Zero Key Management Required. 15-Second Setup.

Identity-based auth for APIs, servers, and AI agents. No rotation, no sprawl, no revocation chaos. Just cryptographic identity that scales.

3 steps
create → connect → send
15 sec
Setup Time
0 sec
Downtime
Get Started → See Migration Guide
See How It Works
XorIDA threshold sharing in action
Choose Your Entry Point
Three paths into identity infrastructure. Same 3-step flow. Pick the problem you're solving today.
🔗
PATH 1: Replace API/SSH Keys

xLink

Identity-Based Connections
Zero Key Management Required
No rotation. No sprawl. No revocation chaos. Just cryptographic identity.

AI Agents Are Breaking API Key Management

AI agents make 100× more API calls than humans. Your existing API key infrastructure can't handle this scale. Here's what's breaking:

1
Key Rotation Chaos

AI agents need credentials that outlive individual sessions but refresh faster than quarterly. Designed for humans, breaks at agent scale.

2
Rate Limiting Breaks

Per-key limits designed for humans fail when one AI spawns 1,000 parallel connections. Your infrastructure can't distinguish between agents.

3
Audit Explosion

"Which AI made this call?" becomes unanswerable when keys are shared across agent fleets. No attribution, no accountability.

4
Revocation Impossible

Shutting down one rogue agent means rotating keys for all 1,000 others. Cascade failures, service disruption, operational chaos.

PRIVATE.ME solves this by giving every AI agent its own cryptographic identity.

No shared secrets. No rotation. No rate limit chaos. No audit gaps. Just clean, per-agent authentication that scales to millions of connections.

Already have API keys?

Run PRIVATE.ME parallel to your existing API infrastructure. Zero downtime. Shift traffic at your pace. Deprecate keys when you're ready.

Quick Answers
→ Replace API Keys → AI Agent Communication → Zero-Downtime Migration → APIs vs ACIs
See xLink Documentation →
🏢
PATH 2: On-Prem + Billing Control

Full Control

Data Sovereignty Without Trade-Offs
Mathematical Billing Enforcement
No DRM. No telemetry. No trust. Just math.

Traditional Licensing Can't Handle On-Prem

Enterprises demand on-premises deployment (HIPAA, FedRAMP, ITAR). Vendors need payment control. Every existing licensing mechanism fails:

1
License Keys Are Strings

Copied, shared, or posted online. One license activates unlimited instances. No enforcement.

2
Air-Gapped Systems Can't "Phone Home"

Government classified networks, industrial OT/ICS, healthcare HIPAA zones prohibit external connectivity. "Must connect to activate" eliminates enterprise buyers.

3
VM Cloning Breaks Everything

Docker containers, Kubernetes pods, VMware snapshots duplicate entire environments. One purchase, infinite deployments. Hardware dongles bypass vendor control.

4
$150B+ in Blocked Deals

Cloud-only vendors lose government, healthcare, finance contracts. On-prem vendors can't bill usage. Both sides walk away.

PRIVATE.ME replaces trust with cryptography.

Code splits into 2 shares. Share 1 deploys to customer infrastructure. Share 2 delivered only when payment clears. Both required to execute. Neither useful alone. Information-theoretically guaranteed.

Built for regulated industries

Government (FedRAMP, ITAR), Healthcare (HIPAA), Finance (SOC 2), AI vendors (on-prem models), Industrial OT/ICS (air-gapped control systems).

See Full Control Documentation →
🆔
PATH 3: The Foundation Layer

xID (Identity Infrastructure)

Both xLink and Xpass build on xID — the identity layer that makes keys obsolete. If you're building identity infrastructure directly, start here.

DID Generation
~50 microseconds

Ephemeral Identity

Per-verifier DIDs from XorIDA-split master seed. Cross-repo unlinkable. eIDAS 2.0 compliant.

Self-Converging Identity

K-of-N threshold from 8 signal types. ISO 24745 cancelable biometrics. No seed at rest.

AI Agent Identity

Verifiable DID per agent. No static tokens. Cryptographic accountability.

See xID Documentation →
Three Steps. Every System.
As fast as 15 seconds
1
Create Identity
const agent = await
  Agent.create()
~1ms • Ed25519 + ML-DSA-65
2
Connect to Entity
await agent.connect(
  targetDid
)
One-time setup
3
Execute Securely
await agent.send(
  { to, payload }
)
Signed • Encrypted

create → connect → send

Same three steps, whether you're replacing API keys, controlling on-prem software, or building identity infrastructure.

Entity 1
did:key:z6Mk...
Ed25519 + ML-DSA-65
identity, not keys
Entity 2
did:key:z6Mn...
X25519 + ML-KEM-768
share 1
share 2
share 3
0 keys 0 secrets 0 tokens
All 140 ACIs use this same flow. Pick your entry point above.
How XorIDA Works

Split. Distribute. Reconstruct.

Threshold secret sharing over GF(2). Any K shares reconstruct. Fewer than K shares reveal zero bits. Information-theoretically guaranteed.

48 65 6C 6C 6F "Hello" original data 48 65 6C 6C 6F "Hello" ✓ reconstructed split 2-of-3 share 1 share 2 share 3 compromised — 0 bits leaked A3 F9 2E 8B 1C attacker intercepts → Intercept any single channel — attacker gets zero bits of information
Real-World Impact
From seed custody to email security — identity infrastructure in production.
Patent US 11,972,000 B2

Xecret: Seed Custody

Hardware wallet seed split across 3 email addresses. Threshold reconstruction (2-of-3). Lose your phone → recover via email. Lose one email → still access your wallet.

Information-theoretic security. One share alone reveals zero bits. HMAC verification before reconstruction. No custodian, no single point of failure.

Built on PRIVATE.ME

Xail: Email Client

Lightweight email client with split-channel secure messaging. Regular email (1 address) or secure Xail-to-Xail (2+ addresses, threshold-protected). Both modes coexist in one inbox.

Visual security tiers. Blue border (2-of-2 secured). Green border (2-of-3 secured + fault tolerant). Enterprise compliance for regulated industries.

Team
Executive leadership and strategic advisors.
AJ Esmailzadeh

AJ Esmailzadeh

Founder

Founder and president of Private.Me and Private.Co. Creator of revolutionary patented cloud-based platform for data dispersal where the end user is the only trusted party.

Jacques Kempin

Jacques Kempin

CEO

Innovator and entrepreneur. Co-Founded VeePee, a Cloud Solutions Service Provider. Created three secure file sharing applications. Former teacher at ENSAD and University of Paris V. Partner at Zeno Capital.

Paul Hershenson

Paul Hershenson

Chief Technical Officer

Co-Founder of Art & Logic, Inc. Grew company to 75 developers serving over 900 clients including Apple, Google, Motorola, Disney, and SpaceX. Pioneer in digital audio editing techniques.

Dr. Stan Stahl

Dr. Stan Stahl

Chief Information Security Officer

Pioneer in information security since 1980. Secured teleconferencing at the White House, databases inside Cheyenne Mountain, and nuclear weapons communications. President of Citadel Information Group.

David Lam

David Lam, CISSP

Chief Information Officer

30+ years of IT experience with 27 years in Information Security. Focus on securely managing information across enterprise systems.

Ted Harrington

Ted Harrington

Advisor

Strategic advisor on cybersecurity and business development. Expertise in enterprise security architecture and go-to-market strategy.

Robert Neivert

Robert Neivert

Advisor

CEO for two venture-funded startups. Led startups in mobile and enterprise software. Four successful company exits. Leadership positions in products, marketing, and operations.

Tim Toohey

Tim Toohey

Advisor

Chief Privacy Officer for Private.me. Partner and Head of Cyber, Privacy and Data Security Team at Morris Polich & Purdy LLP. Author on privacy and data protection.

S

Ask Sol

Platform Sales Agent

Questions about xLink, Xpass, xID, pricing, implementation, or compliance? Ask me anything about the PRIVATE.ME platform.

Sol can make mistakes. Verify important information.