VaultCopy Anchor Link

Vault is where your documents are kept in CAIRL. This guide explains what Vault holds today, how uploading and deleting work, what Vault does not do yet, and its current availability.

What Vault isCopy Anchor Link

Vault is the CAIRL capability for a person's protected documents, media, and saved logins; today it holds documents. It belongs to the Custody Domain, which safeguards identity assets in CAIRL and controls access to them. Its name is Vault, written as an ordinary word without a prefix.

Vault has three surfaces: Documents, Media, and Credentials. The app calls the Media surface Images, and Credentials is the surface for Saved Logins, an offering of Vault. Only Documents is available today. Images and Saved Logins are described below under what Vault does not do yet.

What you can storeCopy Anchor Link

Vault stores files you upload. The upload chooser offers two groups of document types: identity documents, such as a passport, driver's license, birth certificate, or naturalization certificate, and healthcare documents, such as a health insurance card, a vaccination record, or a medical record.

Each of these document types accepts JPEG, PNG, WebP, and PDF files. Identity document types accept files up to 10 MB each. Most healthcare document types have the same limit, and some accept larger files.

Identity Point includes 1 GB of storage. That allowance is shared: documents kept in Vault and messages kept in MailGap count against the same meter. When the allowance is reached, Vault refuses new uploads.

How uploading worksCopy Anchor Link

Sign in, open Vault, and choose Upload. Select the document type. Some document types ask for the front and back of the document, and some identity document types also ask for a selfie.

Your browser sends each file directly to CAIRL's storage through a short-lived upload address. CAIRL then records the document in your Vault, but only after checking the stored file's type and size against the limits for that document type.

If a document type records an expiration date, Vault marks the document as expiring soon within 30 days of that date and as expired after it.

Viewing and downloading documentsCopy Anchor Link

Your documents appear grouped by category in a grid or a list, and you can sort them by date, name, certification, or status. Each document's page shows recent access to it; routine views by you are hidden.

You can download the original file you uploaded. Each document also carries a verification code: A-0 means the file is stored, A-I means the document itself has been verified, and A-II means it has also been linked to your verified identity. A document at A-II can also be downloaded as a sealed PDF copy that carries a certification page.

Asking CAIRL to verify a document uses a certification credit from your account. This page does not describe how credits are allocated or priced. What a verification result can support is described in the Identity Verification guide.

Deleting a documentCopy Anchor Link

Deleting a document removes it from your Vault immediately. Activity and audit records are preserved, and a retention job purges the stored files no sooner than 30 days after deletion. Deletion cannot be undone from Vault, and a document cannot be deleted while CAIRL is verifying it.

What Vault does not do yetCopy Anchor Link

• Sharing: Vault does not yet offer a way to share a stored document with another person or service.
• Saved Logins: the Vault offering for keeping usernames and passwords for other sites is not yet available. It is offered through the Credentials surface, which is not shown in the app on accounts that cannot use it.
• Images: CAIRL Images, the media surface of Vault, is not yet available. Images is not shown in the app on accounts that cannot use it, and if its page is reached, it says that Images is not available on this account yet.

Current availabilityCopy Anchor Link

The Documents surface of Vault is available to signed-in CAIRL accounts. It is included with Identity Point, which a person can establish and maintain without charge. Saved Logins and CAIRL Images are not yet available, and this page sets no date for them.

Related resourcesCopy Anchor Link

• What CAIRL is: the five Domains, including Custody.
• Identity Verification: the evidence flow and what a result can support.
• How MailGap keeps inboxes separate: the MailGap guide. MailGap messages share the storage allowance with Vault.
• Vault product page
• Document certification product page