How Erbnis handles your data
You're trusting us with passwords, documents and personal wishes. That's a responsibility. This page explains in plain terms where your data lives, who could technically access it today, and how loved ones actually get something in an emergency.
By The Erbnis editorsPublished 1 September 2026Updated 1 September 20266 min read
Key takeaways
- Your data lives with Supabase (Postgres) in the EU region, encrypted at rest, with TLS in transit.
- Row-level security at the database level ensures every row belongs only to the account that created it.
- Today we could technically access your data — we don't, unless you ask us to for support.
- Loved ones never get an account. They receive a signed, time-limited link scoped to exactly one purpose.
- Deleted accounts are permanently removed after 30 days.
Where your data lives
Erbnis stores data in a Postgres database run by Supabase in an EU region. That means your data does not leave the EU while it's stored. The connection between your device and our servers is encrypted with TLS — the same method used for online banking. On disk, data is stored encrypted at rest, as is standard for any serious cloud database.
Row-level security, in plain terms
At the database level, every row is locked to the account that created it. That's not a rule that only lives in our application code and could be forgotten — it's enforced directly by the database. Even a bug in our own code couldn't accidentally serve one account's data to another.
What we can see today — and what we can't
Honestly: in the current version of Erbnis, your content is encrypted server-side, but not client-side — meaning our team could technically access it at the database level, for example to handle a support request. We don't do this routinely, and never without your explicit request. That's a real difference from "we technically cannot" — and we don't want to hide that difference.
How loved ones get access
Recipients — the people meant to receive access in an emergency — never create an Erbnis account and never register anywhere. They reach released content exclusively through a signed link: time-limited, scoped to exactly one purpose, and not reusable for other content. Such a link never grants automatic access to your whole account.
Backups, retention, account deletion
We back up data regularly to protect against technical data loss. If you delete your account, it first enters a 30-day holding period — in case of a mistake or an accidental lockout. After that period, your data is permanently deleted, including from backups as part of our normal backup rotation.
Who else processes data
Running Erbnis relies on a small number of specialised providers. Full details and legal bases live in the German-language privacy policy. Short version:
| Provider | Purpose | Location |
|---|---|---|
| Supabase (database & hosting) | Storage of account and estate data | EU region |
| Resend | Transactional emails (confirmations, reminders) | EU/US, depending on delivery region |
| Stripe | Subscription payment processing | EU/US, PCI-certified |
| Lovable | Website and application hosting | EU |
Found a security issue?
If you discover a vulnerability, please email us directly at security@erbnis.com rather than disclosing it publicly. We confirm receipt within 72 hours and follow up with an assessment. Anyone who reports vulnerabilities to us in good faith, without causing harm, has nothing to fear from us legally.
What if Erbnis disappears one day?
Should we ever shut the service down, we'll notify you with at least 90 days' notice by email and give you the chance to export all your content in an open, machine-readable format — not one that locks you in. Your data belongs to you, not to us.