A stolen backup
Backups, snapshots and replicas contain sealed records. The keys that would open them were never in the database to steal.
Your infrastructure stores it. It cannot read what it stores.
Ghostables seals sensitive data on the user’s side before it is sent anywhere. Servers, databases, backups and the people who run them hold only sealed records.
Operator-blind by design
The keys that open a person’s data are created and kept on their side. They are never sent to your servers, never stored beside the data and never shared with Ghostables.
A full copy of your database, taken by anyone for any reason, is a copy of sealed records.
- Opening data takes the person’s password, a second factor and a PIN
- Only the records on screen are ever open, and only while they are on screen
- Nothing your operators can access will open a record on its own
One answer to four different threats
A compromised server
Records already stored stay sealed, because nothing on the server can open them. Data entered while an intruder controls the service is at risk until they are removed.
An insider
Administrators keep the system running without being able to read what it holds. Full access to the infrastructure is not access to the data.
A legal demand
A demand made to the operator yields only sealed records. Lawful requests go to the people who hold the keys.
A compromised key exposes a moment, never the archive
The keys in use are replaced continuously and the old ones destroyed. Records written before a compromise stay sealed, and anything exposed is limited to a narrow recent window.
Search without exposure
People still find what they need. Searches run against sealed search tokens, so the server can return matches without seeing the words being searched for.
Recovery with a phrase only the user holds
At setup each person receives a secure recovery phrase. With it, they can regain access on a new device. Without it, sealed data stays sealed, and that includes from Ghostables.
Availability
Zero-knowledge encryption runs in production in a live healthcare messaging deployment, and reaches new customers through a guided pilot.
Patent-pending
Search over sealed data is the subject of one of five UK patent applications filed in October 2025.
Continue exploring the platform
Integrity and tamper evidence
Every protected write is sealed, chained and checked, so nobody can quietly rewrite the past.
Ghost Tables
Stored data that gives anyone studying it nothing to work with.
Access governance
Many people working on the same sealed records, each with exactly the access they were given.
Independent proof
Integrity evidence built to be checked outside your organisation.
Deployment
Runs inside your applications and databases, in your cloud and your region.
Find out where sealed data fits in your systems
Our engineers will map your sensitive data and show you which protections apply, before you commit to anything.