Your family's records are some of the most sensitive data there is.
We design Oikos around that. This page says what is built and tested, and what is not yet, so you can decide for yourself. Oikos is in private beta.
What protects a family's records today.
Separate by design
Every family is a separate workspace. The separation is enforced by rules in the database itself, not only in the application, and a test suite tries to cross it on every release.
Two-step sign-in for everyone
Every account uses a code from an authenticator app. The database refuses family data to a session that has not completed it.
Roles and scoped access
Owner, manager, family member, advisor and house staff roles. Limit a person to chosen people, entities or areas, and set an end date.
Sensitive areas are locked further
The succession plan and medical cards have their own permission, granted by the owner one person at a time. Every look is logged.
A complete history
Every change records who made it and when, and can be undone. Deleted items wait in a bin.
Sign-in protection
Limits on repeated attempts, a check of new passwords against lists of common ones, alerts for a new device or country, a list of where you are signed in with a button to end other sessions, and passkeys as an alternative to the authenticator code.
Sensitive numbers are encrypted
Policy, tax, registration, plate, hull and serial numbers are encrypted by the application before they are stored, with a key that is kept in the application's secrets and never in the database or its backups.
You are told when something unusual happens
Owners get a list, and a short daily email, when everything is downloaded, a large export is made, someone is given or changed in access, support is given access, or a member signs in from somewhere new.
Support sees nothing unless you say so
Oikos staff cannot read a family's records. The owner can switch on time-limited support access for 1, 24 or 72 hours. It is read-only, shows a banner to everyone in the family, logs every page opened, and can be ended at any time.
No secrets stored
Oikos does not hold passwords, PINs, recovery phrases or private keys, and the software refuses fields that could.
Export and delete
Download everything whenever you like. Delete the family and its records when you want.
What is in place and what comes later.
We would rather be plain about this than make claims we cannot back up.
| Area | Status |
|---|---|
| Per-family separation, two-step sign-in, roles, history, export, delete, support access with consent | Built and tested |
| Encrypted nightly backups with a tested restore | Built, runs once deployed |
| Hosting in an EU region | Planned for launch |
| An independent penetration test | Planned before general release |
| Passkeys as a second step (a fingerprint, face or security key), with the authenticator app kept as a fallback | Built and tested |
| Extra encryption of policy, tax, registration, plate, hull and serial numbers, with a key held only in the application's secrets | Built and tested |
| Alerts to the family's owners for downloads, large exports, new access, support access and sign-ins from somewhere new | Built and tested |
| ISO 27001 or SOC 2 certification | Not started |
| A private AI hosting option | Not built, and no AI reads your records today |
Data is encrypted in transit and the hosting platform encrypts it at rest. We do not claim more than that.
No AI reads your records.
Today Oikos does not send your records or documents to any AI model. Document reading uses fixed rules. If that ever changes we will say so first, and you will have a choice.
- We use AI only to help draft text for this public website.
- Your records are never used to train AI models.
- A feature that answers questions from your records is planned, not available. It would respect the same access rules as people.
If you find a weakness, tell us.
We welcome responsible reports and will not take action against good-faith research.
- Write to privacy@oikos.sarl with what you found and how to repeat it.
- We will reply within three working days and keep you informed.
- Please do not access other people's data or disrupt the service while testing.
Questions from your lawyer or IT advisor?
We will answer detailed security questions before you commit.