Safe by limiting what the demo can do.
The current ProsperitySafe website is deliberately designed without accounts, payment processing or persistent estate-data storage.
What the demo does not collect
Do not submit passwords, banking credentials, wallet seed phrases, identity documents, wills, authorization videos, death certificates or sensitive legal records. Dashboard and admin data are fictional and reset locally.
Future production controls
Before sensitive features launch, ProsperitySafe would require threat modelling, Canadian privacy and legal review, strong authentication, least-privilege authorization, encryption, private file storage, malware scanning, append-only auditing, retention controls, backups, incident response and two-person approval for irreversible actions.
Responsible reporting
If you believe the public demo has a security issue, email hello@prosperitysafe.com with a clear description. Do not include real customer data or exploit the issue beyond what is needed to describe it.