🧑💻 How it works
Inheriti® Business protects data in four steps: encrypt, split, distribute, reveal. The result is effortless collaboration on your most sensitive data, safe from breaches, AI training and surveillance. This page walks through each step and the rules that guard them.
Step 1: encrypt in your browser
Everything starts in your browser. Your data is encrypted with AES-256 before anything leaves your device.
SafeTech never sees your data in readable form. Not during upload, not in storage, not even during a reveal.
This is not a policy promise, it is how the system is built: the keys that matter never leave your organisation.
Step 2: split into shares
The encrypted data is divided into shares using SSDP+, our patented Secure Share Distribution Protocol.
A share is useless on its own. It cannot be read, decrypted or partially recovered. Only the right combination of shares, brought together under your rules, can reconstruct anything.
Step 3: distribute across storage layers
The shares are spread across separate storage layers, so no single place ever holds enough to matter.
| Layer | Role |
|---|---|
| Inheriti® Vault | Encrypted cloud storage run by SafeTech, included in every subscription |
| InheritiChain | A private, permissioned blockchain run by SafeTech, for the validation shares |
| Cloud connectors | Your own Dropbox, Google Drive or OneDrive as optional extra layers |
A hardware security module (Inheriti® HSM) guards the keys on the server side. It stores no data and can never open your plans on its own.
Step 4: reveal under your rules
Data only comes back together when an authorised member requests access and your governance rules approve it. Depending on how a plan is configured, a request passes through:
| Gate | What it does |
|---|---|
| Dead Man Switch | Business Continuity plans only: the plan creator can stop the request during the countdown you set. It runs first |
| Authentication | The member proves who they are with SafeKey Mobile or an email link |
| Moderation | A moderator reviews and approves the request |
Every plan has at least one gate. There is no configuration where data is revealed without a check.
The reveal itself happens where the encryption happened: on the computer of the member who requested access, in their browser or in the Inheriti® tools they use. The shares combine on their device, and nowhere else.
Run by your organisation
Access is granted to teams, not scattered across individuals. Members belong to teams, teams are linked to protection plans, and roles decide who can create, moderate and manage.
The whole system is anchored by the Organisation Key: created once by the Organisation Owner, distributed to members, and claimed by each member with SafeKey Mobile. Without it, nothing in your organisation can be opened.
Everything is recorded
Every request, approval, denial and reveal is written to the audit trail: who did what, when, and to which plan. You can review it at any time and export it for compliance.
The following pages explain each concept in detail, starting with your organisation.