How your data is stored and protected
Storey is built to protect some of the most important information in your life. This page explains, in clear terms, where your data is stored, how it’s protected, and how we think about backups and retention.
Where your data is stored
We separate different types of data so each can be protected in the most appropriate way. This layered approach reduces risk and improves overall security.
Account and form data
Your account details, settings, contacts, and information entered into forms (such as Wills, LPAs, care plans, and funeral wishes) are stored on a dedicated UK-based server.
Photos, audio, and video
Images, video messages, voice recordings, and other media are stored securely using Amazon Web Services (AWS), with files delivered through Amazon CloudFront for speed and reliability.
All systems are continuously monitored and protected with modern security tooling, including network-level safeguards such as DDoS protection.
Encryption and data protection
We use strong encryption to protect sensitive information — both while it’s stored and when it’s moving between your device and our systems.
- Encryption at rest Sensitive documents and content — including sentiment letters, uploaded files, and generated documents — are encrypted using industry-standard AES-256.
- Encryption in transit Data is encrypted when sent between your browser or app and our servers, helping protect it from interception.
- Generated legal documents Wills, LPAs, Advance Care Plans, and Funeral Wishes created in Storey are encrypted in the same way as uploaded documents.
Backups and resilience
Data protection isn’t just about preventing unauthorised access — it’s also about ensuring your information isn’t lost.
- Regular backups Critical systems are backed up to reduce the risk of accidental loss or corruption.
- Secure infrastructure Our servers are actively managed and monitored 24/7, with multiple layers of protection in place.
Data retention and control
We believe your data belongs to you. We retain it only for as long as necessary to provide the service, comply with legal obligations, and keep your account functioning as expected.
You remain in control of your information and can manage or remove content from your account at any time.
Want to understand privacy too?
This page explains how your data is stored. Our Privacy page explains how your data is used — and just as importantly, how it isn’t.
