Family Legacy

Family Legacy is a page with an overview of your finances and your instructions, reachable only by people you named, only under conditions you set. It is available on Premium and Max, with up to 5 trusted contacts.

What a contact sees

• Aggregated assets and liabilities.
• Names of products and institutions: which bank, which broker, which insurer.
• Your notes and instructions, and contacts such as a notary or an insurance agent.

What a contact never sees

Passwords, PINs and access codes, account numbers, transaction details, uploaded documents. The page is a map of where things are, not a key to them.

Setting it up

1. Activate Family Legacy and write your notes. Notes are encrypted with AES-256-GCM using a key derived for your account.
2. Add a trusted contact by email. The contact receives a verification email and must confirm before they can ever request access.
3. Choose the access condition for each contact:
   • Manual approval: every request lands in your dashboard and you approve or refuse it.
   • After inactivity: access is granted automatically if you have been inactive in Assetli for longer than the number of days you set; if you are active, the request falls back to manual approval.
   • Immediate: access is granted as soon as the contact proves their email.
4. Optionally restrict access to a list of countries and block requests from data-centre or proxy addresses.

How a contact gets in

1. The contact opens the public request page and enters their email. A reCAPTCHA check runs first.
2. The email must be on your list and verified.
3. If you set a country restriction, the contact’s IP address is geolocated and checked.
4. A one-time magic link valid for 30 minutes goes to the contact’s email.
5. Depending on the access condition, the session opens immediately, after your approval, or after your inactivity period.
6. A session lasts 30 minutes by default. By default a contact can open the overview once per 24 hours; both are configurable. With manual approval the daily limit does not apply, because you decide each time.

Every request, approval, refusal and view is written to an access log you can see in the dashboard. You receive an email for every request and every automatic grant.

Emails involved

Activation confirmation to you; verification to each contact; the magic link to the contact; a request notice to you (manual approval); an approval or refusal notice to the contact; an information email to you when access was granted automatically.

Limits and deletion

Five contacts on Premium and Max, none on Free. Deleting your account removes the Family Legacy configuration, contacts and request history. Notes are decrypted only when the page is shown to an authorised contact.