The identifiers, the accounts, the credentials map, the breach history, the recovery routes — the layer that proves you are you to every other layer.
How to Build One Personal Records File That Survives Every Future Institution
The institutions do not share a file — the hospital, the employer, the scheme, the tax body, the insurer, the court, and the bank each hold their own copy, none talks to the others, and each decides on its own copy alone. Here is the master file that reconciles them, survives you, and is the thing you hand to a next reader when you cannot speak. Your file does not beat theirs — it is the only thing that can see all of their copies at once, and the contradiction between them is the tell that one of them is wrong.
General information only — not legal advice, not medical advice, not financial or tax advice, and not a substitute for any institution's authoritative record. This page explains the shape of building one reconciling, surviving master file — the institutions-do-not-share-a-file reframe, the yours-versus-theirs split, the seven-layer anatomy, the survive-you sequence, the refresh clock, the contradiction tells, and the route-out map — in broad terms. The authoritative copies belong to the clinician, the land registry, the tax body, the court, the pension scheme, the deposit scheme, the insurer, and the bank, and your file never replaces them; the custody, encryption, estate, probate, privacy, and lawful-basis rules vary by jurisdiction and means and belong to a solicitor, the probate registry, an authorised adviser, a data-protection authority, and a trusted holder — not a guide page. And the three load-bearing limits: your file is a reconciling and custody discipline, not a claim that your index outranks the clinician, the court, or the regulator; hold only what you are entitled to hold, because data about other people carries its own obligations and a file that is a privacy breach is worse than no file; and a file made once and never refreshed is a wrong file, so the refresh is part of the discipline, not an afterthought.
The Ninety-Nine Files
The Institutions Do Not Share a File — and That Is the Whole Problem
The mental image of having your records in order is a filing cabinet, a folder, a tidy drawer. The image is comforting and it is exactly what fails, because the records that actually decide things about you are not in your drawer at all. They are in the hospitals system, the employers payroll, the deposit schemes register, the tax bodys ledger, the insurers claim file, the courts docket, the pension providers statement, and the banks account — nine separate institutions, nine separate copies, nine separate definitions of what is true about you. And here is the fact that no single one of them will tell you, because none of them can see the others: they do not share a file. The hospital does not know what the employer holds. The scheme does not know what the tax body holds. The court does not know what the insurer holds. Each decides on its own copy alone, and the person who has only their copies holds a fragmented, contradictory, incomplete record that no single reader can reconcile.
This page is the capstone of the corpus, and it is the one discipline no preceding article could state, because each was scoped to a single institution. Article 86 taught you to correct one contested fact on one file. Article 91 taught you to reconcile the contract to the payslip — two documents, one employer. Article 94 taught you to photograph the check-in before the dispute — one property, one holder. Article 92 taught you to build the chronology before the hearing — one dispute, one panel. Article 97 taught you to preserve the evidence at the scene — one incident, one file. Article 99 taught you to separate the pots at the desk — one journey, one carrier. Article 93 taught you to notify the holders when your circumstance changes — one exit, one cascade. Article 85 taught you to obtain the copy you are owed — one holder, one subject-access route. Every one of them was right, and every one of them was scoped. The capstone is the thing that sits above all of them: the one file that is yours, that the institutions cannot see, that indexes which holder has which authoritative copy, which subject-access route reaches it, and which correction route fixes it — so that when the incident, the hearing, the scene, the disruption, the exit, the bereavement, or the claim arrives, you are not building the index from memory under stress, and the next-of-kin, the clinician, the solicitor, or the claims handler is not starting from a search.
The institutions-do-not-share-a-file reframe — your file does not beat theirs, it reconciles them. Every institution already has my record, so I do not need my own — the hospital, the employer, and the bank between them know everything about me. Between them they know almost nothing about each other. The hospital does not see the employers file, the scheme does not see the tax bodys ledger, the court does not see the insurers claim — and each decides on its own copy alone, so the contradiction between the copies is invisible to every holder except you. This is the reframe the capstone exists to make, and it is the most carefully hedged line in the corpus, because the naive version — "my file is the real one and theirs are wrong" — would lead a reader to trust their own index over the clinician, the court, or the regulator, which is the most dangerous claim a finale could make.
The honest position is the middle, and the page holds it in every section: the institutions' copies are the authoritative ones for their own purposes — the medical record, the land registry, the tax body, the court file, the pension scheme, the deposit scheme. Your file does not beat them and is not a substitute. It is the thing that lets you find the contradiction between them, request the correction from the right holder, and hand the context to a next reader when you cannot speak. The reframe is a directional nudge against the "they between them know everything" complacency — the too-common loss — not a licence to rank your index above the authority. The service is to correct the under-building instinct without asserting a supremacy the file cannot have: build the reconciling file, and route every clinical, legal, financial, and tax question to the holder who decides it.
The institutions' copies — authoritative, fragmented, and blind to each other
- The medical record, the land registry, the tax ledger, the court docket, the scheme statement, the insurer file, the bank account
- Each is authoritative for its own purpose and decides on its own copy alone
- None sees the others, so the contradiction between them is invisible to every holder
- You can obtain a copy through subject access (85) and correct a fact through the dispute route (86)
- But you cannot compel them to share with each other, and you cannot reconcile them from inside any one of them
The bridge is the whole capstone: you need both kinds of file, and neither replaces the other. The institutions' copies are authoritative and you cannot beat them; your own file is the only thing that can see all of their copies at once, and without it the contradiction between them decides your life in fragments. The discipline is to build the reconciling file on top of the authoritative copies, never instead of them — and to route every clinical, legal, financial, and tax question to the holder who decides it, using your file only to find the right holder, the right route, and the right context.
Your own file — reconciling, portable, and the thing a next reader can reach
- The index: which holder has which authoritative copy, which route reaches it, which route fixes it
- The reconciliation: where the copies disagree, the disagreement is the tell that one of them is wrong
- The context: the chronology, the exhibits, the dated notices, the references — assembled before the stakes are live
- The survival: encrypted at rest, reachable by a next-of-kin or executor, refreshed periodically
- It is not authoritative and never replaces the institutions' copies — it is the map that lets you use them
The two bands and the bridge between them are the capstones entire method compressed into one distinction, and its power is that it refuses both naive ends at once. The "they between them know everything" complacency leaves you with nine blind holders and no reconciler. The "my file is the real one" supremacy leads you to trust your index over the clinician and lose the claim. The bridge is the middle the whole corpus was built on: build the reconciling file on top of the authoritative copies, never instead of them. The failure mode the split prevents is the well-meaning one — a person who keeps a perfect folder of printouts and believes it is the record, then discovers at the hearing that the courts file, not their folder, is what the panel reads, and that their folder was only ever the thing that let them find the courts file and correct it. The discipline is to hold both, rank neither above its proper place, and route every question to the holder who decides it.
The Seven Layers
The Master-File Anatomy — What Each Layer Holds, Who Else Holds a Copy, and the Reconciliation Check
A master file is not a single folder; it is seven layers, each mapping to a cluster of the corpus, each with its own authoritative holder, its own subject-access route, and its own correction route. The anatomy below walks the layers in the order a next reader would need them — identity first, because nothing else can be verified without it, and the emergency-and-estate layer last, because it is the layer the next reader reaches in the week you cannot speak. For each layer the anatomy names what it holds, who else holds the authoritative copy, and the reconciliation check that catches the contradiction. No single layer is a verdict; the pattern across the seven is the signal, and the signal is the same one the whole corpus taught: read the mechanism, not the folder.
Layer 1 — Identity and access
What it holds
The reconciliation check
Where two holders disagree on your identity, address, or status, the contradiction is the tell that one of them has a wrong record — and 86's correction route is the fix, applied to the right holder.
Authoritative holders: the registry, the bank, the scheme, the insurer. Subject-access route: 85. Correction route: 86. Breach route: 87.
Layer 2 — Assets and liabilities
What it holds
The accounts, the property, the loans, the insurance, the pensions, the deposits — the layer that decides what you own and what you owe.
The tell
A liability on one holders record that is absent from another, or a deposit held in the wrong state (94's scheme-versus-landlord split), is the contradiction to reconcile — and the route-out map below names which holder decides which question.
Authoritative holders: the bank, the land registry, the lender, the insurer, the pension provider, the deposit scheme. Subject-access route: 85. Correction route: 86. Portability route: 93.
Layer 3 — Health
What it holds
The clinical record index, the medication list, the allergies, the implants, the advance-care questions, the second-opinion reasoning — the layer a clinician reaches first and a next-of-kin reaches in an emergency.
The reconciliation check
Your file holds the index and the context, never a substitute for the clinical record — and every clinical question routes to the treating clinician (88, 41–43), the medication list to the doctor or pharmacist, and the bill to 89.
Authoritative holder: the treating clinician and the health system. Subject-access route: 85. Second-opinion route: 88. Bill route: 89. Denial route: 90. The page never asserts a diagnosis or a treatment.
Layer 4 — Work and income
What it holds
The contract, the written particulars, the payslips, the pension statements, the tax records, the grievance chronology, the reference, the settlement advice — the layer that decides what you earned and what you were promised.
The tell
The contract-versus-payslip seam (91) and the reference-as-record (93) are the contradictions this layer catches — and the route-out map names the employer, the labour authority, the scheme, and the solicitor who decide each question.
Authoritative holders: the employer, the payroll, the tax body, the pension scheme. Subject-access route: 85. Grievance route: 92. Exit route: 93. The page never asserts a pay rule or a right.
Layer 5 — Home
What it holds
The tenancy, the deposit record, the check-in and check-out images, the repair chronology, the utility accounts, the possession-notice file, the insurance — the layer that decides where you live and what you owe for it.
The reconciliation check
The check-in-versus-check-out comparison (94) and the dated repair notice (95) are the contradictions this layer catches — and the route-out map names the scheme, the landlord, the local authority, and the court who decide each question.
Authoritative holders: the deposit scheme, the landlord, the local authority, the utility, the insurer. Subject-access route: 85. Deposit route: 94. Repair route: 95. Possession route: 96. The page never asserts a tenancy rule.
Layer 6 — Legal and claims
What it holds
The will, the powers of attorney, the deeds, the court files, the penalty chronologies, the incident evidence, the travel-claim pots, the dispute correspondence — the layer that decides your obligations and your entitlements.
The tell
The envelope-is-part-of-the-form rule (96, 81) and the voucher-is-a-legal-step rule (99) are the contradictions this layer catches — and the route-out map names the court, the tribunal, the enforcement body, and the solicitor who decide each question.
Authoritative holders: the court, the tribunal, the land registry, the enforcement body, the carrier. Subject-access route: 85. Incident route: 97. Penalty route: 98. Travel route: 99. The page never asserts a legal outcome.
Layer 7 — Emergency and estate
What it holds
The emergency card, the medical-device and dependency facts, the next-of-kin contact, the executor's index, the digital-estate route, the who-to-tell cascade — the layer the next reader reaches when you cannot speak.
The reconciliation check
This is the layer that makes every other layer reachable by the person who will need it most and know it least — and the survive-you sequence below is the discipline that ensures it is not locked inside your head.
Authoritative holders: the solicitor, the probate registry, the clinician, the emergency services. Estate route: 58–60. Emergency route: 73. Cascade route: 93. The page never asserts a probate rule.
| Layer | What it holds | Authoritative holder | Subject-access route | Correction route |
|---|---|---|---|---|
| 1 Identity | Identifiers, accounts, credentials, breach history | Registry, bank, scheme, insurer | 85 | 86, 87 |
| 2 Assets | Accounts, property, loans, insurance, pensions, deposits | Bank, land registry, lender, provider, scheme | 85 | 86, 93, 94 |
| 3 Health | Clinical index, medication, allergies, advance-care context | Treating clinician, health system | 85 | 88, 89, 90 |
| 4 Work | Contract, payslips, pension, tax, grievance, reference | Employer, payroll, tax body, scheme | 85 | 91, 92, 93 |
| 5 Home | Tenancy, deposit, check-in/out, repair, possession, utility | Scheme, landlord, local authority, insurer | 85 | 94, 95, 96 |
| 6 Legal | Will, POA, deeds, court files, penalty, incident, travel | Court, tribunal, registry, carrier | 85 | 97, 98, 99 |
| 7 Estate | Emergency card, next-of-kin, executor index, digital estate | Solicitor, probate registry, clinician | 58–60 | 73, 93 |
The tables right-hand columns are the capstones quiet thesis, because every layer routes out — to the holder who decides the clinical, legal, financial, and tax question — and the most common failure is a person who builds a beautiful folder and then trusts it over the authority, or who builds no folder and lets nine blind holders decide their life in fragments. The seven layers are a structure to fill from your own documents and your own jurisdictions holders, not a checklist this page can complete for you, because the authoritative holder, the subject-access route, and the correction route vary by document and place. The discipline is to index the layers, reconcile the contradictions, and route every question to the holder who decides it — because the file is the map, not the territory, and the territory belongs to the clinician, the court, the scheme, and the regulator.
The file-must-survive-you sequence — the estate discipline applied to the master file
1
Encrypt at rest, and hold only what you are entitled to holdThe file aggregates sensitive data about yourself and potentially about others, so it must be secured, and you must hold only what you are entitled to hold. Data about a partner, a dependant, a next-of-kin, or a deceased person carries its own obligations, and some records have specific rules that route to a solicitor and the relevant body.
The privacy limit: a file that is a breach is worse than no file. Hold the index and your own documents; route the questions about other peoples data out rather than aggregating them casually.
2
Choose a route a next reader can actually reachThe file is useless if it is locked inside your head or inside an account only you can open. The routes are a solicitors will, a trusted holder, a dead-man's-switch service, or a location the person who will need it most and know it least can find — and the legal validity of each is jurisdiction- and means-specific.
The 58–60 estate discipline applied to the master file: the executor should not have to guess what exists. The index is the gift.
3
Make the location findable in the week of the funeralThe test is not whether you can find it; it is whether a grieving next-of-kin can, in the worst week of their life, with no context and no time. Tell the trusted holder where it is and how to reach it, and keep that instruction itself reachable.
The 75 custody rule at its most consequential: a record you cannot reach when you need it is a record that does not exist for the next reader.
4
Refresh it periodically, because a stale file is a wrong fileThe institutions' copies change — a new employer, a moved deposit, a corrected record, a new account, a changed next-of-kin. A file made once and never updated is a wrong file, and the refresh cadence is document- and jurisdiction-specific.
The 86 correction discipline applied to your own file: the record rots, and the refresh is part of the discipline, not an afterthought.
5
Test the route, and tell the trusted holder the test passedOnce a year, have the trusted holder confirm they can reach the instruction and the file. A route that has never been tested is a route you will discover is broken in the week you cannot fix it.
The 96 get-help-today discipline inverted: the hour to test the survival route is the hour before you need it, not the week of the funeral.
The survive-yous logic is the digital-estate and important-documents custody discipline, fused and aimed at the master file: encrypt and hold only what you are entitled to, choose a route a next reader can reach, make the location findable in the worst week, refresh because a stale file is a wrong file, and test the route annually — because the most common failure is a perfect file that no one can reach, discovered by an executor who guesses what exists and notifies the wrong holders in the wrong order. The discipline is to treat the file as a relay, not a possession: it is yours to build and maintain, and it is the next readers to reach and use, and the gap between those two facts is where the loss lives. And the privacy limit runs through every step, because a file that aggregates other peoples data without a lawful basis is a liability you bequeath along with the index.
The refresh clock — a file made once and never updated is a wrong file, and the rot is invisible until the contradiction decides against you. I built the file, so it is done — the records do not change once they are filed. The institutions' copies change constantly — a new employer, a moved deposit, a corrected record, a new account, a changed next-of-kin, a closed claim — and your file is only as good as its last refresh, because a stale index sends the next reader to the wrong holder with the wrong context. This is the capstones behavioural payload, and it is the 81 clock and the 86 correction discipline turned onto your own file: the record rots, and the refresh is part of the discipline, not an afterthought.
The refresh cadence is document- and jurisdiction-specific and the page routes it out rather than asserting a number — but the habit is the durable defence, exactly as 89s error-rate discipline and 47s ad-myth made the habit the point rather than the statistic. The discipline is to refresh on every event that changes a holder — a job exit, a move, a birth, a death, a corrected record, a new account — and to audit the whole file on a fixed annual date, because the event-driven refresh catches the obvious changes and the annual audit catches the quiet ones. A file that is not refreshed is not a record; it is a snapshot of a life that has since moved, and the next reader will be sent to a holder who no longer has the copy your index claims.
The contradiction-is-the-tell — where the institutions' copies disagree, the disagreement is the signal
an address that differs between the bank and the tax body
a deposit held in the wrong state (94)
a liability on one record absent from another
a medication list the clinician and the pharmacist disagree on
a contract term the payslip does not perform (91)
a date of birth or name that differs across two holders
a claim marked closed by one holder and open by another
a next-of-kin or executor the file and the will disagree on
a pension pot the provider and your index disagree on
a reference the employer wrote and you never agreed (93)
The tells are the contradictions that a reconciling file surfaces and no single holder can see, and the discipline is to read them as questions to route to the right holder rather than as verdicts your own file can settle — because the contradiction is the tell that one of the copies is wrong, and it is not your index that decides which. An address that differs between the bank and the tax body is a question for the registry and the holder, not a fact your folder can overrule. A deposit held in the wrong state is 94s scheme-versus-landlord tell, and the adjudicator decides, not your photograph. A contract term the payslip does not perform is 91s seam, and the employer or the labour authority decides. The shared insight across the whole corpus is the same one 86, 89, and 91 made for a single pair of documents: read the mechanism, not the figure — and the capstone extends it to the set, because the contradiction between the copies is the signal no single holder can see, and your file is the only thing that can see all of them at once. The honest limit: the file finds the contradiction and routes it to the holder who decides; it never settles the clinical, legal, financial, or tax question itself.
A worked example: the two files, and the one that caught the contradiction between the holders
Concretely, the institutions-do-not-share-a-file reframe, the yours-versus-theirs bridge, the seven-layer anatomy, the survive-you sequence, the refresh clock, the contradiction tells, and the route-out map meeting two people whose lives are decided by a single contradiction between two holders. A tax credit is reassessed, and the reassessment rests on an address and an income figure that two of the holders disagree on.
Person one has nine blind copies and no reconciler. The tax body reassesses on an address the bank still holds and an income figure the former employer reported before the exit. Person one has no index, so they do not know which holder has which copy, and they argue the reassessment from memory and frustration — the address is wrong, the income is wrong, you should know that. But the tax body cannot see the employers file, the employer cannot see the banks record, and the bank cannot see the tax bodys ledger, so each holder is correct on its own copy and the contradiction is invisible to all of them. Person one spends the window appealing the feeling rather than the fact, the correction routes are never found, and the reassessment stands because no one was sent to the right holder with the right exhibit. The loss is not a dishonest institution; it is nine blind holders and no reconciler, and a file that was never built.
Person two has the index, and the index finds the contradiction and routes it. The same reassessment, the same two wrong figures — but Person two opens the master file, and layer 1 shows the address contradiction: the bank holds the old address, the tax body holds the old address, the registry holds the new one, and the file already knows the registry is the authoritative holder for the address and 86 is the correction route. Layer 4 shows the income contradiction: the former employer reported the pre-exit figure, the file holds the 93 exit date and the 91 final payslip, and the route-out map names the employer and the tax body as the holders who decide the income figure. Person two sends one dated, referenced correction to the registry (the address, with the exhibit), one to the former employer and the tax body (the income, with the exit date and the final payslip), and keeps the chronology. The contradiction is surfaced to the holders who can see it, the corrections are made, and the reassessment is revised on the facts rather than argued on the feeling. The file did not beat the tax body; it told Person two which holder had which copy, which route reached it, and which exhibit settled it.
The lesson is the whole corpus. Both people had the same contradiction and the same blind holders; the difference was not the institution but the reconciler. Person one had nine copies and no index, so the contradiction was invisible to everyone and the appeal argued the feeling. Person two had the index, so the contradiction was surfaced to the holders who could see it, the corrections were routed to the right place with the right exhibit, and the decision was made on the facts. The institutions-do-not-share-a-file reframe is what made the index necessary — no single holder can see the contradiction, so the reconciler must be you — and the honest limit is what kept Person two safe: the file found the contradiction and routed it, it never settled the tax or legal question itself, because the registry, the employer, and the tax body decide, and the file is the map, not the territory. The most common loss in a life decided by institutions is the contradiction no holder can see, and the discipline is to build the one file that can see them all — and to refresh it, secure it, and make it survivable, because a stale or unreachable index sends the next reader to the wrong holder with the wrong context.
The Check
A Sensible Default
- Hold the reframe: the institutions do not share a file, so the contradiction between their copies is invisible to every holder except you — and your file does not beat theirs, it reconciles them.
- Respect the yours-versus-theirs bridge: build the reconciling file on top of the authoritative copies, never instead of them, and route every clinical, legal, financial, and tax question to the holder who decides it.
- Index the seven layers: identity, assets, health, work, home, legal, estate — each with its authoritative holder, its subject-access route (85), and its correction route (86), mapped in the route-out table.
- Run the survive-you sequence: encrypt and hold only what you are entitled to, choose a route a next reader can reach, make the location findable in the worst week, refresh because a stale file is a wrong file, and test the route annually.
- Obey the refresh clock: refresh on every event that changes a holder and audit the whole file on a fixed annual date, because the event-driven refresh catches the obvious changes and the audit catches the quiet ones.
- Read the contradiction tells as questions to route, not verdicts to assert: an address, a deposit state, a liability, a medication, a contract term, a date, a claim, a next-of-kin, a pot, a reference — the disagreement is the tell that one copy is wrong, and the holder decides which.
- Hold the privacy limit: a file that is a breach is worse than no file — hold the index and your own documents, route the questions about other peoples data out, and secure the whole thing.
- Route the specifics out: the authoritative holder, the subject-access route, the correction route, the custody and estate tools, the probate route, and the lawful-basis rules are jurisdiction- and means-specific and belong to the clinician, the court, the scheme, the regulator, a solicitor, the probate registry, an authorised adviser, and a data-protection authority — not this page.
The honest takeaway is that a life decided by institutions is decided by the contradiction between their copies, and no single holder can see that contradiction because no holder can see the others — so the discipline is to build the one file that can see them all, index the seven layers to the holder who decides each question, reconcile the contradictions and route them to the right place with the right exhibit, secure the file and hold only what you are entitled to hold, make it survivable by the next reader in the worst week, and refresh it because a stale index is a wrong index. This page is the capstone of a hundred guides, and it is the one discipline no preceding article could state because each was scoped to a single institution: 86 corrected one fact, 91 reconciled two documents, 94 photographed one check-in, 92 built one chronology, 97 preserved one scene, 99 separated one journeys pots, 93 notified one cascade, 85 obtained one copy. The master file is the thing that sits above all of them — the index, the reconciliation, the context, and the survival — and it never replaces the clinician, the court, the scheme, or the regulator, because the file is the map and the territory belongs to the holder who decides. For the single-record correction this page generalizes, see our correct-a-record-error guide; for the two-document reconciliation it extends to the set, see our read-a-payslip and read-a-hospital-bill guides; for the front-loaded record it makes meta, see our protect-your-deposit, raise-a-grievance, handle-a-car-accident, and claim-a-disruption guides; for the notify-the-holder cascade it indexes, see our leave-a-job and closing-after-death guides; for the subject-access and custody disciplines it fuses, see our request-your-own-record and important-documents guides; for the estate and survival routes it imports, see our digital-estate guides; for the privacy and breach limit it holds, see our protect-your-identity guide; and for the actual authoritative holder, subject-access route, correction route, custody tool, probate route, and lawful-basis rule for each layer of your life, see the clinician, the court, the scheme, the regulator, a solicitor, the probate registry, an authorised adviser, and a data-protection authority — the authorities this page keeps routing you to, because the shape of the index is durable, the specifics are not ours to assert, and the contradiction between the copies is the loss the whole corpus exists to catch.
Common Questions
Frequently Asked Questions
Does my own file replace the official records?
No, and this is the load-bearing limit of the whole page. The institutions' copies are the authoritative ones for their own purposes — the medical record, the land registry, the tax body, the court file, the pension scheme, the deposit scheme. Your file does not beat them and is not a substitute. It is the thing that lets you find the contradiction between them, request the correction from the right holder, and hand the context to a next reader when you cannot speak. The page is a reconciling and custody discipline, not a claim that your index outranks the clinician, the court, or the regulator.
Why do I need a file if every institution already has my record?
Because the institutions do not share a file. The hospital, the employer, the scheme, the tax body, the insurer, the court, and the bank each hold their own copy, none of them talks to the others, and each decides on its own copy alone. So the person who has only their copies holds a fragmented, contradictory, incomplete record that no single reader can reconcile. The contradiction between the copies is the tell that one of them is wrong, and your own file is the only thing that can see all of them at once.
What should I not put in the file?
Only what you are entitled to hold, and this is the privacy limit the page stands on. Data about other people — a partner, a dependant, a next-of-kin, a deceased person's estate — carries its own obligations, and some records (a deceased person's, a joint account, a medical record you are not the subject of) have specific rules that route to a solicitor and the relevant body. A file that is a privacy breach is worse than no file. The discipline is to hold the index and your own documents, secure it, and route the questions about other people's data out rather than aggregating them casually.
How do I make sure the file survives me?
By the trusted-holder and findability route, and this is the estate discipline the page imports. Encrypt it at rest, choose a route a next-of-kin or executor can actually reach — a solicitor's will, a trusted holder, a dead-man's-switch service, or a location the person who will need it most and know it least can find in the week of the funeral — and refresh it periodically, because a file made once and never updated is a wrong file. The specific tools, the legal validity of a digital will or a switch, and the probate route are jurisdiction- and means-specific and belong to a solicitor, the probate registry, and an authorised adviser, not a guide page.
Is this just a folder of scanned documents?
No, and the distinction is the whole capstone. A folder of scans is 75s custody discipline — keeping the documents you already hold usable. The master file is the index and the reconciliation on top of the scans: it knows which holder has which authoritative copy, which subject-access route reaches it, which correction route fixes it, and where the copies disagree. A folder of scans without the index is a pile; the index without the scans is a map with no terrain. The discipline is both — the scans for the context and the exhibits, the index for the route and the reconciliation — and the file is the relay that lets a next reader navigate both without you in the room.
What if I have nothing to file — no property, no pension, no dependants?
The index still matters, because the layers that decide a life without assets are the identity, health, work, and estate layers, and a contradiction between the bank and the tax body on your address or your income is just as invisible to the holders whether or not you own a home. The discipline scales down rather than away: a single page that names which holder has which copy of your identity, your clinical index, your employment and tax records, and your next-of-kin contact is the file, and the survive-you sequence still applies, because the person who reaches it in the worst week is the same whether the estate is large or small. The seven layers are a structure to fill from what you have, not a threshold to meet.
How is this different from a password manager or a cloud drive?
A password manager holds credentials and a cloud drive holds files; neither holds the index of which institution has which authoritative copy and which route reaches it, and neither is built to survive you in a way a next reader can navigate. The master file can use a password manager and a cloud drive as custody tools — and the page routes the specific tools out rather than naming any as universal — but the file itself is the reconciling layer those tools do not provide. The discipline is to separate the tool from the index: the tool stores the documents, the index knows the holders and the routes, and the survive-you sequence makes both reachable by the next reader. A drive full of scans with no index is a pile; an index with no secure tool is a map you cannot hand over.
Ask our AI. Building the file, or rebuilding a stale one? Tap the chat icon and tell us which layers you have and which holders you know of, and it can help you index the seven layers, surface the contradiction tells, map the route-out, and flag the survive-you and privacy limits — and it will always route the authoritative holder, the subject-access route, the correction route, the custody and estate tools, the probate route, and the lawful-basis rule to the clinician, the court, the scheme, the regulator, a solicitor, the probate registry, an authorised adviser, and a data-protection authority, never settling a clinical, legal, financial, or tax question itself. It will not tell you your file beats theirs; it will tell you to build the reconciler, secure it, refresh it, and make it survivable, because the contradiction between the copies is the loss no single holder can see.
The capstone guide — and the whole corpus
We treat a life decided by institutions as decided by the contradiction between their copies, and no single holder can see that contradiction because no holder can see the others — so the discipline is to build the one file that can see them all, index the seven layers to the holder who decides each question, reconcile and route the contradictions, secure and refresh the file, and make it survivable by the next reader, because the file is the map and the territory belongs to the holder who decides.
Explore All GuidesKeep Reading
Sources:
Your national archives or records body — retention, custody, and the durable record (example; use your national body) · Your national data-protection or privacy authority — lawful basis, security, and data about other people (the privacy limit; use yours) · Your national probate registry or estate body — wills, executors, and the digital estate (the survive-you route; use yours and a solicitor)
Other Projects
More from the creator
Explore two other projects from the same creator.