# TrueVault

**Canonical:** https://apis.io/providers/truevault/  
**Website:** https://console.truevault.com/  
**APIs profiled:** 1

TrueVault provides developer infrastructure for storing and managing sensitive personal data in a compliant way. Its original product, TrueVault Safe, is a HIPAA-oriented REST API and secure datastore that lets applications create Vaults and store encrypted Documents, BLOBs, Users, and Schemas, with group-based access control (the Access Grid), full-text and geospatial Search, transactional Email/SMS messaging, password-reset flows, and scoped access tokens. Authentication is via API keys or user access tokens passed in an HTTP Basic header. TrueVault's newer Polaris product is privacy-compliance software that helps ecommerce brands comply with US state privacy laws, the GDPR, and the CCPA. TrueVault is a Y Combinator-backed company.

## Kin Score — 30.4 / 100 (thin)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 30.4).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 0.0 |
| Governance | 4.5 |
| Contract Governance | 4.5 |
| Operational Transparency | 18.4 |
| Developer Ergonomics | 54.8 |
| Commercial Clarity | 44.7 |
| Access Clarity | 44.7 |

## Agent readiness — 12.0 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **TrueVault Safe REST API** — TrueVault Safe is a REST API and secure datastore for sensitive personal data. Resources include Users, Groups (with policy-based Access Grid permissions), Vaults, BLOBs, Docume...

## MCP servers (1)

- **TrueVault MCP Server manifest (candidate)**

## Security (2)

- **Truevault Authentication** — apiKey/http · 2 schemes
- **Truevault Domain Security** — TLSv1.3 · HSTS · DMARC

## Tags

Company, Data Privacy, Security, Compliance, HIPAA, Data Storage, Encryption, Identity, Privacy, PII

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/truevault/). Scores are computed from the provider's own public artifacts under a published rubric.