Security & Trust Infrastructure
Security practices designed to protect your family's information with care, privacy, and operational discipline.
Security overview
Encryption
AES-256 & TLS 1.3
Data Residency
US-East (N. Virginia)
Digital Access Guidance & Privacy
Forward helps families organize digital access details, privacy preferences, and important account context so loved ones have more clarity when guidance is needed.
Security details and documentation
Technical Security Specifications
Security whitepaper available upon request| Category | Protocol / Standard | Frequency |
|---|---|---|
| Penetration Testing | Third-party grey box testing | Quarterly |
| Data Backups | Geo-redundant snapshotting | Hourly |
| Access Control | Role-Based (RBAC) & MFA Enforced | Continuous |
| Audit Logs | Immutable write-only logs | Real-time |
| Disaster Recovery | RTO < 4h, RPO < 15m | Bi-annual Test |
Certifications
AICPA SOC 2
Type II Verified
Privacy-First Infrastructure
Built with sensitive family information in mind
Report a Vulnerability
We operate a bug bounty program for security researchers.
Program details available upon request
Our Privacy Promise
Legacy is deeply personal. We never sell your data — not to advertisers, insurers, or third parties. Your information exists only to power your estate plan and protect your digital assets. We trust Forward with our own families' legacies, too.
Sensitive information is handled with restricted access, monitoring, and security practices designed to protect your family's data.
Trust starts here
Review our security and privacy information, then get started when your family is ready.