Red Folder keeps in one place the documents, contacts, passwords and instructions your loved ones will need if you fall seriously ill or die. It is based on the "red folder" checklist by Finanse Bardzo Osobiste, extended with Polish law checked on 4 October 2026: over 200 items in 17 categories, each with a short explanation of what to prepare and why.

• Folder owner: fills in the folder, chooses trusted people and what each of them sees. Logs in with a password and a code from an authenticator app (TOTP).
• Trusted person: sees only that the folder exists until their access request is opened. Logs in with a password and a code sent by e-mail.
• Administrator: creates accounts and folders, sees logins, notifications and backups, but not the contents of other people's folders.

• Documents (scans, files, letters): encrypted on the server with AES-256-GCM, each file with its own key. The server reads the text of scans (OCR, locally, no external services), so search finds e.g. a policy number. The key is kept outside the database and outside the backups.
• Safe (passwords, PINs, 2FA backup codes, wallet recovery phrases): encrypted in your browser (PBKDF2-SHA256 600 000 iterations, AES-256-GCM). The server, the administrator and the backups never see the content. The safe opens with your safe password, the recovery code from your envelope, or the code from a trusted person's envelope.

The printed folder (PDF) never contains passwords: on paper there is only a list of what exists and where the originals are.

1. A trusted person files a request and chooses the reason: incapacity or death.
2. You get an e-mail with a one-click "Decline" link, and a reminder every day.
3. If nobody declines within the delay set for that person (default 7 days), access opens automatically, read only, in the scope you set for that reason.
4. The safe opens only with the code from that person's envelope. Every view and download is recorded in the history.

Dead man's switch: every 30 days (adjustable) we ask you to confirm that everything is fine. Without a confirmation within the grace period (14 days), trusted people are notified and their requests start automatically. One click at any time stops everything.

Every night at 3:30 the database and encrypted files go into one archive with SHA-256 checksums (30 most recent kept); the administrator can download it. The history records who did what and when, including views by trusted people. Logins, second-factor attempts and e-mails sent have their own logs.

The app organises information; it is not legal advice and does not replace a will, a notarial power of attorney or an original document. What matters legally are the originals; the folder tells your loved ones where they are.