How Gun Vault Protects Your Records

Gun Vault is an invite-only testing project for private firearm custody records. The goal is practical security: strong sign-in, encrypted record storage, limited support access, clear export controls, and predictable data retention.

Authentication

Accounts use email and password sign-in with Cloudflare Turnstile, IP-based rate limits, optional passkeys, and strongly recommended authenticator 2FA. Administrator accounts require 2FA before they can sign in.

Vault Encryption

Owner identification numbers, firearm records, photos, document metadata, and uploaded document data are encrypted at rest using AES-256-GCM. Each vault has its own encryption key with export and rotation controls. Account names and email addresses remain operational account metadata. The current Worker decrypts vault records for authenticated requests.

Current Architecture

Gun Vault is not a zero-knowledge or end-to-end encrypted service. Account keys are wrapped with server-side secret material, and the Worker decrypts records when answering an authenticated request. Routine support tools do not expose vault contents, but an operator or attacker with both production secrets and database access could technically decrypt them.

Support Limits

Support tickets are encrypted at rest and retained for 30 days after their latest activity. Staff cannot casually access vault contents, and sensitive customer-support actions require an 8-digit, single-use PIN with attempt limits.

Data Removal

Users can request secure erase from vault settings. Super administrators can flag an account for termination only with a 48-hour response window, an emailed notice, and an appeal path. After the applicable waiting period, vault records and associated sessions, tokens, history, account-linked support records, and audit data are removed; remaining account identifiers are randomized and the account is disabled. Standalone appeal tickets follow the separate 30-day support-ticket retention period.

Testing Status

Gun Vault is currently experimental and invite-only. Security is treated seriously, but users should keep independent backups of critical documents and should not treat the service as a sole legal record repository.