CipherStash provides a data protection platform that utilizes encryption-in-use and unique key management to ensure sensitive data remains secure while being queried. This technology allows organizations to access and analyze encrypted data without compromising security, addressing the challenges of data breaches and compliance requirements.
Funding
$6.6M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
Organizations face challenges in protecting sensitive data from breaches and ensuring compliance with data protection regulations. Traditional encryption methods can hinder data accessibility and usability, making it difficult to analyze and derive insights from encrypted data. This creates a trade-off between robust security and functional utility.
Solution
CipherStash provides a data protection platform that enables trusted data access through encryption-in-use. The platform ensures that sensitive data remains encrypted even while being queried and analyzed, eliminating the need to decrypt data for processing. CipherStash utilizes a unique key management solution, ZeroKMS, which supports bulk operations to provide a unique data key for every record. This approach enhances security and allows organizations to collect and use sensitive data with confidence, while maintaining full search functionality, semantic search, range queries, and sorting over encrypted data.
Target Audience
CipherStash targets organizations that handle sensitive data, including those in health tech and financial services, as well as developers, DevOps engineers, and SREs who need to implement data security controls without slowing down development teams.
Features
- Encryption in use: Data stays encrypted even when it is being queried in the database.
- ZeroKMS: A key management solution that provides a unique data key for every record.
- Searchable encryption: Full-text search, semantic search, range queries, and sorting all work over encrypted data.
- Minimal deployment complexity: Integrates with existing workflows.
- Built-in audit trail: Every data access is automatically logged.
- Protect.js: NPM package to encrypt and search data.
- CipherStash Proxy: Encrypt and search sensitive data in PostgreSQL without SQL changes.
- CipherStash for DynamoDB: Trusted data access for DynamoDB with CipherStash Rust crate.
- Support for industry standard primitives like AES and SHA2.