Security, privacy and where your data lives
This page states what is true today. Where something is planned rather than built, it says so. Meravor holds no third-party security certification (no SOC 2, no ISO 27001, no published penetration test), and we will not imply otherwise.
Where the data is
- Canada. Records are stored and processed in Google Cloud's Montréal region.
- Built for Law 25 and PIPEDA, Quebec's and Canada's privacy regimes.
- A printable attestation covering data residency and security is available inside the professional dashboard, for your own due diligence.
- Foresight stays on your device. What you enter in Foresight is kept in your own browser. It reads your Meravor record to fill itself in and sends nothing back, so nobody at Meravor can see it.
How it is protected
- AES-256-GCM field-level encryption at rest for sensitive free text.
- PBKDF2-SHA256 password hashing, salted. Passwords are never stored recoverably.
- Encrypted in transit, with HSTS and a strict Content-Security-Policy that permits no inline scripts.
- Mandatory two-step verification on every professional account.
Who can see what
- Default-deny, written as an allowlist. A professional receives only the fields named for that purpose: the household, the people in it, what kinds of assets exist and where they are held, life events, and the gaps derived from them. A column added to the database later is excluded until someone adds it to that list on purpose.
- Tiered, revocable grants. Access locations, health details, digital accounts and final wishes are each granted separately and can each be withdrawn.
- An organization sees engagement; an invited advisor sees a planning view. Never beneficiaries, documents, key contacts, reminders or the activity log, and an organization never reaches a household record at all.
- No file storage. Meravor records where things are kept. It does not hold the documents themselves, so there is no document store to breach.
If someone reports a death or a loss of capacity
- Only someone the owner chose. An executor the owner named and linked to the record, or whoever holds the claim code printed in the Emergency Binder.
- The owner is told at once, and has 30 days to say no. The record locks for everyone while the clock runs, and one click cancels the claim and ends the claimant’s access.
- Taking over a record is not legal authority. Access to the information does not make anyone an executor, a liquidator or an attorney.
If you stop paying, or leave
- Export, always. A full export plus a printable Emergency Binder, at any time.
- Self-serve deletion with a 30-day window and a restore link before the purge runs.
- 30-day money-back guarantee on any paid purchase.
Meravor is run by a real Canadian company, not a passing app. But if we ever had to wind down, we would give at least 90 days written notice, keep exports working the entire time, and, before shutting anything off, email every account a copy of their own printable binder, so the record survives us. Your family's information is yours; our ending does not take it with us.
Who runs it
Meravor is operated by PureFox Holdings Ltd., a company registered in Alberta, Canada. Google Cloud Platform is the hosting and database subprocessor; Stripe processes payments; Resend delivers transactional email. Questions about any of this reach a person, not a queue.
This page is general information about the service, not legal, tax, financial or insurance advice. Meravor is not a law firm. Meravor is operated by PureFox Holdings Ltd., a company registered in Alberta, Canada, at PO Box 88044, RPO Walden, Calgary, AB T2X 4V6. Email reaches us directly at help@meravor.ca, and we answer within one business day.