Local boundary intact

Your account coordinates access. It never holds the key.

Boundveil keeps vault decryption on trusted devices while the control plane handles plans, device relationships, and exact-action approvals.

Vault secrets remain device-bound

Agent authority is explicit and scoped

Sensitive actions leave redacted receipts

Account recovery

Reset your password.

We’ll send a single-use link that lets you choose a new Boundveil account password.

Account recovery cannot reset or decrypt your local vault.

Account access manages plans and devices. It never replaces your local vault password.