- 3,406
- core tests over the crypto engine and wire formats
- 2 × 1,409
- byte-identical conformance checks — Swift and Kotlin held to the TypeScript reference
- 80
- SQL assertions proving one family can never read another
- 553
- bytes in every event envelope — an SOS and a check-in are the same size
- 0
- plaintext rows on any server, by construction
- And a public record of what we haven't proven yet. Read the honesty ledger
Questions
Asked plainly, answered plainly
What if I lose my phone?
A recovery code restores your identity, your circles, and your safety numbers on a new device. Your family confirms it’s you — the servers never could.
Can Aevoris see anything at all?
We can see that ciphertext arrived and how much storage it occupies. Names, contents, locations — even the rhythm of your activity — are sealed before they reach us.
What does “end-to-end” actually mean?
Your data is encrypted on your device, with keys that never leave your family’s devices. Servers store and forward sealed envelopes they cannot open.
Is it open to audit?
The architecture documents, test suites, and conformance counts are public — including a ledger of what hasn’t been verified yet. We publish our open questions, not just our claims.
What does it cost?
Early access is free while we finish hardening. Plans will be priced for families — one price that covers everyone in the household.
Can I leave and take everything?
Yes. Export your documents, credentials, and history at any time, readable without us. Leaving is a supported feature, not a loophole.
Early access
Bring your family inside.
We're inviting founding families as hardening completes. Leave an address and we'll write to you — nothing else is done with it.