TKJ Legal Vault
Terms of Use
Last updated: 15 August 2026
Please read these Terms of Use ("Terms") carefully before using the TKJ Legal Vault service ("Service") operated by TKJ GLOBAL MEDIA LTD, a company registered in England and Wales with company number 08272919 ("Company", "we", "us"). The Service comprises the TKJ Legal Vault web application and, when released, our mobile and desktop applications ("Apps").
By registering for, accessing, or using the Service, you agree to be bound by these Terms. If you are using the Service on behalf of a law firm or other organisation (your "Firm"), you confirm you are authorised to bind that Firm, and "you" includes the Firm. If you do not agree, do not use the Service.
1. The Service
TKJ Legal Vault is a zero-knowledge, end-to-end encrypted document vault: documents, filenames and filing structures are encrypted on your device before transmission, and we hold only ciphertext. The Service includes encrypted storage (Vault Boxes), encrypted share links, tamper-evident audit logs, chain-of-custody certificates, firm-controlled key escrow, and API/webhook integrations.
The Service is a document storage and integrity tool for professional use. It is not legal advice, and using it does not discharge your or your Firm's own professional, regulatory or ethical obligations (including under the SRA Standards and Regulations or equivalent rules in your jurisdiction).
2. Licence
We grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Service for your Firm's internal business purposes, and — when Apps are released — to download, install and use the Apps on devices you own or control, strictly in accordance with these Terms.
3. Restrictions
You shall not: copy, modify, or distribute the Service or Apps or create derivative works; reverse engineer, decompile, or disassemble the Service or Apps, except to the extent such restriction is prohibited by applicable law; rent, lease, lend, sell, resell, or sublicense access; use the Service for any unlawful purpose, or to store or share material that is unlawful for you to hold; circumvent, probe, or test security or access controls without our prior written consent; use automated scripts or scraping tools other than through the documented API with a valid API key; misuse rate-limited endpoints or interfere with the operation of the Service; impersonate any person, or misrepresent your affiliation or authority to act for a Firm; or remove or alter proprietary notices.
4. Accounts, Passphrases and Zero-Knowledge Acknowledgements
You must provide accurate, complete registration information and keep it current. You must be at least 18 years old; the Service is offered for business use only.
Your passphrase is the key — literally. Your encryption keys are derived from your passphrase on your device. We never receive your passphrase and we cannot reset it or recover your documents if it is lost. This is a deliberate security property of the Service, not a support limitation.
You acknowledge that: (a) the only recovery route for a lost passphrase is your Firm's escrow recovery, performed by your Firm's administrators using the Firm's emergency recovery passphrase — an offline secret that we also never hold; (b) if both your passphrase and your Firm's emergency recovery passphrase are lost, your encrypted documents are permanently unrecoverable by anyone, including us; (c) your Firm's authorised administrators can, by design, recover the contents of vaults belonging to the Firm's users through escrow recovery, and every such recovery is recorded in the audit log; and (d) we cannot access, read, produce, or restore the plaintext of your documents in response to any request, because we do not possess the keys.
You are responsible for the confidentiality of your passphrase, session, API keys and devices, and for all activity under your account. Notify us immediately of suspected unauthorised access. Your Firm is responsible for who it appoints as administrators and for the custody of its emergency recovery passphrase.
Share links contain the decryption key after the # symbol; anyone who obtains a complete link can decrypt the shared document. You are responsible for transmitting links securely and for setting appropriate expiry and download limits. Revoking a link prevents future downloads; it cannot recall a document from someone who has already retrieved it.
5. Plans, Fees and Billing
Current plans (per seat, excluding VAT): Solo / Specialist — £29/seat/month billed annually (£35 monthly); Practice — £49/seat/month, minimum 3 seats; Dedicated / Compliance Plus — custom, typically £89+/seat/month. A free 14-day trial may be offered. Prices and plan features may change; changes take effect from your next billing period after reasonable notice.
Subscriptions purchased on our website are billed by us (card or invoice), renew automatically until cancelled, and may be cancelled with effect from the end of the current billing period.
App-store purchases (when Apps are released): purchases or subscriptions made through the Apple App Store or Google Play are billed by Apple or Google to your store account, renew automatically unless cancelled at least 24 hours before the end of the current period, and are managed and cancelled in your device's store settings. Refunds for store purchases are handled exclusively by Apple or Google under their policies; we cannot process them directly.
We may suspend Service access for unpaid fees after notice. Suspension does not delete your encrypted data during the retention period stated in our Privacy Policy.
6. Your Content
You and your Firm retain all rights in documents and data you store in the Service. Nothing in these Terms transfers ownership of Content to us.
You grant us only the licence strictly necessary to operate the Service: to store, transmit, and make available encrypted Content to you and those you authorise, and to process the unencrypted operational metadata described in our Privacy Policy (such as ciphertext sizes, timestamps, and audit events). Because Content is end-to-end encrypted, we cannot read it, and we take no licence to view, analyse, or distribute its plaintext.
You are responsible for your Content, including having the right to store and share it, and for compliance with professional obligations attaching to it (privilege, confidentiality, data protection, retention). Because we cannot inspect Content, we cannot and do not moderate it; we may nonetheless suspend accounts or remove ciphertext where required by law or where use of the Service violates these Terms.
7. Intellectual Property
The Service, Apps, and all associated software, designs, and documentation are owned by the Company or its licensors and protected by intellectual property laws. "TKJ Legal Vault" and associated branding may not be used without our prior written consent. Feedback you provide may be used by us without restriction or obligation.
8. Privacy
Our Privacy Policy, available at /privacy, explains what limited information we process — account details, encrypted envelopes, operational metadata, and audit events including IP addresses — and your rights. By using the Service you acknowledge that processing. Audit logs are retained as described there and shared with your Firm's administrators by design.
9. Third-Party Services
The Service uses third-party infrastructure (including S3-compatible object storage such as Cloudflare R2, located per your Firm's selected data residency) to store ciphertext only. Integrations you enable (API keys, webhooks) send data to systems you control or choose; webhook payloads contain event metadata only. We are not responsible for third-party services' content, terms, or privacy practices.
10. Disclaimers
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF HARMFUL COMPONENTS.
Pilot notice: the Service's cryptography has not yet been independently audited. During any period identified as a pilot or beta, you should not store live client matter files.
Audit logs and chain-of-custody certificates are technical integrity records generated from the Service's hash chain; they are not legal conclusions, and their evidential weight in any proceeding is a matter for the relevant tribunal.
Nothing in these Terms excludes or limits any warranty or right that cannot be excluded or limited under applicable law.
11. Limitation of Liability
Nothing in these Terms excludes or limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be excluded or limited under the law of England and Wales.
Subject to the above: (a) we shall not be liable for any indirect or consequential loss, loss of profits, loss of business, or loss of data (save for our obligation to preserve ciphertext with reasonable care); (b) we shall not be liable for loss of access to Content resulting from lost passphrases or lost Firm emergency recovery passphrases (see section 4); and (c) our total aggregate liability arising out of or in connection with the Service shall not exceed the fees paid by your Firm for the Service in the 12 months preceding the event giving rise to the claim.
12. Indemnity
You will indemnify and hold the Company harmless from third-party claims, damages, and reasonable expenses arising from your Content, your use of the Service in breach of these Terms, or your infringement of third-party rights — except to the extent caused by our breach of these Terms.
13. Suspension and Termination
We may suspend or terminate your access immediately, with notice where practicable, for material breach of these Terms, unlawful use, or risk to the Service or other users. You may terminate at any time by cancelling your subscription. On termination: your licence ends; you should export your documents before your account closes; and encrypted data is deleted in accordance with the retention terms in our Privacy Policy. Sections that by their nature survive (including 6, 7, 10–12 and 16) survive termination.
14. Changes to These Terms
We may update these Terms. We will give reasonable advance notice of material changes (by email, in-Service notice, or — for Apps — release notes), and the "Last updated" date will change. Continued use after the effective date constitutes acceptance; if you do not agree, stop using the Service and cancel before the change takes effect.
15. App Store Terms (applies when using Apps distributed via the stores)
Apple App Store. These Terms are between you and the Company, not Apple Inc. ("Apple"). Apple has no obligation to provide maintenance or support for the App and is not responsible for addressing any claims relating to the App, including product liability, regulatory, or IP claims. Apple and its subsidiaries are third-party beneficiaries of these Terms and may enforce them against you. In the event of conflict between these Terms and Apple's Media Services Terms, Apple's terms prevail for App Store distribution. You represent you are not in a country subject to a US Government embargo and are not on any US Government prohibited or restricted parties list.
Google Play. Google LLC is not a party to these Terms and has no responsibility for the App. Your use of Google Play is governed by Google Play's own terms of service.
16. Governing Law and Jurisdiction
These Terms, and any dispute or claim (including non-contractual disputes or claims) arising out of or in connection with them, are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction, except that we may seek injunctive relief in any competent jurisdiction to protect the Service or intellectual property.
17. General
If any provision is found unenforceable, the remainder continues in effect. These Terms (with the Privacy Policy and any order form) constitute the entire agreement regarding the Service. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them to an affiliate or in connection with a reorganisation or sale.
18. Contact
TKJ GLOBAL MEDIA LTD (Company No. 08272919, England and Wales). Registered office and contact email to be confirmed on publication.