Certes Enforcement Point (CEP) Partner Validated

DPRM uses Quantum Safe algorithms to protect data in transit and ensure Data that is stolen in a ransomware attack or misdirected travelling over third party networks stays only useful and accessible by the data owner.  Any data exfiltrated will be completely quantum encrypted and valueless to the attacker. From a regulation perspective it ensures no data is exposed to a third party who should not have access to it. DPRM is made up of four functions that seamlessly work together to safeguard data, ensuring protection throughout its journey and mitigating the impact of regulatory fines in the event of a breach. This is achieved by ensuring that even in the aftermath of a breach, only the Data Controller or Customer possesses the capability to access the data, rendering it valueless to ‘bad actors'.

Certes protects the data itself. Even if attackers intercept your data in motion, they walk away with nothing of value. 

Think of Certes like a dye pack hidden in a bundle of banknotes during a robbery. At first glance, it looks like a clean getaway, until the pack explodes, permanently staining the money and rendering it worthless. No matter how much was taken, it’s unusable, untraceable, and unsellable. 

With Certes’ quantum safe Data Protection and Risk Mitigation (DPRM), intercepted data becomes instantly worthless to attackers, rendered unreadable, unintelligible, and impossible to repurpose. No ransom demands, no leverage, no exposure. It’s the digital equivalent of breaking into a vault and finding nothing of value – your data remains completely protected.

Crypto-Segmentation effectively separates application flows using individual quantum based cryptography with encryption keys that are rotated every hour and comprised of key material partially provided by the data owner.  This prevents lateral movement on the network by any bad actors and prevents compromise in one part of the network impacting other application flows. Particularly useful in IT/OT networks where both environments have to share the same physical network infrastructure. 

Meta data is recorded on what individual data flows have either been protected, dropped or allowed through in clear. This is used for internal and external Audit to prove compliance. 

Software supports the current 4 approved NIST quantum safe PQC algorithms combined with quantum safe NIST approved data in transit algorithm ensuring true end to end quantum protection of data.