SORVA is built so your financial data stays private: your stored vault is encrypted on your device, kept only in encrypted form in Switzerland, and never sold or shared. When you run a plan, your inputs are processed in memory to compute your projection and are not stored.
They are easy to confuse, so here is each one on its own. Working with your numbers is not the same as keeping them.
Everything you save, your vault and your plans, is encrypted in your browser before it is uploaded, so we hold it only as ciphertext, stored in Switzerland. Alongside it we keep non-financial labels such as the plan type and engine version, and your account details (email, sign-in and subscription status) are handled in the ordinary way. In Sovereign mode, the only key that can open your saved data is yours.
Producing a projection means applying federal, cantonal and communal tax rules to your actual numbers, so the calculation runs on our servers rather than in your browser. Your inputs travel over an encrypted connection (TLS), stay in memory only for as long as the calculation takes, and are then discarded. They are never written to the database, so they are never added to what we keep, and our production logging is built around an allowlist so that request contents do not reach the logs. Where processing takes place is set out in our Privacy Policy.
Same strong encryption either way. The only difference is who can help you back in.
Strong client-side encryption with a recovery path you can opt into, so a forgotten password does not lock you out. In this mode SORVA can help you recover access.
Zero-knowledge for your stored vault and saved plans. The only key lives with you, behind your 24-word Recovery Kit. Not even SORVA can open them.
Your encrypted vault is stored in a data centre in Zurich, Switzerland.
Your data is never sold or shared, not with advisors, not with employers, not with anyone. Advisors who use SORVA manage only the clients they onboard themselves, with consent, and can never see your plan. We never read your financial data to build features or train models. When you run a plan, your inputs are processed in memory on our servers to compute your projection and are not stored there.
If you open your browser's developer tools while a plan is calculating, you will see your inputs sent over HTTPS to our calculation API. That is the in-memory computation described above. What you will not see is your vault synced or stored unencrypted: what we keep is encrypted before it is uploaded, and in Sovereign mode we hold no key that can open it.
Live in ZH, BS, BL, AG, LU, SO, SZ, ZG, BE, SG, TG, and GR. More cantons rolling out through 2026.