01 / Aevoris Cloud
The cloud that cannot read you.
Aevoris builds family software where the operator is mathematically incapable of seeing your data. Documents, credentials, locations — sealed on your devices, opened only by your family.
Not policy. Physics.
- Envelope
- 553 bytes
- an SOS and a check-in are identical
- Keys we hold
- None
- made on your devices, kept there
- Products
- 2
- Vault For Us is live; Map For Us is in testing
Every privacy policy is a promise.
Promises can be broken. Mathematics cannot.
Aevoris runs on the second kind.
03 / The principle
Locked before it leaves your hands
Locked on your device.
Before anything leaves your hands it is locked. The key is made on your device and never leaves your family — we never hold a copy, so there is never one to hand over.
It travels unreadable.
An SOS and a routine check-in are the same 553 bytes on the wire. Even the shape of your life is hidden: a cry for help is indistinguishable from silence.
Opened only by your family.
On arrival, only a device that belongs to your family holds the key that opens it. Not us. Not a subpoena to us. No one.
04 / Product ILive
Vault For Us
Papers, passwords, the family calendar and shared money, in one vault only your family can open, wherever each of you lives.
- Every paper, with its expiry datePassports, deeds and prescriptions filed by member, scans read automatically, and a warning before anything lapses.
- Passwords behind a second lockUnlimited logins on every plan, behind a second lock, with nothing about them shown until you ask.
- One calendar, and reminders that chase youThe family’s month on one grid instead of five phones, with renewals and appointments that remind you before they lapse.
- The money, without a spreadsheetWhere the month went, every subscription and its renewal date, and who owes whom across shared bills.
- You decide who sees each recordA note, document, expense or password stays yours until you share it, to read or to edit, with exactly the members who need it.
- Passkeys, and a Recovery Kit on paperNo emailed codes, ever. Lose every device and the kit you wrote down brings it all back after a 48-hour wait, or sooner if family approves.
18 apps · 7-day free trial
05 / Product IIIn testing
Map For Us
A map only your family can read. Live location, chat and SOS, and to everyone else, including us, it is noise.
- A live map that admits when it is stalePositions, freshness, battery and speed for the whole circle, and a warning when a phone stops answering instead of a dot pretending to be current.
- SOS, the same 553 bytes as a check-inHold to start a countdown you can cancel; your circle’s phones sound even in Do Not Disturb. On the wire an SOS and a routine check-in are identical.
- Places, arrivals, and Walk with meHome, school and work are encrypted too. Arrival alerts, a shared ETA, and a walk that raises an SOS if you stall.
- Every drive, and a driving scoreDrives drawn in speed bands, hard braking and phone use flagged, and speed alerts that never tell anyone who set them.
- A precision dial for every circleChoose per circle how exactly you are seen, from your exact spot to about 10 km, and share only in the hours you choose.
- Phone, watch, car and browserAndroid, iPhone, Wear OS, Apple Watch, Android Auto and the web, each device carrying its own keys.
In testing · sign-ups paused · iPhone and Android on the way
06 / The ledger
Claims we can prove
Every number below is the total a Map For Us test suite prints, counted 9 October 2026. The suites, and the questions we have not answered yet, go to anyone who asks for them.
- 8,688
- automated tests passing across the app, the crypto engine and the wire formats
- 2 × 5,443
- conformance checks — the Swift and Kotlin ports each held to TypeScript-generated vectors
- 230
- database checks of row-level security and ciphertext opacity, run in Postgres
- 553
- bytes in every event envelope — an SOS and a check-in are the same size
- 0
- keys on our servers that open anything you sealed
And a record of what we haven't proven yet. We would rather be checkable than impressive, so ask and we will send it.
Ask for the honesty ledger →Not proof. Just true.
Numbers that prove nothing
None of this makes your data safer. It is what is in the repository, counted. No hours, no dates, nothing about how hard anyone worked. Anyone holding the code gets the same answers.
- features193,910
- lib175,270
- app78,637
- components27,436
- db5,824
- 481,601
- lines of TypeScript in the web app, across 3,150 files.
- 140,434
- of those lines are tests. Twenty-nine per cent of the codebase exists to check the rest of it.
- 8,232
- unit and integration cases, declared across 1,008 files.
- 1,005
- end-to-end cases, across 22 Playwright specifications.
- 646
- React component files.
- 647
- API route handlers in 456 route files, behind 195 pages.
- 185
- tables in the schema.
- 273
- row-level-security policies standing on those tables.
- 233
- migrations to get there, and 8,982 lines of SQL.
- 5,742
- lines in the largest hand-written file in the repository. It is the schema.
- 519
- Zod schemas guarding the boundaries where data arrives.
- 2,033
- exported TypeScript types.
- 7
- cryptographic primitives in the engine: AES-GCM, Argon2id, Ed25519, HKDF, HMAC, RSA-OAEP, SHA-256.
- 1
- stylesheet in the whole web app, 1,785 lines of it.
- 38
- direct dependencies. Fifty-seven counting the ones that never ship.
- 0
- advisories outstanding against anything that ships. Five sit in lint tooling, which never does.
- 670,697
- words of documentation across 105 files.
- 10,143
- lines behind this website. 2,924 of them draw the objects on its canvas.
- 0
- cookies set by this page, in any browser we could find one in.
- 12
- directives in this page’s Content-Security-Policy. Our own host’s analytics beacon is refused by it.
Counted 9 October 2026 against the Vault For Us repository and this site’s own source, with wc, grep and npm audit. Nothing here is read out of the commit history. The repository is private, so these are our counts, dated, rather than yours.
07 / Questions
Asked plainly, answered plainly
What if I lose my phone?
Sign in on another device you have added and remove the lost one. If every device is gone, Vault For Us brings it all back from the Recovery Kit you wrote on paper, after a 48-hour safety wait or sooner if family approves. Map For Us restores your identity, circles and safety numbers from a recovery code. Neither can be reset by us, and that is the point.
Can Aevoris see anything at all?
A little, and each product lists it in plain words. Vault For Us sees your name, email and plan, and the titles and dates of documents that power search and reminders, never what is inside them. Map For Us asks for no email, phone number or password, and every event it carries is the same 553 bytes. Contents, places, messages and passwords are sealed before they reach us.
What does “end-to-end” actually mean?
Your data is encrypted on your device, with keys that never leave your family’s devices. Servers store and forward sealed envelopes they cannot open.
What does it cost?
One price for the whole family, the same on both products: Pearl for two at US$2.99 (₹149) a month, Sapphire for four at US$5.99 (₹299), Diamond for eight at US$9.99 (₹499). Yearly and longer plans cost less. Monthly and yearly plans start with a 7-day free trial, once per family. Map For Us also has a Team plan for people in the field, from US$6 a seat; its plans go on sale once its apps are listed. Paying buys room for more people, never more privacy.
Does it work on my phone?
Vault For Us runs in your phone’s browser and adds to the home screen like an app. Map For Us is in testing: its web app runs at www.mapforus.com but new sign-ups are paused, and its iPhone and Android apps, with Wear OS, Apple Watch and Android Auto, are on their way to the stores.
Is it open to audit?
Not publicly, and we would rather say so than imply otherwise. Both product sites let you watch your own words get sealed in your browser before anything could leave it. The architecture documents, the test suites and the ledger of what has not been verified go to anyone who asks, and security reports are acknowledged within 24 hours.
Can I leave and take everything?
Yes. Vault For Us exports everything you stored, and if you stop paying, reading and downloading keep working with nothing deleted for 90 days. Map For Us exports any month as GPX or JSON, and you can delete your account from the app or the web. Leaving is a supported feature, not a loophole.
08 / Begin
Bring your family inside.
Vault For Us is open now, with a free trial. Map For Us is in testing, its phone apps on the way. Either way, what you add is sealed on your device before it leaves.
Product I · Live
Vault For Us
Papers, passwords, the family calendar and shared money. Seven days free.
Start free trialEvery feature →Product II · In testing
Map For Us
Live location, chat and SOS. New sign-ups are paused while we test; the phone apps are on the way.
Visit mapforus.comEvery feature →