01
Opens with your face
No password to remember, leak or share. Your face measurement stays on your Mac.
Your presence is the key.
Unlocked is not safe. Haven keeps checking it's still you.
See approval history and security alerts.
Mac App Store · 3-day free trial, then $4.99/month · cancel any time
02
Unlocked is not safe
Haven keeps checking it's still you. Step away with a file or photo open, or let a second person stay in view, and it is covered in about 2 seconds.
03
See history and alerts
Every approval is logged. If someone else tried, you see an alert with their picture.
APPROVED · YOUOpened Passport.pdf
ALERT · NOT YOUVault access refused · picture kept
ALERT · PROBABLY NOT YOUSomeone else at Bank statement.pdf
Email me High alerts
The evidential layer
An audit history of every action that mattered
Every decision a Haven product makes is written into a cryptographically bound record. Each entry is sealed against the one before it, so an entry cannot be altered or removed without breaking every entry that follows. The record does not have to be trusted; it can be checked.
Authorisations, refusals, tamper attempts, sessions that ended because the person walked away. Who, what, when. Where a refusal happened, the record holds an image of who was in front of the camera.
It answers the question that actually gets asked after something goes wrong: can you show me?
09:14:02
09:11:47
08:52:19
08:40:55
Illustration of a Haven evidence log. Entries are representative, not real records.
Why this, why now
Access was never the same as authority.
Every login method can now be stolen, faked or shared, and AI has made faking faces and voices cheap. A password tells you something got in. It doesn't tell you who.
Haven is built on a simple premise: prove the user, and keep the proof.
Continually verify the human, record every important action, and flag anything attempted without authority. Something you can count on. And a history log you can audit.
Products
One architecture, wherever the action happens
Each product uses the same two ideas, continually verify the human and keep the evidence, applied to a different place where something important gets authorised.
Haven Vault
On the App StoremacOS · iPhone and iPad coming soon
An encrypted vault for private files and photos. It opens with your face, covers it within seconds when you step away, and shows you if someone else tried.
Haven Desktop
AvailablemacOS · direct download
Protection for the whole Mac. Screens cover when you leave, protected folders lose read access, and the apps you choose stop taking input until you return.
Haven Enterprise
Contact usIntegration layer
Bind high-value actions in your own systems to a verified person, and give your compliance, risk and support teams a record they can produce to a customer, an auditor or a regulator.
Next: verification for digital asset transactions, checking the human behind a transfer rather than only the key.
Technology
A layer above: we are not a biometric company.
Biometrics are one input, not the product. Haven combines who you are, from on-device face recognition, with how you behave while you are there: whether you are still present, still paying attention, and whether anyone else has appeared. Together they decide, continuously, whether the person in front of the device is still the one who was let in.
What Haven really produces is the record. Every key action is logged with what was done, who did it, and how that person was verified, with the evidence attached. Anything that was attempted but not authorised is flagged as a risk, graded by how sure Haven is, and kept with a picture of who was there. You can go back at any time and see exactly what happened, and when.
The architecture sits above capture and uses the strongest signal available, so it improves as sensing improves and is never tied to one vendor's hardware. The binding of a verified person to a specific action, in a record that is tamper-evident by construction, is the part that is hard to copy.
Haven's protocol stack (Dual-Authenticated Settlement, Owner-Attributed Actions, Social-Gated Biometric Recovery, Blockchain Identity Anchor and Data-Less Continual Authentication) is the subject of provisional patent applications filed with the USPTO in April 2026.
Identity plus behaviour
Face recognition on the device, combined with presence and attention, checked for as long as access lasts.
What, who and how
Each key action records what was done, by whom, and how they were verified, with the evidence.
Risk flags
Anything attempted but not authorised is flagged, graded and kept with a picture of who was there.
Evidence by construction
Each entry is sealed against the last, so the record can be checked rather than trusted. Your face measurement never leaves your device.
Who it is for
The same proof, at three different scales
People with something private
Documents, photos and accounts that should only open for you, on the Mac you work on every day. Shared offices, coworking desks, hotel rooms, family laptops, with a record of anyone who sat down and tried.
Enterprises
When a customer disputes an action, the honest answer today is usually a log your own systems wrote about themselves. Haven lets you show who authorised it, that it was really them, and that the record has not been altered since: evidence you can put in front of a customer, an auditor or a regulator.
Their customers
Confidence that access to their account requires them to be present, and something to point at if it ever is not, rather than being told that because the password was correct, it must have been them.
Where the boundary is
We would rather you held us to what is true
Haven's products are presence-based access control, not anti-spoofing. A convincing image of an enrolled person can sometimes satisfy recognition. When Haven cannot see natural movement, it asks for a movement a still image cannot answer. That is a deterrent, not a defence against someone with your device and a good picture of you.
This is precisely why we build the evidential layer rather than selling the wall. A system that claims it cannot be tested is making a promise nobody can keep. A system that records what happened, in a form that can be checked afterwards, is making one we can.
Try it on your Mac today.
3 days free · Files and photos encrypted on your Mac · Face data never uploaded