Vault splits every key across three regions with threshold signatures, so no single machine, person or jurisdiction can move your assets alone — and recovery does not need a ritual.