Frank's family's Secure Guide, assembled entry by entry — the critical details of how a family's information is organized and accessed. In real life this document lives inside the Vault; this fictional version exists so you can see the finished product before you build your own.
All details are fictional and illustrative. 29 of 29 Module sections so far — the guides grow as the walkthrough continues. Companion volume: the example Family Guide.
…and fifteen more rows — the family iPad, the smart TV, both consoles, the camera system, the mesh router, the forgotten Kindle and fitness tracker, and each family phone. If it connects or stores, it has a row.
Both — a paper FIRM Binder in the home office plus a digital FIRM Directory (encrypted volume) on Frank-Laptop. Standard four-Area shape in each.
The FIRM Binder / Directory
Container
Where it lives
How it is protected
FIRM Binder (paper)
Home office; four Area tabs
Home-office locked cabinet; irreplaceable originals in the fire safe
FIRM Directory (digital)
FrankSecure volume on Frank-Laptop; four Area folders
Third-party encryption (VeraCrypt); the key lives in the password manager
Module Checklist (excerpt — the interesting rows)
Module
In Use?
If not in the FIRM Binder/Directory, where it lives
S-01 Devices
✓
A-08 Pet Information and Care
✓
A convenience copy of the care sheet is also posted inside the pantry door for the sitter
F-05 Other Assets
N/A
No significant assets beyond accounts yet — revisit at annual review
E-08 Entities
N/A
No business entities
The other twenty-five rows are checked with the location blank — their information lives in the FIRM Binder/Directory, in its Area's tab or folder.
Year_DocumentType_Name (e.g., 2026_Insurance_HomePolicy). Exception: downloaded statements keep the provider's own date format.
Fire safe, home office (paper originals); safe-deposit box at Westvale Savings (deed, titles); the encrypted volume on Frank-Laptop — the digital half of The Secure Guide itself. Its password lives in the password manager under Vaults → FrankSecure, never on paper.
VeraCrypt container for the digital half; BitLocker and FileVault on the laptops that carry it (see the Encryption entry).
Birth certificates, passports, the will — fire safe. House deed and vehicle titles — safe-deposit box at Westvale Savings.
Tax records seven years, then archive. Statements one year, digital only. Manuals discarded — linked online instead.
Superseded versions move to an _Archive folder inside their Area directory, filename suffixed _old-YYYY.
2026-01 annual review — structure walked, backups opened, and Sarah confirmed her emergency access still reaches the volume without Frank's help.
FrankNet (primary) + FrankNet-Guest — three-node home mesh
Fiber to the home, 1 Gbps
Westvale Fiber ONT in the utility closet; LatticeMesh, three nodes — main node in the upstairs office, satellites in the living room and garage. Firmware auto-update enabled.
The LatticeMesh app, signed in as the household account under Frank's email — plus a local admin page at http://192.168.0.1. That vendor account is the key to the network: its login and the admin password live in the password manager under Network → Router Admin, and Sarah's emergency access covers them.
FrankNet (WPA3): family laptops and phones only. FrankNet-Guest: visitors plus every smart device — doorbell, thermostat, speaker, smart TV, both consoles. Both passwords in the password manager.
Westvale Fiber; account under Frank's email. Support number in this entry and on the utility card in the binder; account login in the password manager.
See the Devices inventory (S-01) — each row carries a network placement (primary / guest). Devices are named in the router (Frank-Laptop, Lily-Phone…) so strangers stand out; the monthly audit reconciles the router list against the inventory.
Router-level NorthTunnel VPN profile for outbound traffic; filtering DNS on the kids' devices. Profiles stored in FrankSecure/System/Network.
network_config_backup.bin plus a hand-drawn network diagram — FrankSecure/System/Network/
Default deny on incoming ports; UPnP disabled; email alert when a new device joins. Three unidentified devices blocked 2026-02 — still unclaimed.
2026-04 monthly audit (ten minutes: router list vs. inventory, firmware confirmed current)
VeraCrypt — encrypted container files; manual mount, no auto-mount
Open VeraCrypt → Select File → choose the container (e.g., FrankSecure) → Mount → enter the passphrase from the password manager (Vaults → the container's name). It appears as a new drive; dismount when finished. Same steps on Windows and Mac. A printed copy of these steps: FrankSecure → Estate → unlock-family-archive.pdf — walked through with Sarah 2026-01
Installer for the exact version on FireSafe-SSD → Tools (kept beside the printed instructions); current versions from the project's official site. The containers' own backups are recorded in Backup and Synchronize, not here
Password manager → Vaults → one entry per container (FrankSecure; Family Archive)
Yes — printed passphrase copies, sealed envelopes in the fire safe; Sarah and the estate attorney know they exist
None — recovery copies exist
Passphrases reviewed at the January walk
2026-01 — a container opened from its backup copy on Sarah's MacBook, proving both the method and a second machine can
Encryption; secure-guide; family-guide; System
Entry 2 — BitLocker (built into Windows)
BitLocker — full-disk encryption on Frank-Laptop; BitLocker To Go on FireSafe-SSD
Normally invisible — the laptop unlocks itself at login. If Windows demands a recovery key at boot, or a drive is moved to another computer: type the 48-digit key from the password manager (Devices → the machine's name → Recovery Key). FireSafe-SSD: plug in, enter its password when prompted
None needed — built into Windows; any Windows machine that supports BitLocker can open the drives
Password manager → Devices → per machine (recovery keys)
Yes — the password-manager entries
None — a recovery method exists
Confirmed enabled at each quarterly device audit
2026-04 quarterly audit
Encryption; secure-guide; family-guide; System
Entry 3 — FileVault (built into macOS)
FileVault — full-disk encryption on Sarah-MacBook
Invisible in normal use — the Mac unlocks at login. If locked out: sign in with Sarah's account, or use the recovery key from the password manager (Devices → Sarah-MacBook → FileVault Recovery Key)
None needed — built into macOS
Password manager → Devices → Sarah-MacBook
Yes — the password-manager entry
None — a recovery method exists
Confirmed enabled at each quarterly device audit
2026-04 quarterly audit
Encryption; secure-guide; family-guide; System
Default device encryption on the family phones rides the Devices inventory — the phones' own rows note it. Which files use which method is marked on the files' entries in their own Modules; this section only ever answers “how does that method open.”
FrankFamily Bitwarden Account — its master password is The Vault Key
Password manager (reputable, open standards; holds passwords and passkeys)
Every credential in the household — logins, passkeys, backup codes, container keys. It is also the map of what exists.
Sarah's emergency access — a built-in feature of the password manager; the service runs the request-and-grant process, so it works whether Frank is gone or just locked out. Tested, not just configured. Beyond that: the sealed written copy in the fire safe.
Printed and sealed with the written master-password copy, fire safe
n/a — see the two hardware-key entries; both are registered to the manager
The written recovery copy: yes — sealed envelope, fire safe
Do not reset accounts one by one. Start with emergency access: Sarah requests it through the password manager and the service walks her through. Only if that fails: the sealed envelope.
2026-03 semi-annual review — emergency access exercised end to end
Passwords and Passkeys; secure-guide; family-guide; System
Entry 2 — Hardware key, primary
Hardware key — primary (Frank's keychain)
Hardware security key (USB-C + NFC; touch to confirm)
Second factor on the highest-value accounts: primary email, the password manager, the main bank
The backup hardware key (Entry 3). Two services offer no backup codes — losing both keys loses that access, which is why both keys are registered everywhere.
Per account, in the password manager → Security folder
Recorded on the card sealed with the recovery materials
Yes — Frank's keychain
If lost: sign in with the backup key, remove the lost key from every account the same day, order a replacement
2026-03 semi-annual review
Passwords and Passkeys; secure-guide; family-guide; System
Entry 3 — Hardware key, backup
Hardware key — backup (fire safe)
Hardware security key (same model as primary)
Registered on every account the primary is — kept for recovery, not daily use. Heirs: this is the key you will use.
NONE beyond this pair on two services — recorded deliberately
Per account, in the password manager → Security folder
Recorded on the card sealed with the recovery materials
Yes — fire safe, in the recovery envelope
Used when the primary is lost, or by whoever administers the estate — with the password manager open first, so you know which accounts expect it
2026-03 — tested on the primary email account
Passwords and Passkeys; secure-guide; family-guide; System
Entry 4 — Passkeys, master list
Passkeys — master list
Passkey inventory (the map, not a device)
Tracks which accounts are passkey-enabled, which device holds each passkey, and whether it is synced through the manager or bound to one device
Legacy passwords stay in the manager until each passkey is proven on two devices
Per account, in the password manager
n/a
No — passkeys live on the devices; this list lives in the manager
Lost device: synced passkeys restore with the manager; device-bound ones re-enroll from the second device on the list
2026-03 semi-annual review — two new passkey-enabled accounts added
Passwords and Passkeys; secure-guide; family-guide; System
SafeHarbor Sync — zero-knowledge, so files are encrypted before they leave the device and the service cannot read them (this arrangement: the Vault's offsite copy)
The FrankSecure encrypted container — the digital half of The Secure Guide
Frank-Laptop (the only editor); restorable to any device with the container tool installed
Yes — double-wrapped: the container's own encryption inside SafeHarbor. Account login in the password manager, highest authentication tier.
The container tool (see the Encryption entry); key in the password manager
Automatic, continuous
Entry 2 — the external drive in the fire safe
The container is edited on one device only. If a conflicted copy ever appears, the laptop version wins and the cause gets investigated before anything is deleted.
FrankSecure/System/restore-procedure.md — clean device, install the tools, sign in to the cloud account, download, open with the container passphrase
2026-01 — container opened from the cloud copy on Sarah's MacBook
Backup and Synchronize; secure-guide; family-guide; System
Entry 2 — The offline copy
Windows File History (built into the OS) — this arrangement: the offline copy to FireSafe-SSD, encrypted, in the fire safe
Frank-Laptop's full documents folder, including the container; a yearly archive folder that is never overwritten
Frank-Laptop; the drive lives in the fire safe and is connected only during backups — the disconnected copy nothing automated can reach
No — this is the offline half of 3-2-1
BitLocker To Go, full-drive; recovery key in the password manager
Weekly when connected; quarterly manual verify
Fire safe, home office
n/a — one-way backup; archives accumulate, never replace
Connect to any machine, unlock with the recovery key, restore with the OS tool; prior years live in the archive folders
2026-04 quarterly — drive unlocked, one file spot-restored
Backup and Synchronize; secure-guide; family-guide; System
Entry 3 — The orientation copy
A SafeHarbor shared folder — deliberately link-readable (this arrangement: the orientation copy)
The Family Guide as PDF, plus README-FIRST.txt explaining the system and the restore order
Readable from anywhere; shared with Sarah and the executor
Yes — and unencrypted by design: it must open on the worst day, and it contains orientation only, no credentials
None — by design (everything sensitive is in Entries 1 and 2)
Re-exported whenever the binder version changes
The printed binder itself, home office
The binder is authoritative; the PDF is re-exported from it
This is where recovery starts: read the README first — it walks through restoring everything in order
2026-01 — Sarah opened the folder from her own account
Backup and Synchronize; secure-guide; family-guide; System
A fourth entry covers the password manager's annual encrypted export — sealed with the recovery materials in the fire safe (see the Passwords and Passkeys entries).
Shared family document (both parents can edit); the current version prints to the At-Home tab of the household binder
Frank and Sarah jointly — Frank keeps the printed copy current
Shared layer: the whole household. Private layer: Frank and Sarah only; Sarah knows the envelope exists and where it sits
Annual, on a calendar reminder — revisited alongside the January backup test
Private Letters and Heirs-First Material
Document
Recipient
Occasion
Location in Vault
Date Written
Last Reviewed
Letter to Lily (sealed envelope)
Lily
The night before she leaves for college
Fire safe, home office — envelope marked with her name and the occasion
2026-06
—
— next: one for Jacob —
The log sat empty for months by choice — Frank's margin note read “Private letters or 'read later' material will come later — when we're ready.” The Secure Guide is not required to start this module. Then, after a Sunday dinner where college came up for the first time, the letter to Lily wrote itself in one sitting. Logged by reference; the letter lives sealed in the Vault. Not every occasion is 'after I'm gone' — this one opens in about a year.
Family History
Sarah's Ancestry account; scanned photographs and her grandmother's research notes in the FIRM Directory → At-Home → Family Compass → Family History
Password manager → Compass → Ancestry
Sarah — start with her before touching the tree
None yet
For the letter: Sarah hands it to Lily on the occasion, or earlier at her own judgment. For private notes: not applicable until they exist
Family Compass; secure-guide; family-guide; At-Home
Franklin A. “Frank” Mercer — no previous legal names
Driver's license (wallet; expires 2029) · Passport — EXPIRED 2024, renewal in progress · SSN card (was in an old tax folder; now in the fire safe)
frank.mercer@gmail.com — controls banking alerts, cloud storage, most subscriptions. Work email is employer-owned: nothing personal rides on it (see Work History Module)
fmercer@oldisp.net (from the 2000s) — “abandoned — inaccessible,” controlled nothing that still matters
Gmail recovery → Frank's phone + sarah.mercer@icloud.com; several services ride “Sign in with Google.” Mapped in one line: lose the Gmail, lose the ride-alongs
Fire safe, home office (originals); scans in the Vault
Passport renewal in progress — flagged week one
2026-01 annual review
Identities; secure-guide; family-guide; At-Home
Entry 2 — Sarah
Sarah E. Mercer — maiden name Keller; two financial accounts still carry it
Driver's license (expires 2027) · Passport (renewal came due this spring — caught early because the expiration was on file)
sarah.mercer@icloud.com — controls her phone backups, photos, and the client-facing side of her business
smercer.backup@gmail.com — rarely checked, flagged in week three: it was the recovery address for the iCloud account. Now forwarding to her primary and checked monthly
iCloud recovery → smercer.backup@gmail.com (once neglected, now monitored) + her phone number
Fire safe, home office
None open
2026-01 annual review
Identities; secure-guide; family-guide; At-Home
Entry 3 — Lily (17)
Lillian “Lily” Mercer
Birth certificate + SSN card (were in the “Important Docs” folder no one had opened in years; now in the fire safe) · State ID (expires at 18 — license upgrade pending)
lily.mercer@icloud.com — tied to her phone, her photos, her social accounts, and the college-application portals
Two outgrown usernames from middle school — recovery attempted, then marked “abandoned — inaccessible”
iCloud recovery → Sarah's iCloud (family setup) until 18; revisit at the transition conversation
Fire safe, home office
At 18: license upgrade, account ownership conversation — what stays in the family system is her call
2026-01 annual review
Identities; secure-guide; family-guide; At-Home
Entry 4 — Jacob (15)
Jacob T. Mercer
Birth certificate + SSN card (fire safe) · No state ID yet — flagged, not urgent
jacob.m@westvale-schools.org (district-issued) — it quietly controls his testing and college-planning accounts, which surprised everyone at the kitchen table
jacob.mercer@gmail.com (gaming — active, low stakes) · One account he'd forgotten entirely — found in week three, marked “abandoned — inaccessible”
School email recovers to Frank's Gmail; gaming email recovers to the school email — a two-link chain nobody had ever drawn
Fire safe, home office
State ID when eligible; school email is district-owned — plan the migration before graduation
2026-01 annual review
Identities; secure-guide; family-guide; At-Home
Six months later the record paid for itself twice: Lily's college applications needed her birth certificate and SSN card — found in under two minutes — and Sarah's passport renewal was flagged before it could become an airport problem.
Auto — cancellation requires an in-person visit (noted!)
No
Costco
Sarah — iCloud
Annual
March, auto
Household card — yes
Calm (meditation app)
Sarah — iCloud
Annual
CANCELED 2026-05 — unused since January
—
Discord Nitro + game season pass (Jacob)
Jacob — gaming Gmail, Frank's card
Monthly
Auto — revisit when Jacob pays his own way
No
Canva (Lily)
Lily — iCloud
Monthly
Auto — student rate
No
…and fourteen more rows, including the yoga studio (canceled — it had charged for a year past Sarah's “I'm sure I canceled that”), the meal kit (canceled at the first quarterly review when the price quietly rose 20%), and Lily's language app (canceled three months after she stopped using it — the $45 lesson that now opens the family's quarterly review).
Row in full — Netflix
Netflix
Frank — his Gmail (see the Identities entry; the address lives there)
Paid — family plan, monthly
15th of the month, auto — charges the blue Visa
None — email login only
All four profiles: Frank, Sarah, Lily, Jacob
Research needed — likely just canceled; the profiles' watch lists are the only thing of value
Account settings page — no call needed
Before this account ever closes: save the Family Movie Night list and each profile's watch history
Subscriptions and Memberships; secure-guide; family-guide; At-Home
Row in full — Professional engineering association
State Society of Professional Engineers (Frank's PE association)
Frank — work email (flagged: employer-owned address; migrate before any job change)
Paid — annual dues
September — auto-renew turned OFF at the week-four review; decision now made annually, on purpose
PE-20841
—
No — dies with the member. The PE certifications it maintains are the real value; their dependency on active membership is noted in Work History
Lapses on non-payment; 60-day grace period
“Last meeting attended: unknown.” Reviewed honestly each September — kept this year for the certification, not the newsletter
Subscriptions and Memberships; secure-guide; family-guide; At-Home
Loyalty and free memberships (held for value, not cost)
Balance flagged “potentially valuable — check before booking season.” Strong unique password set the day the balance crossed six figures; on the quarterly drained-balance check
Both on the quarterly check; redemption preference noted (travel, never merchandise)
Free / annual; the day-to-day details live in the Family Guide — this row just keeps them from being forgotten
Six months in, the quarterly review has paid for itself: one price hike caught, two zombie subscriptions gone, and every “are we still paying for that?” now has a two-minute answer.
Personal accounts are reviewed by the digital executor before anything is deleted or memorialized. Photo and document archives transfer to the family before any closure. The freelance writing is preserved. And nothing is ever handled from a message: every account notice or access request during the estate is verified through the executor and this plan — never answered directly.
Sarah (primary — informal designation here; formal appointment on the estate-attorney agenda, see Estate Plan Module). Backup: Tom Mercer, Frank's brother — holds password-manager emergency access and can run the same playbook.
Per-Account Dispositions (excerpt)
Account / Service
Disposition
Timeline
Notes
Gmail (see Identities: Frank)
Transfer to Sarah, then delete
90-day review, archive, delete
The master key — the sunset plan below is this row in detail
Facebook profile
Memorialize
At death
Legacy contact designated: Sarah — can pin a post and manage the tribute page, cannot read messages
Streaming + subscriptions
Cancel
First month
Work straight down the Subscriptions catalog — renewal column names the card each one charges
mercerfamily.net (registered 15 years)
Transfer to Sarah — keep
Before first renewal
NameHarbor registrar — unlock steps and transfer-code procedure documented; the family website rides on it
Photo library
Archive + transfer
Within 90 days
Bulk export takes days at this size — start early; two copies per the Backup Module
Work email
Archive then close
Employer retention period
Employer-owned; nothing personal rides on it (kept that way on purpose — see Identities)
Money-valued digital assets
See the Digital Financial Assets Module
—
Documented and dispositioned there, not here — including the crypto position closed in 2026
(1) Sarah takes the Gmail through password-manager emergency access — not by guessing. (2) Review inbox for urgent matters: banking alerts, legal notices, medical bills. (3) Use the account to close connected services, working from the Subscriptions catalog. (4) Auto-responder on, brief and dated. (5) At 90 days: full archive via the platform's export tool, then permanent deletion.
Google Inactive Account Manager — Sarah, 3-month trigger, the backup path if emergency access fails (read the terms: it can't be faster than 3 months). Facebook Legacy Contact — Sarah (memorialization only; no message access). Bitwarden emergency access — Sarah, exercised end to end once already (see Passwords and Passkeys). Each transfers access through the platform's authenticated process — no one has to judge a convincing request.
mercerfamily.net (NameHarbor, personal-use — transfer procedure on file). The photo library (export tool named; days-long download warned). The freelance pieces (in cloud docs; sentimental first). Money-valued assets live in the Digital Financial Assets Module, not here — the closed crypto position is documented there.
Fire-safe drive + the encrypted cloud copy (see Backup and Synchronize)
Digital Legacy; secure-guide; family-guide; At-Home
A living document, not a monument: when the crypto position moved to the Digital Financial Assets Module's books, this table's row updated the same day. When Lily asked what happens to the family photos, the answer was a walk-through of the archive row — not a promise to figure it out someday.
401(k) with generous match · pension · life insurance at 2× salary · retiree health at 10 years of service. Benefits department 555-0158; HR contact Dana Whitfield ran his enrollment
Pension fully vested (5-year mark passed). Retiree health at 10 years — year 8 now, flagged for the 2028 review
—(the PE license predates this job; see Entry 2)
Offer letter, benefit elections, and annual statements — fire safe + scans in the Vault
Life insurance and pension survivor options elected at enrollment — the benefit summary in the fire safe is the claim's starting point
60% vested at departure — small monthly payment starting at 65. Benefit statement was missing: NEW STATEMENT REQUESTED 2026-02, now in the fire safe
PE license #38271 (state board) — personal, not employer-tied. Renewal every 2 years with CE credits; CE records in the Vault; formally CLOSE with the state board at death or the renewal fees never stop. Maintained through the professional association — see Subscriptions
Employment dates letter + the new pension statement — fire safe
This is the pension nobody would think to look for. It exists, it is real, and the administrator contact is one line up
2026-02
Work History; secure-guide; family-guide; At-Home
Entry 3 — Manufacturing firm (first job)
Beckett Manufacturing — Operations Analyst
2002 – 2008
Small 401(k), minimal match — ROLLED OVER at departure; now part of the current retirement account (see Financial Accounts). Nothing left waiting here
N/A — account closed by rollover
—
Workers' comp claim (minor injury, settled and closed) — dates, employer, and outcome documented in case it ever matters for medical or disability records
Nothing to claim — recorded so no one spends a week confirming that
2026-01
Work History; secure-guide; family-guide; At-Home
Entry 4 — Self-Employed: consulting
Self-Employed — operations consulting for small manufacturers
2018 – ongoing; 2–3 small projects a year
None — 1099 income (~$10–15k/yr), reported on Schedule C. No LLC, no formal structure (see the Entities Module for when side work becomes a business)
N/A
Works under the PE license — Entry 2
Client contracts in the At-Home folder; current client Brindle Tool & Die — contract filed 2026-03
If Frank is incapacitated or gone: notify the clients listed here that projects will not be completed. No ongoing obligations or deliverables — written down so nobody has to wonder
2026-03 — new client added
Work History; secure-guide; family-guide; At-Home
Education
Westvale State University — B.S., Industrial Engineering, 1998–2002 (Franklin A. Mercer)
Diploma original in the archival box (office closet); transcript + diploma scans in the Vault. Official verification: the Westvale State registrar
Dormant — noted in Identities as “abandoned — inaccessible,” nothing rides on it
One year in: Sarah has walked the survivor-benefits trail herself — where the summaries live, which administrators to call, what she'd be entitled to. The record Frank's mother never had is the one his own family now keeps current at every January review.
The family — one shared entry; Jacob's counseling is the only individual thread, noted in the providers table
Mental Health Providers
Name
Role
Phone
Notes
Karen Osei, LCSW
Jacob's counselor
555-0171
Weekly through spring, now as-needed. Full record: Health and Medical (Westvale Pediatrics referral)
Dr. Anita Rao
Referral path for the adults
555-0122
Family practice — the starting point if Frank or Sarah needs a name
Employee Assistance Program (EAP)
Employer / Plan
EAP Provider
Phone
Sessions Covered
Meridian Logistics
WorkLife Assist
555-0188
6 free sessions per person per year — confidential; covers household family members, teenagers included
Insurance — Mental Health Coverage
Carrier
Mental Health Line
In-Network Notes
Cornerstone Health
555-0150 (behavioral health)
Karen Osei is in-network; telehealth covered; no prior authorization for outpatient counseling
No regular congregation — Pastor Jim Hollis is a personal relationship (officiated our wedding; has known us fifteen years)
Pastor Jim Hollis
555-0126
—
If something serious happens to either of us, the other should feel free to call Jim — he knows us both. Involving him is support, not ceremony. Either of us can make that call; neither needs the other's permission.
None current. After Frank's father died, Frank used three of the EAP sessions — recorded here on purpose, so the kids can see that using them is a normal thing this family does.
Checking (the household hub — most autopays land here; see Budget)
Ending …4471 (full number in the entry)
Frank and Sarah Mercer — joint with right of survivorship
Password manager → Financial → Westvale Savings
The two savings accounts (emergency fund; the college fund overflow) are at the same bank — separate entries, same shape
Investment and Retirement — the almost-forgotten Roth
Summit Brokerage — 555-0137
Roth IRA
Ending …9083
Frank
No — opened 2009, funded sporadically, thought about never. This is the account that almost didn't make the list
Yes — Sarah (primary), the kids (contingent). Checked 2026-06; it still named only Sarah from 2009 — updated
Password manager → Financial → Summit Roth
The joint brokerage lives at Summit too (Elena manages it); Frank's 401(k) is at ClearPath Retirement via Meridian Logistics — includes the Beckett Manufacturing rollover (see Work History). Sarah's old 401(k) is still at Horizon Retirement from her Brightline Design years — rollover decision pending, documented so it can't be forgotten
Financial Advisors and Professional Contacts
Elena Vargas, CFP®
Financial planner — the person who sees the whole picture
Alder Wealth Planning
555-0146 (direct — the family's verified callback number)
evargas@alderwealth.example
The Summit joint brokerage + the annual whole-picture review; coordinates with Marcus Lee, CPA (Lee & Tran, 555-0153 — see Tax Planning)
Sarah met Elena in person 2026-06 — no more “an advisor somewhere.” First joint annual review on the calendar
Liabilities Summary
Westvale Savings (home mortgage) · Westvale Savings (rental mortgage — added 2026-06 when the Other Assets Module surfaced it) · Lakeview Auto Credit (car loan)
The house · the Cedar Court rental (see Other Assets) · Sarah's car
Both recorded in the entries
Credit cards (the blue Visa and one backup) paid monthly — no revolving balance. That sentence is here on purpose: it tells the executor to stop looking
Seven accounts, two advisors, two debts — the whole map fits on two pages, and the Roth proves why the first pass is about completeness, not detail.
History: exchange app (the sticky-note era) → hardware wallet with the phrase on two proper copies (Vault + fireproof document bag) → sold through the exchange, proceeds to the Summit joint brokerage (see Financial Accounts)
Exchange account also closed, 2026
—
Password-manager entry archived
Both written copies DESTROYED the week of the sale — an orphaned recovery phrase is a risk with no matching asset
Wiped; electronics drawer — it no longer guards anything (its row in the Devices inventory says the same)
This closed record stays on purpose: an executor who someday finds old exchange emails needs to know there is nothing to hunt
Domain Names
mercerfamily.net
NameHarbor
2027-03
Yes — the blue Visa (it's in the Subscriptions catalog)
Password manager → Financial → NameHarbor
Modest — fifteen years of age and clean history; not worth a paid appraisal, worth keeping
The family website
Transfer-to-Sarah procedure (unlock steps, transfer code) documented in Digital Legacy
Everything else — recorded as “none”
None — recorded 2026-01 so nobody wonders
None. Sarah's business site is a storefront for her services, not a revenue property — the business lives in Work History (and the Entities Module if it ever formalizes)
None active. Frank's freelance pieces earn nothing ongoing (noted in Digital Legacy as portfolio/sentimental); if the consulting materials ever become a licensable course, that's an Entities Module conversation first
The one rule survives the closed position: no one — exchange, attorney, executor, “support” — ever legitimately needs a recovery phrase spoken, typed, photographed, or messaged. The request is the attack, every time.
Spreadsheet — one tab per month, a summary tab Elena sees at the annual review
Plain spreadsheet — no connected budgeting app, on purpose (one less dependency)
FrankSecure → Financial → Budget
n/a — inside the encrypted volume (see Encryption)
Monthly — first Sunday, after the family check-in dinner
Frank; Sarah co-reviews since the three-weeks-abroad trip — the knowledge now lives in two heads
Cash-flow timing: Sarah's client payments arrive unevenly — the buffer in checking is deliberate. A low balance mid-month is normal; see the goals note before “fixing” it
The property-tax row exists because of the trip: it is the bill that isn't on autopay, and now the record says so in bold instead of living in Frank's head. The other six rows are the phone plan, streaming (can lapse — Subscriptions catalog), gym, and the kids' allowance transfers.
Financial Goals (Current — reviewed each January before the Elena meeting)
Goal
Timeframe
Notes
Retirement contributions maxed
Ongoing
Both 401(k)s + the Roth — first priority, before extra mortgage payments
Mortgage paid down early
Before Frank's 60th
THE WHY: we want the house free and clear before retirement — not because we lack investment options. Ask Elena before undoing this
College funds
Lily 2027, Jacob 2029
The Westvale Savings college fund draws monthly; the overflow rule is in the account's own entry
Frank, sole — retitling question on the estate-attorney agenda (Ruth Alvarez)
Safe-deposit box, Westvale Savings — moved 2026-06 from the filing cabinet nobody opened; it now sits with the house deed
~$180k (2026 appraisal on file)
Yes — ~$85k, Westvale Savings; its row was ADDED to the Financial Accounts liabilities summary when this module surfaced it
Stepped-up basis at the uncle's date of death (2021) — documentation in Tax Planning → 2021 folder. DO NOT SELL before consulting Marcus: the step-up matters
Self-managed — the tenant's and handyman's contacts on file here; the rental runs its own sheet in the Budget spreadsheet (rent in, mortgage out)
The primary residence has its own entry — deed in the same safe-deposit box
Precious Metals
None held as bullion — the coins below are a collection, not a metals position. Recorded so nobody searches
Collectibles and Personal Property of Value — the coin collection
Coins — Frank's grandfather's collection
Two albums + loose pieces, mostly early-1900s US
Itemized inventory attached to the appraisal
Fireproof safe, garage
2026-05 — first appraisal ever; “always assumed it had some value” is now a number
R. Whitcomb, certified numismatist — Westvale Coin & Estate, 555-0129
FrankSecure → Financial → Appraisals; paper copy with the coins
FLAGGED — above the homeowner's-policy cap; scheduled-property endorsement quote requested from Granite Mutual (see Insurance)
Which pieces go to which kid is written in the estate documents, not here — this entry is the money side
Private Investments
No business or investment interests — recorded 2026-06 so nobody wonders. One receivable: personal loan to Danny Mercer (Frank's cousin), $2,500 (2023), repaying $100/month — promissory note drafted 2026-06 on Ruth's advice; running ledger with the note. If the estate inherits it: collect gently or forgive — executor's judgment, written here so it's a decision, not a surprise
UNDER REVIEW — bought when Lily was born; no longer matches the mortgage or income. Review with Pete scheduled 2026-07
~$540
March, annual
Yes — joint checking (it's in the Budget obligations list)
Pete Sandoval — Sandoval Insurance Agency, 555-0184
FrankSecure → Financial → Insurance → BeaconTerm; paper original in the fire safe
Password manager → Financial → Beacon Life
Sarah (primary), the kids (contingent)
Confirmed as Sarah, 2026-06 — the thirty-second line, now on a calendar repeat
Beacon verifies beneficiary changes by mailed form + callback to the number on file — learned now, before it's needed
Policy Inventory — group life (employer)
Group term life — 2× salary
Cornerstone Life, via Meridian Logistics benefits
Group certificate on file
2× annual salary
Employer-paid
n/a
n/a
Meridian benefits department, 555-0158 (see Work History)
Certificate PDF in the Insurance folder
Via the benefits portal — Password manager → Financial → Meridian Benefits
Sarah
2026-06
Canceled at any change of employer — re-shop coverage before leaving; flagged in Work History too
Also in the inventory, one entry each: homeowners (Granite Mutual — the November annual premium in the Budget list), two autos (Granite Mutual), and the umbrella (Granite Mutual, stacked on the home/auto). All through Pete; all documents in the same folder pattern.
Scheduled Personal Property and Specialty Coverage
Item or Category
Carrier
Policy or Endorsement Number
Coverage Amount
Appraisal on File?
Notes
The coin collection
Granite Mutual
Endorsement pending — quote in hand
Per the 2026-05 appraisal (replacement value)
Yes — Other Assets
Flagged by the Other Assets Module: above the homeowner's cap. Binding this month; appraisal notes both replacement and fair-market figures
Cash Value Policies and Annuities
None — term coverage only, no whole life, no annuities. Recorded so nobody hunts; if that ever changes, it gets cross-referenced in Financial Accounts and the estate plan the same week
Everyone reports in to Ellen (the hub) — she relays
Mailbox cluster at the end of the street; if the street is closed, Westvale Library parking lot
Extended power outage
Text first — it gets through congestion that calls don't
Ellen as hub; the weather radio in the supply kit for inbound news
Home
Medical emergency
911, then Frank/Sarah cell
Ellen relays to the wider family so the hospital-side phone stays free
Westvale Regional Medical Center
Separation during travel
Cell + the shared location app
Ellen as hub
Pre-agreed per trip — written on the trip sheet before we leave
Ellen Hayes — Frank's sister, three hours north and outside anything that touches Westvale. 555-0142. If you can't reach each other, call Ellen: everyone reports in, she relays status. The kids know her number from memory — we drilled it the month after the evacuation.
Emergency Contacts — Immediate
Name
Relationship
Phone
Physical Address
Notes
Dr. Anita Rao
Primary care (adults)
555-0122
Westvale Family Practice, 40 Main Street
—
Dr. Maya Chen
Pediatric / teen care
555-0166
Westvale Pediatrics, 12 Elm Court
—
Local emergency services
—
911
—
Poison Control
—
1-800-222-1222
—
Westvale Power & Water
Outage line
555-0165
—
Also in the outage kit
Medical Emergency Information
Family Member
Known Allergies
Current Medications
Blood Type
Primary Physician
Frank
None known
2 daily — printed list behind the Family Guide medical page
O+
Dr. Anita Rao
Sarah
None known
None
A−
Dr. Anita Rao
Lily
None known
None
A+
Dr. Maya Chen
Jacob
PENICILLIN
None
B+
Dr. Maya Chen
This table is the sixty-second version for a first responder or an ER desk. Full records, portals, and insurance: the Health and Medical Module.
Continuity Contact List — Professionals and Trusted Individuals
Name
Role
Phone
Email
When to Contact
Ruth Alvarez
Estate attorney — Alvarez Law Office
555-0177
r.alvarez@alvarezlaw.example
Death or incapacity — first professional call; she holds executed copies of everything
Elena Vargas
Financial advisor — Alder Wealth
555-0146
e.vargas@alderwealth.example
Within the first week
Pete Sandoval
Insurance agent
555-0184
pete@sandovalins.example
Immediately for any claim; on a death, once Ruth has been called
Tom Mercer
Successor executor; backup password-manager access
555-0119
—
Immediately if both of us are involved
Marcus Lee
CPA — Lee & Tran
555-0153
—
The tax year following a death — Ruth or Elena will loop him in
Tom. During any Mercer family crisis, anything unexpected that arrives — a call about money, an invoice, an offer of help, a relative with questions — gets routed to Tom Mercer, 555-0119. He verifies before anyone acts. Decided in advance at the June family meeting, so nobody has to weigh it alone at 2 a.m.
Primary: Route 9 south to the interstate. Alternate: Miller Road east — the way we actually went when Route 9 closed. Local meeting point: Westvale Library parking lot. Extended evacuation: Ellen's, three hours north. The kids' school release forms name both of us plus Tom.
Household binder; her password-manager emergency access opens the digital copy
2026-06
Tom Mercer
Brother / successor executor + guardian
Physical
Updated copy handed over at the June family dinner
2026-06
Lily (17)
Daughter
Walked through — no copy held
Knows the binder shelf, and that Uncle Tom holds a copy
2026-06
Jacob (15)
Son
Age-appropriate version
Knows: binder in the office, call Aunt Ellen, ask Uncle Tom
2026-06
Key Professionals — Heir Introduction Status
Professional
Role
Has Met Heirs
Heirs Have Contact Info
Notes
Ruth Alvarez
Estate attorney
Sarah — yes; the kids know the name
Yes — first-calls page
Executor conversation with Tom on the fall-review agenda
Elena Vargas
Financial advisor
Sarah — yes; Lily once, at the office
Yes
—
Pete Sandoval
Insurance agent
No
Yes
The name on the page is enough for now
Tom Mercer
Successor executor / trustee
Family
Yes
Holds his own copy of the Family Guide
Marcus Lee
CPA
No
Yes
Ruth or Elena would loop him in
Family Meeting Record
Date
Participants
Topics Covered
Follow-Up Items
2026-01
Frank + Sarah
Annual review: accounts, insurance, the January structure walk
Horizon rollover decision; insurance review with Pete
2026-06
All four, plus Tom by phone
That the plan exists and where it lives; the first-calls order; the ten-minute verification drill — callback on a known number, the family code word, why a familiar voice isn't proof of identity
Lily asked for the college-accounts walkthrough next year; repeat the drill every June
Legacy Documents
Document
Recipient
Location
Date Written
Last Reviewed
Legacy letter (to Lily)
Lily
Sealed in the Vault — logged in the Family Compass Module's Private Letters log
2026-05
Opens at graduation, not “after” — on purpose
Letter of instruction
Whoever acts first
The Family Guide's own orientation page, signed and dated
Margaret Mercer — Frank's mother, 74, in her own home across town. (The Mercers' own documents live in the Estate Plan Module.)
Legal Authority Documents
Document
Designee
Location of Original
Attorney / Preparer
Date Executed
Last Reviewed
Healthcare Power of Attorney (Margaret)
Frank; alternate: Ellen Hayes
Margaret's fire box; copy in our fire safe
Ruth Alvarez
2026-02
2026-06
Advance Healthcare Directive (Margaret)
—
Same two places; on file with Westvale Family Practice
Ruth Alvarez
2026-02
2026-06
Durable Power of Attorney — Financial (Margaret)
Frank; alternate: Ellen Hayes
Same, plus Ruth holds an executed copy
Ruth Alvarez
2026-02
2026-06
POLST / MOLST
Not appropriate yet — Dr. Rao's call; revisit annually
—
—
—
2026-06
Long-Term Care Insurance
Policy
Insurer
Policy Number
Agent Contact
Benefit Trigger
Daily / Monthly Benefit
Elimination Period
Location of Policy
LTC (Margaret)
Northbridge Insurance
Ending …4471 (full number in the entry)
Serviced direct, 555-0168 — the original agent retired
Unable to perform 2 of 6 daily-living activities, physician-certified
$180/day
90 days
Margaret's fire box; scan in FrankSecure → Estate → Margaret
The 90-day elimination period means the family funds roughly the first three months of paid care before benefits start — that is what the reserve line in Margaret's budget is for. Learned from the policy, not assumed.
Primary Care and Specialist Contacts
Provider
Specialty
Practice / Facility
Phone
Patient Portal
Notes
Dr. Anita Rao
Primary care
Westvale Family Practice
555-0122
Portal — Frank is proxy since 2026-02
HIPAA releases for Frank and Ellen on file
Dr. Paul Egan
Cardiology
Westvale Cardiology Group
555-0183
—
Annual check — same practice that follows Frank
In Margaret's words, written together in February: stay in her own home with help as long as it is safe; if that changes, an assisted-living residence in Westvale near the family — not somewhere out of the area, however good. Keep the garden going as long as anyone can manage it. Hospital stays: yes to treatment, no to being kept from her family. The legally binding version is the advance directive; this is the plain-language one.
Caregiver and Support Network
Name
Relationship
Role
Phone
Notes
Frank
Son
Primary caregiver; holds both powers of attorney
Family Guide, first page
—
Ellen Hayes
Daughter
Backup / respite — stays a week each quarter
555-0142
Alternate on both POAs
Beth Keller
Sarah's sister, lives nearby
Tuesday check-ins; drives to appointments
555-0163
The extra set of eyes
Framed at Sunday dinner as how this family does things — not as anything about Mom: (1) Any request involving money, documents, or personal information — even one that sounds exactly like a grandchild — gets a callback to a number in the Family Guide before anything else. (2) Westvale Savings and Elena's office both carry trusted-contact designations naming Frank (set 2026-03) — they may call him if something looks wrong. (3) Any change to a power of attorney, directive, or beneficiary happens only through Ruth Alvarez, in person or on her known number. Late, remote, or urgent is exactly the pattern that waits for the callback.
One entry each — Frank's and Sarah's. Written in the same June conversation, so where the answers matched, the rows below show both; each entry stands on its own in the folder
Disposition Preferences
Decision
Preference
Notes
Burial, cremation, or alternative
Frank: cremation. Sarah: cremation
Decided together, June 2026
If burial: cemetery or location preference
n/a
—
If cremation: ashes preference
Frank: the lake at the state park — the family fishing spot. Sarah: with Frank's, same place, one trip
The kids know the spot
Pre-paid arrangement in place
No — reviewed and decided against for now
Recorded so nobody searches for a contract that doesn't exist; revisit at 60
Pre-Paid Arrangements
Provider
Service Covered
Policy / Contract Number
Contact
Document Location
None
—
—
—
This row is deliberate: any invoice or claim that a pre-paid plan exists does not match our records — route it to the executor
Memorial or Funeral Service Preferences
Element
Preference
Type of service
Simple service at Westvale Community Church, then a gathering with food and stories — informal on purpose (both of us)
Preferred location
Westvale Community Church; gathering at the house or the park pavilion
Officiant preference
Pastor Jim Hollis, if he is able — he married us
Music preferences
Sarah: the two hymns on the card in this folder. Frank: whatever the family wants, plus the one song Lily will recognize when she sees the name
Readings or speakers
Anyone who wants to — nobody obligated
Flowers or charitable donations
Donations to the Westvale Food Bank in lieu of flowers
Attendance preference
Public — the point is the people
Livestream or recording
Yes, if simple to arrange — Ellen's family is three hours out
Keep it short and warm. Include: the family; Westvale State, where we met — Frank in engineering, Sarah on the scholarship she never stopped repaying forward; the Meridian years and Sarah's design work; the church; the garden and the lake. Omit the street address and any birth date beyond the year — an obituary is public. A rough draft for each of us sits in this folder, dated.
One sealed page each, in the Vault — logged in the Family Compass Module's Private Letters log the same week we wrote them. Not instructions; just things we wanted said in our own hand.
Revisit at the fall review if the giving grows — recorded so the “no” is a decision, not a gap
Charitable Bequests — Estate Plan Integration
Organization
Legal Name
EIN
Contact
Bequest Type
Document Where Specified
First-Generation Scholarship Fund, Westvale State
Westvale State University Foundation
84-5550162
Foundation office, 555-0186
Specific bequest — $10,000 in each will
Wills, 2026-06 — Ruth confirmed the legal name and EIN against the IRS Tax Exempt Organization Search
Beneficiary Designations — Charitable
Asset
Named Charity
EIN
Percentage / Amount
Document Location
None
—
—
—
Reviewed 2026-06 with the beneficiary coordination pass (see Estate Plan)
Year-end receipts and acknowledgment letters: FrankSecure → Financial → Taxes → Giving, one folder per year. Marcus Lee gets the folder every February. Retention follows the tax schedule — see Tax Planning and Documentation.
Holds the house outside probate; grows as assets retitle
Primary residence (deed recorded 2026-07); Summit joint brokerage — retitle in progress with Elena
Our state
None while we're living — reports under our SSNs; gets an EIN at the first death (Ruth's memo in the folder explains)
2026-06
Original at Alvarez Law Office; certified copy in the fire safe; scan in FrankSecure → Estate → Trust
Grantors and trustees: Frank and Sarah, jointly — either can act alone. Successor trustee: Tom Mercer, under Article 6 — he holds a copy and has read it. Assets: the house (retitled 2026-07); the Summit joint brokerage (retitle FLAGGED until Summit's confirmation letter lands). Registered agent: n/a for a trust. Filings: none while revocable — it is a grantor trust, reported on our 1040s (Marcus Lee confirmed). Executor note: this trust is also documented in the Estate Plan Module as an estate instrument. Same trust, both places, on purpose.
Business and Entity Tax Records
Entity
Tax Return Type
Years Retained
Storage Location
CPA Contact
Mercer Family Revocable Living Trust
None while revocable — grantor trust, on our 1040s
n/a
Trust papers: FrankSecure → Estate → Trust
Marcus Lee, Lee & Tran — 555-0153
Sarah's design business (sole proprietorship)
Schedule C with our joint 1040
7 years, with the returns
Tax archive; invoices and contracts in her business folder
Marcus Lee
Intellectual Property Inventory (entity-owned)
Item
Type
Status
Income-Generating
Registration / Protection
Notes
None — the trust holds no IP
—
—
—
—
Sarah's contract templates and brand library are hers personally (documented with her business records) — they would move INTO an entity deliberately if the business incorporates: the fall-agenda question. mercerfamily.net is personal — Digital Financial Assets
The open questions, on the fall agenda with Ruth Alvarez: an LLC for the Cedar Court rental (the retitling flag in Other Assets) and whether Sarah's business should incorporate. Recorded as questions so they can't evaporate — whether something needs a structure is Ruth's call; whether it is documented is ours.
Original at Alvarez Law; certified copy in the fire safe
Tom Mercer (successor trustee — has read it)
2026-06
Durable Power of Attorney — Financial (each of us → the other)
2026-06
Ruth Alvarez
Fire safe
Ruth Alvarez
2026-06
Healthcare Power of Attorney (Frank → Sarah)
2023 — reviewed 2026-06
Ruth Alvarez
Fire safe
Sarah + Ruth Alvarez
2026-06
Healthcare Power of Attorney (Sarah → Frank)
2026-06 — new; the review caught that only Frank had one
Ruth Alvarez
Fire safe
Frank + Ruth Alvarez
2026-06
Advance directives / living wills — Frank (2023), Sarah (2026-06, same catch)
2023 / 2026-06
Ruth Alvarez
Fire safe; on file with Westvale Family Practice
Ruth Alvarez
2026-06
Guardianship designation (the kids)
In the wills, 2026-06
Ruth Alvarez
With the wills
Tom knows; Beth Keller (alternate) knows — both said yes first
2026-06
Personal property memorandum
2026-06
Written by us, in Ruth's format
With the wills, fire safe
—
The coin collection's which-pieces-to-which-kid answer lives here (see Other Assets)
Estate Professionals
Name
Role
Firm
Phone
Email
Last Contact
Ruth Alvarez
Estate attorney
Alvarez Law Office
555-0177
r.alvarez@alvarezlaw.example
2026-06 — signing
Elena Vargas
Financial advisor
Alder Wealth
555-0146
e.vargas@alderwealth.example
2026-06 — beneficiary pass
Marcus Lee
CPA
Lee & Tran
555-0153
—
2026-02 — filing season
Corporate trustee
None — Tom Mercer serves
—
—
—
Revisit only if the trust ever outgrows the family
Named Roles — Estate Plan
Role
Name
Contact
Document Where Named
Executor
Sarah (Frank's will) / Frank (Sarah's will)
—
Wills
Successor Executor
Tom Mercer
555-0119
Wills
Trustee
Frank + Sarah, jointly
—
Trust
Successor Trustee
Tom Mercer
555-0119
Trust
Power of Attorney (Financial)
Each other; successor: Tom
—
DPOAs
Healthcare Proxy
Each other
—
HCPOAs
Guardian (the kids)
Tom Mercer; alternate: Beth Keller
555-0119 / 555-0163
Wills
Digital Executor
Sarah; backup: Tom
—
Wills, 2026-06 — the informal designation from Digital Legacy, now formal. That Module's agenda item, closed
Beneficiary Designations — Coordination Review
Account / Policy
Institution
Current Beneficiary
Contingent Beneficiary
Last Reviewed
Aligned with Trust / Will
401(k) — Frank
ClearPath Retirement
Sarah
The kids
2026-06
Yes
Term life — Frank
Beacon Life
Sarah
The kids (added 2026-06 — the policy had named only Sarah since 2009)
2026-06
Yes
Group life — Frank, via Meridian
Cornerstone Life
Sarah
—
2026-06
Yes
Old 401(k) — Sarah
Horizon Retirement
UPDATE FILED — still showed Sarah's parents from her Brightline years; change to Frank filed 2026-06
Frank
2026-06
Pending — chase the confirmation letter in July
Roth IRA — Frank
Summit Brokerage
Sarah
The kids
2026-06
Yes
Ruth's standing memo: with the trust in place, revisit naming it as the contingent beneficiary for the kids' shares at the fall review — minors can't receive these accounts directly. And the review rhythm is the audit: a designation that doesn't match the plan is either an oversight or a change nobody authorized, and this table catches both.
Trust Inventory — Estate Instruments
Trust Name
Type
Purpose
Key Assets
Trustee
Successor Trustee
Document Location
Mercer Family Revocable Living Trust
Revocable
Pass the house — and, once retitled, the brokerage — outside probate
House; brokerage retitle in progress
Frank + Sarah
Tom Mercer
Original at Alvarez Law; copy in the fire safe
Same trust as the Entities Module — there as an operating structure, here as an estate instrument, both on purpose. No special-needs or pet trust: Cooper's care is a designated-caregiver arrangement with Tom, not a trust — see Pet Information and Care.
Charitable Bequests
Organization
Legal Name
EIN
Bequest Type
Amount / Percentage
Document Where Specified
First-Generation Scholarship Fund, Westvale State
Westvale State University Foundation
84-5550162
Specific bequest
$10,000 in each will
Wills, 2026-06 — see the Philanthropy Module
No gift-tax returns to date — the giving stays under the annual exclusion, and Marcus confirms that each February. Trust document scans: FrankSecure → Estate → Trust. Charitable receipts: the Giving folder in the tax archive. See Tax Planning and Documentation for the retention schedule.