Our continuity promise
What happens if Keystone shuts down?
It's the hardest question you can ask a service meant to last a lifetime. So we answer it here — in writing — because trust has to be able to outlive us.
The three commitments
Three commitments, if the day ever comes
-
At least 6 months' notice
We never shut down overnight. You'll be told by email and in the app at least six months before the service stops — and your whole Keystone keeps working as normal throughout the notice period.
-
Free export for everyone
Every user — on every plan, including the free one — can export everything in open formats throughout the notice period. No paywall, no rush: your data leaves with you.
-
Your access outlives us
Your export includes an offline decryptor — a single file. Together with your recovery code, it opens your sealed items on any computer, forever, with no Keystone server involved.
Why we can promise this
A promise backed by maths — not by our survival
This isn't goodwill, it's architecture. Your sealed items are encrypted on your own device before they ever reach us. We store only ciphertext, and we never hold your key — not while we run Keystone, and not if one day we don't.
The offline decryptor is a self-contained file, not a service that has to be kept running. As long as you have the file and your recovery code, what was sealed can be opened — whether or not Keystone exists tomorrow. It's a promise the maths keeps, not the company's survival.
And "lifetime"?
"Lifetime" means the service's operating lifetime — for as long as Keystone is offered — not your own lifetime. Exactly what that covers is written into the terms, so you can read it in black and white rather than take our word for it.