Where a family keeps what matters.
The deed, the will, the policy numbers, the photograph of the house before the porch was rebuilt. One private place for all of it, on your own domain, with the permissions worked out before anybody needs them.
Permission is the product
Records belong to categories; categories belong to groups; people belong to groups. Nobody is ever granted access individually, because groups outlive people and a list of individuals does not. The rules are enforced by the database, not by the page you happen to be looking at.
On your own domain
Your family reaches the archive at your name, not ours. Bring a domain you already own, or start on one we give you and move later. A public page introduces the family; everything behind it needs a sign-in and two-factor.
A plan for the worst day
Succession is a feature, not a support ticket. An owner proposes, a second owner confirms, and the change takes effect after a week in which everyone can see it coming. Nothing about a death happens quietly, and nothing about it requires a court order.
You can leave
Your documents sit in ordinary object storage under an ordinary key layout, and you can pull all of them down with standard tools without asking us. An archive you cannot walk out of is not an archive.
Built for one family first, which is the only honest way to build this. The Burns family archive runs on it at their own domain, and everything they can do, you can do.