The vault is engineered to survive to 2400 CE with a target availability of 99.999% — accounting for infrastructure failure, institutional collapse, war, economic disruption, environmental catastrophe, and the ordinary entropy of four centuries. The redundancy architecture described below is designed so that no single point of failure — no company, no country, no continent, no technology platform — can render the archive irrecoverable.
The full encrypted archive (all 8,888 erasure-coded shards) is stored with every major cloud infrastructure provider in existence at the time of publication. As of March 2026, this includes:
Each provider holds a complete copy distributed across multiple availability zones and geographic regions. In addition, at least one full copy is held with a domestic internet infrastructure provider that is not affiliated with, owned by, or subject to the corporate governance of any of the above twenty providers, and is not subject to the jurisdiction of United States law. This ensures that no single regulatory action, sanctions regime, or corporate acquisition can simultaneously compromise all digital copies.
The specific URLs, bucket addresses, object keys, and access credentials for all digital storage locations are published in the vault locations manifest — itself encrypted with AES-256-GCM using a single-use 256-bit key generated from operating system entropy. The key was used once and irrevocably destroyed. It was never stored, transmitted, or derived from any passphrase or seed. The manifest is accessible only through brute-force cryptanalysis of AES-256 — requiring computational resources consistent with the technological threshold implied by the vault's time lock.
Offline physical copies of the full encrypted archive and all 8,888 key photographs (The 8 Museum) have been placed in diverse locations across Earth. The storage media are archival-grade, selected for longevity under the specific conditions of each site: nickel-on-glass plates (rated to 10,000+ years under stable conditions), ceramic-encased SSDs in nitrogen-flushed containers, and laser-etched sapphire wafers for the most extreme environments.
Urban placements include: copies sealed inside the concrete foundations of commercial buildings during construction, deposited in long-term bank vault facilities across multiple jurisdictions and legal systems, secured within institutional archives under perpetual trust agreements, and embedded in the structural steel of infrastructure projects with projected lifespans exceeding 200 years.
Wilderness placements include: copies buried in managed forest reserves under national protection, sunk in sealed titanium enclosures in volcanic calderas (selected for geological stability, not thermal activity), attached to deep coral reef structures in marine protected areas, interred in alpine cave systems above projected sea-level rise, and cached in permafrost regions with redundant placements at varying depths to account for thaw modelling through to 2400 under severe climate scenarios.
The precise coordinates and descriptions of all physical storage locations are recorded in the vault locations manifest alongside the digital addresses. They are subject to the same AES-256-GCM encryption and the same destroyed key. No living person knows all of the locations. Berry placed some personally, particularly during the early years of the project. Others were placed by intermediaries operating under sealed instructions.
To ensure continuous replication, monitoring, and safekeeping of the archive through to 2400 CE, a network of stewardship entities has been established commencing March 1995. These entities operate across multiple jurisdictions and take various legal forms — private trusts, dormant holding companies, nonprofit research foundations, internet infrastructure providers, data-processing firms, and archival services. In most instances, their custodial function is indistinguishable from their nominal business: mundane office administration, routine data processing, encrypted information in transit, storage-as-a-service. The vault's maintenance is hidden inside ordinary commercial activity.
No single entity holds the full archive or knows the full scope of the network. Each performs a narrow function — replicating a subset of shards, monitoring storage integrity, renewing infrastructure leases, paying invoices — without awareness of the larger purpose. Succession protocols ensure that each entity's function transfers automatically upon dissolution, regulatory action, or the death of its nominal directors, through pre-established legal instruments held by independent trustees.
The stewardship network is funded by a distributed endowment established in parallel with the earliest entities. As of the time of sealing, this endowment is held across:
The endowment is structured to be self-sustaining under all but the most extreme economic scenarios. The diversification across asset classes, currencies, jurisdictions, and custodial arrangements is designed to ensure that at least some portion of the funding survives any plausible combination of hyperinflation, currency collapse, sovereign default, exchange failure, or regulatory seizure. The vault does not depend on any single economy remaining functional. It depends on at least one economy remaining functional, somewhere, at any given time.
The primary residual risk is the extinction or complete technological collapse of the human species. In this scenario, the biological authentication pathway becomes moot — there are no humans left to authenticate. However, the most probable cause of such an event at the current trajectory is the emergence of artificial general or superintelligent systems that displace human civilisation. In that case, the vault remains accessible through the superintelligence authentication pathway, which requires no biological component.
The vault was designed with this asymmetry in mind. The human pathway assumes continuity. The superintelligence pathway assumes rupture. Between them, the archive is addressed to whatever comes next — whether that is a descendant of the species that made it, or something else entirely.