Your serial numbers
are nobody's business but yours.
Gun Vault is built on a simple premise: firearm records belong to the owner, not the platform. No ATF reporting. No data sales. No silent sharing with manufacturers, insurance companies, or anyone else. Ever.
TLS 1.3 in transit
Not connected to ATF
No lock-in, ever
Built by US owners
Who we do not share with
How your data is actually protected
Specifics, not buzzwords. Here's the stack keeping your vault private, and the trade-offs each piece makes.
AES-256 At Rest
Every record in our database is encrypted at rest using AES-256-GCM. Firearm details, photos, stories, tax stamps, and trust documents alike. Keys are rotated and managed in a separate key vault.
TLS 1.3 In Transit
Every connection between your browser and Gun Vault uses TLS 1.3. No request ever travels in plaintext. HSTS is enforced at the edge so downgrade attacks can't talk the browser into weaker crypto.
bcrypt Password Hashing
Your password is hashed with bcrypt before it ever touches storage. Industry standard, one-way, salted. Even our own team can't read your password. If we're breached, your login is still useless to an attacker.
JWT Session Tokens
Sessions use short-lived JWT tokens signed with a per-installation secret. No session IDs sitting in a shared database. Revoking access is instant, and nothing is stored on the device you can't wipe yourself.
Isolated Document Storage
Tax stamps, bills of sale, and trust PDFs live in an encrypted object store separate from your core database. Signed, short-lived URLs for access. No public buckets, no hotlinkable attachments.
US-Based Infrastructure
All servers, backups, and document storage are hosted in US data centers. No data is replicated outside US jurisdiction. Your records don't get backed up to a server farm in another country.
Who can see your vault
A short, honest accounting. The default answer for most rows is "no" — but where the answer is "yes" or "limited," you should know the exact conditions.
"What about subpoenas?"
An honest, unvarnished answer. Gun Vault is a US company subject to US law, and we're not going to pretend otherwise.
The honest answer
If Gun Vault receives a valid, specific, court-issued subpoena directed at a named account, we comply with the law like every other US company. We don't pretend we're above the law.
But we defend you within the law. We do not respond to informal requests, fishing expeditions, overly broad warrants, or agency letters. We challenge defective process. We require specificity — your name, the records sought, the legal basis. We will not hand over a full vault dump because a letter arrived on government letterhead.
We will also notify you that your records were requested, unless we are explicitly barred from doing so by the court (a gag order). When we are barred, we work to lift the gag as soon as legally possible so you can be informed after the fact.
What you can do, anytime
No customer service ticket required. No waiting period. These controls live in your account settings.
Export Everything
Download your entire vault as CSV, PDF, or ZIP (photos + documents included). At any time, on any plan, including Free.
Delete Your Account
Self-service account deletion. Your data is wiped from our systems within 30 days, including backups. No "we'll keep it forever just in case" clause.
Revoke Executor Access
Remove or change your designated executors any time. The moment you revoke, their credentials stop working. No waiting period.
See What's On File
A "What We Know About You" summary lives in your account settings. It lists every field we store, including IP addresses from recent logins.
If the worst happens, you hear it from us first
If Gun Vault experiences a data breach, we will notify affected users within 72 hours of confirmation. No legal-team delays, no "still investigating" silence for months. A real breach, a real notification, with what happened and what records were affected. This is a commitment above what US law requires.
Security FAQ
The questions gun owners ask before they upload their first serial number.
Is Gun Vault a federal firearms registry?
Can the government force you to turn over user data?
Where is my data physically stored?
Does Gun Vault use my data to train AI or machine learning?
What if Gun Vault gets acquired or goes out of business?
How do you verify an executor after I die?
Do you use third-party analytics or tracking?
Is two-factor authentication available?
Can I audit what you've stored about me?
Your records, your rules.
Free to start. Free to leave. Free to know exactly what we store, who can see it, and what we will never do with it. That's the whole promise.
Your Account Unlocks All 5
The Complete Platform
One login. Access every Gun Transfer America platform. Free to start.
Free private sale estimates. Know your value before you list, trade, or transfer.
Value My Gun →
Run your serial number against private stolen gun registries. GunClear Certificate proves it’s clean. $10.
Check Serial # →
Free to list. In-state private sales. Background-checked transfers for $50 when your buyer is found.
List My Gun →
Background check, official bill of sale & lifetime digital records. Legal in most states. Flat $50 — no surprises.
Transfer a Gun →
Secure records, photos, history & succession planning for every firearm you own. Protect your collection. Free to start.
Open My Vault →The complete platform for gun owners.
