Trust center
Security, privacy and the services we use
What we do to protect your data, where it lives, and who helps us run KeyCare Pass.
Our security practices
Documented design
Our whitepaper describes key derivation, encryption and sharing.
Read the whitepaperWhere your data lives
The KeyCare Pass cloud service, its PostgreSQL database and your encrypted files run on a server GovPAM operates in the European Union. Traffic to it is encrypted with TLS.
Organizations that need their data somewhere else can run KeyCare Pass on their own servers, where GovPAM has no access at all.
Subprocessors
The companies that process data so we can run KeyCare Pass. None of them can read your vault, which is encrypted before it reaches us.
| Company | What they do for us | Location |
|---|---|---|
| Hetzner Online GmbH | Server hosting for the KeyCare Pass service and its database | Helsinki, Finland (EU) |
| Cloudflare, Inc. | DNS for keycarepass.com, sending account emails (Cloudflare Email Service), hosting this website and its contact form | Global network |
| Microsoft (Microsoft 365) | The support mailbox that receives email to support@ and security@keycarepass.com | Microsoft 365 data centres |
| PayFast | Taking payments for plans; PayFast keeps your card details | South Africa |
Optional services you choose yourself: the exposed passwords report and our breached password checker query Have I Been Pwned's Pwned Passwords service with a five-character hash prefix; two-step login with Duo or YubiKey uses those providers when you turn it on.
Your rights and your data
- Export your vault at any time from Tools > Export
- Delete your account from the web vault; that deletes your vault and account data from our server
- Ask us about your personal data at support@keycarepass.com
- Read the privacy policy and terms of service