Heimlane Vault, a French password manager, is built on a zero-knowledge architecture, meaning that all data is encrypted on the user’s device before being sent to the service. This ensures that even Heimlane itself cannot access users’ data. Unlike traditional password managers that rely on software access controls, Heimlane uses cryptographic compartmentalization, which allows each vault to be encrypted separately. This approach enhances security by limiting the exposure of any single data breach. The company has recently added features such as FIDO2 authentication, TOTP (Time-based One-Time Password), and emergency access. They are also preparing to launch device-trusted encryption by the end of the year, which will allow users to store encrypted data on trusted devices and regain access if they lose their phone. Heimlane Vault offers a free tool that helps users transition away from Google Authenticator, though this is not their main product. The tool is available both as a standalone application and integrated into the Heimlane Vault service. Free users can store an unlimited number of items without needing a credit card. The company follows a "Freemium" model, where the cost for users on the free plan remains low, and only when upgrading to a paid plan with advanced features is a credit card required. Their business model emphasizes privacy, with the company stating, "the less data we have on our customers, the better." They do not collect or analyze user data for commercial purposes. In early 2024, importing 1,775 items into Heimlane Vault took about 15 minutes. After rewriting their import engine in April, the process now handles items in batches of 100, significantly reducing the time to approximately 17 seconds (depending on the user’s machine speed). This improvement is due to the zero-knowledge principle, where all calculations are done locally before data is sent for storage. Professional users are increasingly requesting support for physical keys, which are often sold alongside subscriptions by partners. The upcoming device-trusted encryption will allow users to define trusted devices for accessing their data, ensuring security even if a device is lost or changed. This feature adds an extra layer of protection without replacing the master password, which remains the ultimate recovery key. Heimlane Vault allows users to export their data in a Bitwarden-compatible format, ensuring that they can move their information elsewhere without restrictions. This commitment to reversibility means that users are not locked into the service and can leave at any time. The company also offers flexible subscription models, including monthly options for both B2C and B2B customers. Heimlane is a European-based company with no entities outside the EU and is not reliant on any cloud provider. They are considering expanding hosting options to include the United Kingdom in the future, while ensuring that data from European users remains within the EU and is not replicated elsewhere. Their commercial agreements are governed by French law. Heimlane currently sells its B2B offerings through partners like Feeder, and the technical setup is locked to ensure that these sales are made through the partner network. However, their B2C offerings remain directly available to users. Free users are not treated as a mere showcase; they receive the same product, security, and infrastructure as professional users. The company has expanded its reach through Feeder’s presence in Morocco, Senegal, and the Middle East, including Dubai, as part of its international economic development. Despite these expansions, the company maintains its core principles, ensuring that data is stored in the region where the user's account is created and that all commercial agreements are governed by French law. Heimlane focuses on developing secure solutions in line with industry standards like ANSSI and OWASP, without seeking certifications like SecNumCloud at this time. As a young startup, they prioritize quality and sustainability over rapid growth, relying on their own funds and a carefully selected team of service providers.