New capability Coming to the beta

Write down where everything is, while you can still correct it.

The list an estate attorney asks every client for — which institutions you deal with, what each one is for, who to call — and almost nobody finishes. Prepare drafts it from your own mail, you confirm it, and it becomes a signed Personal Record you can hand to a spouse, an executor or an attorney.

Your own accounts · it only reads · never a password or a full account number

The problem

Everyone means to make the list. Almost nobody finishes it.

Every estate-planning checklist asks for the same thing: each bank, insurer, pension, utility and online account, what it is for, and who to call about it. It is tedious to write from memory, it is out of date a month later, and the one person who could answer the questions is the one who won’t be there when they’re asked.

Your mailbox already holds most of it. The statements, renewal notices and sign-in alerts are a draft of that list — it only needs someone who knows which of them matter, and what they are for.

The account the bills come out of A pension from an old job The life policy Where the password manager is The accountant’s number
How it works

Your mail drafts it. You finish it.

Prepare runs the same sweep as Settle, over your own mailboxes, and then hands the result to the one person who can say whether it is right.

01

Pick your mailboxes

Prepare reads the accounts you already protect with Haven — the current address, the work one, the old one that still gets the utility bill. An institution that writes to two of them appears once, with both.

02

Sweep

The same nine categories as Settle, run on this computer in the background. A Prepare sweep only reads: it adds no findings and doesn’t touch your security score.

03

Confirm and add

Everything starts as a draft. Confirm what’s right, say in a line what each account is for and who to call, and add what the mail can’t show.

04

Save, and run it again

Save a signed Personal Record to this computer or to your own Google Drive or OneDrive. Next year, run it again: your notes carry over and the record says what changed.

What you add

No model can write what an account is for.

So every row has room for you. At the top of the register is a count — how many institutions, how many confirmed, how many without a note — not a score, just where to spend ten minutes.

Confirm

You’ve looked, and it’s right. The record marks it Confirmed with the date. Everything else prints as a Draft, so a half-finished record is still honest about which half.

What it’s for

One line in your own words: “Joint checking — the mortgage comes out of here.” Never sent to Haven or to any model.

Who to call

Starts with the contact the mail showed. Replace it with the branch, the agent, the person who actually knows.

Add by hand

The pension from before email, the safe deposit box, the policy that only arrives by post — marked in the record as added by you.

File it differently

Recategorize, rename, or mark a sender as not an account — the same corrections as Settle, kept through every re-run.

What changed since

A list like this is stale within a year. Run it again and the new record says what’s new, what’s gone quiet, and what the mail no longer shows.

The rule the record is built on

A map, not a key.

A Personal Record lists where things are, never how to get into them. That is what lets it sit in a drawer, or in your Drive, without becoming the thing that gets stolen.

No passwords

Write “in Bitwarden”, not what’s in it. Anything that looks like a password or a passcode is refused.

No full numbers

Account and card numbers stay partial, the way the mail printed them. A full number, or any unmasked run of nine digits, is refused.

No codes or phrases

PINs, alarm and door codes, recovery phrases and backup codes are refused too.

Nothing kept to compare

A refused line isn’t stored anywhere, not even to check against. You’re told why, and it’s gone.

Checked on your computer, before anything is saved. The same detectors the scanner uses for exposed credentials look at every line you type into the record. Phone numbers written as phone numbers are fine — “who to call” is mostly phone numbers.

The Personal Record

Written for whoever finds it.

A Word document, saved in its own folder with a signed manifest beside it. No account needed to read it, and none to check it.

  1. 01A note for whoever finds this. One page before anything else, for someone who has never heard of Haven: who made it and when, that it holds no passwords, that Confirmed rows were checked and Draft rows weren’t, and that the institutions should be contacted directly.
  2. 02What was searched, and how much is checked. The mailboxes, the categories, the dates, how many rows are confirmed, how many have no note — and what a sweep cannot see.
  3. 03What changed since last time. When there is an earlier record: what’s new, what has gone quiet, and what wasn’t found again.
  4. 04The register. One row per institution, grouped by category: what it’s for, who to call, when it last wrote, partial account numbers as found, and Confirmed or Draft.
  5. 05The exhibits. The messages behind each row, numbered. Full message text is off by default — a Personal Record is a map, not evidence.

Want to see it first? The product tour opens on Prepare with a sample record: two mailboxes, rows already confirmed and annotated, a pension added by hand, and what changed since last year. Open a row and try typing an account number into it. Nothing to install.

Checkable by anyone

Signed, so it can be trusted later.

The manifest saved beside the document holds a fingerprint of the record and of every message in it, signed on the computer that made it. Whoever opens it years from now can drop the folder on havenprotect.app/verify and see, in their own browser, that nothing has been altered. Nothing is uploaded to do it.

Somewhere findable

Save it where it will be found.

Save to this computer, or straight into a “Haven Records” folder in your own Google Drive or OneDrive. The whole folder goes — the manifest too — so the copy there can still be checked. It goes to your own storage, not to Haven.

On this computer

Your notes stay yours.

A sweep reads subject lines, senders and previews on your machine, then the full text of only the few messages the record quotes. To tell an insurer from a newsletter, Haven’s own private model is shown each sender’s name, a few subject lines and the closing lines of up to two of its messages, scrubbed first and never stored. What you type — notes, confirmations, rows you add — is never sent to Haven or to any model. Every request appears in the app’s Logging tab.

What it isn’t

Not a will. The list a will needs.

A Personal Record doesn’t say who inherits anything, isn’t legal advice, and doesn’t show whether an account is open or what it holds. It is the inventory your executor and your attorney will otherwise have to rebuild from scratch.

What it costs. Prepare is part of the Haven plan, not a one-off purchase — it is something you run, correct over a few sittings, and run again each year. It comes to beta members with the plan they already have. By our estimate, drafting that list by hand from a year or two of mail takes most of a working day; with Prepare, your sittings go on checking the rows it drafted, a minute or two each.
What it can’t do

The mail finds what emails you.

Paper statements, accounts that only ever telephone, and anything under an address you haven’t connected won’t come from the mail — add those by hand. Nothing in the record is confirmed with an institution, and it never claims to be complete: the first page says how much of it you have checked.

When the time comes, the people you leave it for may still use Settle on the mailbox itself. A Personal Record makes that job shorter, not unnecessary.

Coming to the beta

Make the list while you can correct it.

Prepare is coming to Haven beta members: pick your mailboxes, confirm what’s right, and save a Personal Record you can leave somewhere findable.

Your own accounts · it only reads · never a password or a full account number