Welcome to our newly launched Wesbite!
Blue Flame Legacy - Legacy Vault™ FAQs
Where is my information stored?
All information is housed in the Cloud with Microsoft Azure. Here is a small sample of companies utilizing Microsoft Azure: 3M, Adobe, Airbus Defense and Space, American Airlines, AT&T, BMW, Boeing, Coca-Cola, CVS, Dell, Deloitte, eBay, GE Healthcare, General Motors, Heineken, Honeywell Inc., Intel, Johnson & Johnson, NBC Universal, NFL Players Association, Proctor & Gamble, Samsung, Shell, SpaceX, Travelocity, Walgreens, Walmart. (Information as of 2024)
Who has access to my information?
Only you, your Co-Owner and any Authorized Users you may have assigned. We are a zero-knowledge company. Meaning, no one at My Life and Wishes can see your information. All data is encrypted using 256 encryption and 2048 bits of encryption power, equivalent to a number that is 617 digits long. Your data is encrypted while stored and encrypted again when transmitted between systems, (i.e. uploaded by you) and again when retrieved (downloaded) when you need it.
How secure is my data?
Our technology uses AES 256 encryption, the same quality relied on by banks, the military and the U.S. government. My Life and Wishes also offers the option of adding Multi-Factor Authentication to your account, for an added layer of protection.
What about data breaches?
My Life and Wishes has no “data base” or aggregate access to customer platforms. Your data is uniquely encrypted for you and those that you choose to share it with.
What information am I required to put into my account?
We understand that everyone’s comfort level is different when it comes to security. We built the platform with this in mind. The sections in your site never require account numbers or other personal or identifying information. This allows customers to create a roadmap for their loved ones, with their comfort level in mind.
Can I print a copy of my entire record to keep in a safe deposit box or give to someone I trust?
If you are on an annual subscription, you have the ability to print your entire record. (This option is not available on the monthly plan.)
If I close my account, what happens to the data and information I entered?
Once a customer closes their account, the data remains for a 90-day grace period. After 90 days, all information is permanently deleted.
What happens to my data if My Life and Wishes is sold or acquired?
If MLW at some point is involved in a merger, acquisition, sale, reorganization, liquidation or other disposition of all or substantially all of its assets to another entity, you will be notified via email and/or a prominent notice on our Site of any such change in ownership and of the choices available to you.
My LIfe and Wishes Security
Blue Flame Legacy - Legacy Vault™ Security, Privacy, & Confidentiality
The security, privacy and confidentiality of your Personal Information is of utmost and critical importance to us, which is why we have implemented a variety of industry standard (or better) administrative, physical and technical protections to safeguard the security, privacy, confidentiality and integrity of your Personal Information, including without limitation your Secure Information.
- We implement end-to-end encryption, ensuring your data is encrypted through all points it travels, from your web browser, to our servers, and to all the places it is stored and backed up for redundancy. From the moment you start using the application, your data is encrypted as you send it to us using SHA 256 encryption and 2048 bits of encryption power, equivalent to a number that is 617 digits long. Your encrypted personal data is even encrypted again when it is stored and transmitted between systems, and only retrieved when you need it.
- Your password is encrypted and stored in an irreversible way. We use industry recommended best practices to ensure your password is stored in a way that is challenging, to say the least, to figure out. Someone would have to spend a lot of time and money to reverse engineer your password by guessing all the possible passwords and then hashing each of them in hundreds of ways to figure it out. Be sure to pick a good password to ensure you make it even more challenging for someone to guess it.
- Two-Factor Authentication is strongly encouraged (but not required) of all Users, Co-Owners and Authorized Viewers.
- Our technology uses AES 256 encryption, the same quality relied on by banks, the military and the U.S. government. Your data is uniquely encrypted for you and those that you choose to share it with.
- Your Secure Information is encrypted and stored in a hosting provider that has 24/7 physical and biometric protections, firewalls, intrusion detection systems, and an array of other technological safeguards and 24 different security certifications.
References:
The website uses a public/private key certificate (SSL) that is an industry best practice to secure information sent from the web browser to the servers. The strength of the encryption is determined by the number of bit used in the encryption process. We are using 2048 bits with a SHA256 bit signature which is considered strong and secure.
- You can see how well the SSL certificate tests here: https://www.ssllabs.com/ssltest/analyze.html?d=plan.mylifeandwishes.com
- This compares to the strength used by sites like Amazon.com https://www.ssllabs.com/ssltest/analyze.html?d=www.amazon.com
- End-to-end encryption is used to describe a system that employs security in a way that ensures that data sent from the user is encrypted every step of the way between the customer and the destination. This ensures that no third party has an unencrypted view of their private data. https://blog.whatsapp.com/10000618/end-to-end-encryption
- Password storage follows the OWASP recommendations: https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet
- Technically passwords are hashed using a one-way method whereby the original password cannot be derived directly from the data rather than encrypted where it can be reversibly retrieved: http://stackoverflow.com/questions/326699/difference-between-hashing-a-password-and-encrypting-it
- AES 256 is a two-part description of the encryption system used. First the algorithm is AES or Advanced Encryption Standard, which is used by many organizations including the US Government for encryption of the most sensitive of data. 256 describes the number of bits of data used in the encryption key and is currently the largest key size that can be used: http://www.eetimes.com/document.asp?doc_id=1279619
- Anecdotally, in the new popular show "Mr. Robot" the hackers that sought to take down the world banking system used AES 256 to encrypt all the data, describing the impossibility of ever getting the data back: http://www.forbes.com/sites/abigailtracy/2015/09/02/mr-robot-season-one- finale-hacks-zero-day/#123523e8647c