Legacy Ledger: Public Transparency Record

An anonymised, public log of every decision we make on a deceased user's account.

When a platform has the power to memorialise, transfer, or delete someone's account after their death, families and the public need a way to verify the platform is using that power carefully. NexudeIT's answer is the public Legacy Ledger — an append-only, anonymised log of every Legacy Case we close. It lives at /legacy-ledger and updates within hours of each case decision.

What's in each entry

Each Ledger row contains only the minimum information needed to make our work auditable:

Case ID — the unique reference (e.g. LGC-2026-00427)
Type — Memorialise, Transfer, Data Export, Delete, or Reversal
Jurisdiction — the country and (where relevant) state of the deceased's last known residence
Decision date — the date the case was approved, denied, or reversed
Outcome category — approved, denied, fraud-confirmed, reversed, withdrawn, expired

What's deliberately not in the ledger

To protect the privacy of the deceased and of legitimate executors, the public ledger never includes any of the following:

The deceased's name, username, email, or account ID
The requester's name or contact details
Document contents — death certificates, court orders, IDs are all redacted
Specific financial values — escrow amounts, payouts, store revenue are not disclosed
The contents of any messages or User Content of the deceased

The full unredacted audit log is retained internally for seven years and is accessible only to NexudeIT admins with a logged reason-string. Admin access to the unredacted log is itself audited.

Why it matters

The Legacy Ledger is modelled on the Certificate Transparency logs that the TLS ecosystem uses to make it hard for certificate authorities to misissue certificates quietly. The same principle: if every decision is public (even anonymised), patterns of misbehaviour become visible. Families who suspect something has gone wrong with a loved one's case can look at the Ledger and see if it's recorded. Journalists can look at the aggregate distribution — how many Transfer cases per year, how many denied, how many reversed, by jurisdiction — and call us out if anything looks off.

If you spot an anomaly

If you're browsing the Ledger and something looks wrong — for example, multiple Memorialise cases against what you believe is the same account, or a Transfer decision in a jurisdiction the deceased never lived in — please email [email protected] with the case ID and what concerns you. Our Trust & Safety team will respond within one business day. Reports made in good faith are protected; bad-faith reports against legitimate executors will themselves be treated as Terms violations.