One thing, done provably right

Why this exists

Every organisation shares credentials: the banking portal, the cloud root account, the accounting system, the client's staging server. And in most organisations those secrets live in the worst possible places, in chat threads, spreadsheets, and sticky notes, because the tools built for the job grew into sprawling identity platforms priced and shaped for enterprises with procurement departments.

We wanted something narrower and more honest: a vault that does exactly one job, where the vendor's inability to read your data is a mathematical property rather than a paragraph in a policy, where the team signs in with the company directory it already runs, and where the price does not require a budget meeting.

So we built it, and Keyvaci is that product.

What we believe

Claims should be checkable. "We cannot read your data" is only worth something if the design makes it true: client-side encryption, keys that never travel, countersigned identities, an audit log that cannot be edited. Our security page lists not just the strengths but the limits of the model, out loud.

Safety is never a paid tier. Every plan carries every security feature. We will not sell you a cheaper product that is deliberately less safe.

Your data is never hostage. A lapsed subscription makes your organisation read-only, never gone. You can always read and export what is yours, even while paying us nothing.

Small on purpose. No consumer app subsidising the roadmap, no upsell maze of modules. One product, kept small enough that its security properties can actually be reasoned about.

The company

Keyvaci is operated by XNOR Group Pte. Ltd., incorporated in Singapore, whose information security management system is certified to ISO/IEC 27001 (certificate and scope available on request). The product runs on AWS in the Asia-Pacific region, behind CloudFront and WAF, with every environment fully isolated. Our terms, privacy policy, and data processing addendum are published in full and versioned; agreements you accepted stay readable exactly as you accepted them.

The founder and chief executive of XNOR Group is Ethan Pham, who has spent more than twenty years delivering software for enterprise clients under ISO-governed process. Because a vault asks for more trust than most software, his background and the decisions it forced are set out on the founder page.

Questions, ideas, or a hard security question for the team? Write to us via the contact page; the people who answer are the people who built it.