Place a Section 29 or 35 notice

    Security & Compliance

    How your data is encrypted

    Different parts of your account use different encryption approaches, depending on who needs to access them and when.

    Structured vault entries

    Assets, debts, instructions and contact details are encrypted in your browser using a key derived from your vault passphrase, before they leave your device. We receive and store only the encrypted version. We cannot read them without your passphrase.

    Uploaded files

    Documents you upload to your vault are encrypted in your browser using the same key derived from your passphrase, before the encrypted data leaves your device. We receive and store only the encrypted form and cannot read them without your passphrase. If you explicitly share a document with a professional, a separate encrypted copy is created on our servers so the professional can access it.

    Practitioner matter data

    Matter references, client details and legal notice workflow data entered through the practitioner portal are protected in transit and stored in encrypted form on our servers. Practitioner accounts are separately authenticated and authorised.

    Payment data

    Payment information is handled by Paystack. We do not receive or store your card details. We hold only a payment reference, subscription status and the last four digits of your card where Paystack provides them.

    What this means

    Your passphrase stays on your device. We cannot read your encrypted vault entries or uploaded vault documents, and we cannot recover a lost passphrase.

    Documents you share with a professional are re-encrypted on our servers so the professional can access them. For any shared document, the service can decrypt it to deliver it. Keep your passphrase and account secure.

    Access and audit trail

    Key account activity is recorded, including logins, vault access, changes, sharing, access requests and consent events.

    The audit log is designed to make tampering detectable.

    POPIA and data rights

    When I Am Gone (Pty) Ltd is the responsible party under POPIA.

    You may request access to your personal information, ask for corrections, object to processing, or request deletion where the law allows it.

    If something goes wrong

    We monitor for unusual access, file integrity issues and audit concerns.

    We notify the Information Regulator and affected data subjects as soon as reasonably possible after discovery of a security compromise, in line with POPIA. Our internal target is 72 hours where the facts allow it.

    Important limits

    When I Am Gone is a registered Financial Services Provider (FSP No: 55699). It is not a law firm or estate planning professional.

    The vault and will tools are software tools only. They do not replace professional advice.

    Wills must still be printed, signed and witnessed in accordance with the Wills Act 7 of 1953 and strictly signed in accordance with your signing instructions.

    When I Am Gone

    Secure estate information vault for South Africans.

    When I Am Gone is a life-file and estate-readiness platform. It is not a law firm, financial adviser, estate administrator, executor service, probate service or insurer. The platform stores information you supply and helps you keep it organised; it does not provide legal, tax or financial advice.

    When I Am Gone (Pty) Ltd ("When I Am Gone") is a registered Financial Services Provider (FSP No: 55699) providing secure digital information storage and estate-readiness tools. When I Am Gone is not a law firm or estate planning professional. For personalised legal, tax or estate planning advice, consult a qualified attorney or fiduciary practitioner. Executors and beneficiaries are responsible for verifying information and obtaining professional advice before acting.

    Will documents created using When I Am Gone must be printed, reviewed, and signed in the presence of two competent witnesses as required by the Wills Act 7 of 1953. Electronic wills are not valid under South African law. When I Am Gone does not verify will validity, witness competency, or guarantee executor or Master of the High Court acceptance.

    When I Am Gone is the responsible party for processing your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and the Promotion of Access to Information Act 2 of 2000 (PAIA). We process data based on your consent and contract performance. Data categories collected include identity, contact, estate, and financial information. Consumer vault entries are browser-encrypted; some authorised sharing workflows use server-side envelope encryption so access can be scanned, granted and audited. The security of your own device and passphrase remains your responsibility. Data is held with our cloud and database providers under written POPIA processing terms. Retention: active accounts are retained while the account remains open. Deleted vault contents are removed from active storage. Limited regulatory, audit and transaction records may be retained where required by law, including FICA records kept for at least 5 years from the applicable trigger date.

    You have the right to access, correct, delete, or object to processing of your personal information. Contact our Information Officer at support@wheniamgone.co.za for data subject requests. We notify the Information Regulator and affected data subjects as soon as reasonably possible after discovery of a security compromise, in line with POPIA. Our internal target is 72 hours where the facts allow it. See our Privacy Policy for full details.

    © 2026 When I Am Gone (Pty) Ltd. All rights reserved. Registered in South Africa.

    When I Am Gone is a registered Financial Services Provider | FSP No: 55699 | Regulated by the FSCA

    Administrative vault services are non-FAIS. Insurance services, where live, are financial services and are provided under the relevant authorisation, disclosures and product-provider terms. The will wizard and estate vault are software tools, not FAIS products. Insurance cover products are not yet on sale. When insurance products are offered, any remuneration will be regulated under FAIS and disclosed before any transaction. CPA and ECTA cooling-off rights apply where the transaction qualifies. The FSP licence is held by When I Am Gone alone and is never re-presented under a partner brand.

    When I Am Gone