TripZILLA Vault
TripZILLA Vault is a secure storage system designed to protect highly sensitive client data. It adds an additional layer of encryption on top of TripZILLA’s standard security measures, ensuring that confidential information remains private, even in the unlikely event of a database breach.
What is TripZILLA Vault?
TripZILLA Vault is a company-wide secure storage space shared by all agents within your organization. It is specifically built for handling sensitive data that requires stronger protection than standard trip or client information.
At the moment, TripZILLA Vault supports storing:
Passport details
Planned future expansions include:
Encrypted document storage
Secure form data
Payment and credit card details
Additional sensitive client information
How TripZILLA Vault works (high-level)
TripZILLA Vault uses end-to-end encryption based on a public and private key system:
Each company has its own unique encryption key pair
The public key is stored securely in TripZILLA’s systems
The private key is never stored in plain form and is protected per agent
Per-agent security
Within TripZILLA Vault, each agent has:
Their own Vault password
A wrapped version of the company’s private key, encrypted specifically for them
This means:
Only authorized agents can decrypt Vault data
TripZILLA cannot access the encrypted contents
Data remains protected even if infrastructure is compromised
Encryption model
TripZILLA Vault uses modern, industry-standard cryptography:
RSA for public and private key encryption
AES-GCM for encrypting sensitive data
Key derivation using RFC 2898 (PBKDF2) with 600,000 iterations
This combination ensures:
Strong protection against brute-force attacks
Secure key handling per agent
Confidentiality and integrity of stored data
Recovery and access
When setting up TripZILLA Vault, each agent receives:
A Vault password chosen by the agent
A set of recovery codes, downloadable as a PDF
These are critical for accessing data stored in TripZILLA Vault.
Important
If you lose both your Vault password and recovery codes,
TripZILLA cannot recover your access to TripZILLA Vault or its data
This is by design. Since TripZILLA does not have access to your private keys, the data cannot be decrypted under any circumstances.
Why TripZILLA Vault exists
While TripZILLA already applies strong security practices across the platform, certain types of data require an even higher level of protection.
Examples include:
Passport information
Personally identifiable information
Financial or identity documents
TripZILLA Vault ensures that:
Sensitive data is encrypted before it is stored
Only your company can access it
Even TripZILLA itself cannot view the contents
This approach helps meet enterprise security expectations and supports compliance with regulations such as those in the European Union regarding personal data protection.
Summary
TripZILLA Vault provides:
End-to-end encryption for sensitive client data
Company-level key ownership
Per-agent secure access
Zero access by TripZILLA to Vault contents
It is designed to give you full control and peace of mind when handling your clients’ most sensitive information.
For more information on how TripZILLA processes and stores data, please refer to our Data Processing Agreement: https://tripzilla.io/dpa