Live
FamilyTree App
A family-tree and heritage platform for people of Nordic descent. Built for B2B2C: heritage associations get dedicated society workspaces for their members and archives.
A family-tree and heritage platform that helps people of Nordic descent trace, document and share their family history, with dedicated workspaces for heritage associations and their archives.
Stack
How it works
AI boundary
Where AI is used
- In the build: AI-assisted development across web, mobile and desktop, directed and reviewed by a human lead
- Considered, not shipped: duplicate-person suggestions — human merges, never auto-merge
Where AI is excluded
- No generated ancestors or inferred relationships presented as fact
- Tree structure from explicit input, GEDCOM import and review
- Access from identity (Nordic eID), role and policy, not AI judgments
Guardrails
- Organisation-scoped queries and a central policy guard on every society read and write
- Multi-axis privacy guard in front of all family-graph reads
- AES-256-GCM at rest, separate personal and society vault keys
- Tamper-evident audit log retained for seven years
- GDPR Article 15 data export built in
What it demonstrates
- Interactive family-tree canvas with kinship-path navigation, person profiles and GEDCOM 7.0 import.
- Secure vault for family documents and photos, with family-aware sharing permissions.
- Society workspaces with a curated archive, collections, a community wall and an archival-review workflow.
- Web hardening: nonce-based CSP, HSTS preload, CSRF protection. Mozilla Observatory A+ (125/100). CSA STAR Level 1 self-assessment.
Notes
Role: founder. Product strategy, IP and trademark strategy (FI/EU/US/Middle East), grant funding and go-to-market. Hands-on technical lead, directing AI-assisted development across web, mobile and desktop.
The data model is graph-native, with one shared platform for personal and society use. Every society read and write goes through organisation-scoped queries and a central policy guard, so access depends on identity, role and policy rather than hardcoded rules.
Privacy is GDPR by design: files encrypted at rest with AES-256-GCM and separate keys for personal and society vaults, a multi-axis privacy guard in front of all family-graph reads, a tamper-evident audit log kept for seven years, and built-in GDPR Article 15 data export.
In genealogy, a confident wrong answer is worse than no answer. The product invests in evidence and review instead of generated relationships.