One vault.
Every key is yours.
Your life generates data everywhere — contacts, health, meals, receipts, gifts, tasks, reflections. The IronGlass vault gives it one home that belongs to you, and hands out access only when you say so, only as much as you say, only for as long as you say.
Curated Data Areas,
built on open standards.
The vault isn't a junk drawer. Records are organized into curated Data Areas, each stored in open, durable formats — health records as FHIR, contacts as JSContact, tasks and events as iCalendar — so your data outlives any one app, including ours.
- Contacts
- Health
- Nutrition
- Finances
- Possessions
- Gifts
- Prayer
- Tasks
- Events
- Reflections
Every record carries its provenance — where it came from, when, and whether a human or an AI wrote it — and your entire vault is exportable at any time. More areas (like documents) are on the roadmap.
Nothing sees your vault without a grant.
Apps, services, and AI assistants reach your data one way only: through a grant. Not policy language — an enforced mechanism, with an append-only audit log that records every access, including ours.
- 01
Explicit
Access starts with a consent screen you approve — never a checkbox buried in settings, never a default.
- 02
Scoped
A grant names exactly which areas of your vault it covers, down to individual fields. You can untick anything before approving.
- 03
Time-boxed & revocable
Grants expire, and you can revoke one at any moment — access is cut off in under a minute, and every access up to that moment is on the record.
- 04
Only ever narrows
An app can ask for less over time, never quietly more. Widening access always requires your fresh consent.
Talk to your vault — from the AI you already use.
"Tell Iggy I played tennis this morning." The Iggy connector lets AI assistants like Claude, ChatGPT, and Gemini read and write your vault under a grant you control — and nothing an AI writes is committed until you've reviewed it.
-
You review before it counts
AI-captured entries land in an inbox as pending records. You promote them, correct them, or discard them — your vault, your final word.
-
AI guesses are labeled
When an assistant estimates something — the calories in a meal, the total on a receipt — the record says so, permanently. You can always tell interpreted data from the source.
-
The important things stay app-only
No AI surface can create or widen a grant, or export your vault. High-stakes actions happen only where you're fully in control.
The hubs stand on the vault.
The eight IronGlass hubs — and any app you choose to trust — are applications over your vault, not owners of it. They see what their grant permits, and nothing else. This isn't a diagram of the future: the Portal and the vault already share contact data in production, in both directions, under exactly these rules.
Early access
The vault is formally the IronGlass Personal Data Exchange (PDX). It's live, in daily use, and currently invite-only while we finish hardening it for launch. If you'd like to be among the first in, we'd like to hear from you.
Request early access