Questions worth answering before you trust it

Is Heemnota a will?

No. It stores an encrypted map and instructions. It does not transfer assets, name legal heirs, or replace a will or a beneficiary form at a bank or insurer.

Can Heemnota read my records?

No. The ledger and each release packet are encrypted in the browser. The server stores ciphertext and wrapped keys. It does not have your vault passphrase or anyone's release private key.

What if I lose my passphrase?

The recovery key is the other copy of the vault key. Lose both, and the ledger cannot be opened. That is deliberate. A service that can reset the passphrase can also read the vault.

What if I miss a check-in?

Grace starts, and you get email. Until grace ends, and until any required verifiers confirm, you can cancel the pending release in one click. A missed check-in is not a finding of death. It is a timer plus, if you configured them, people you asked to look twice.

Do verifiers see what I wrote?

No. They hold a share of the packet key, encrypted to their own key. Confirming re-wraps that share for the recipient. The packet itself is not sent to them.

Can I cancel after someone has opened a packet?

You can stop further downloads only before release completes. A file someone has already decrypted is outside Heemnota's reach.

Where is the data hosted?

The launch target is Cloudflare, with the database created in Western Europe. Say "EU hosted" only after the live database location is checked. The owner of the product is in Luxembourg, so GDPR applies to personal data of people in the EU regardless.

What does the free plan leave out?

Two recipients, a 90-day check-in, no verifier shares, and 25 MB of ciphertext. The cryptographic "two people must agree" path is on Steward and above because that is the part that costs ongoing trust, not because the free plan is a demo that does not encrypt.