private.me
White Papers
Platform White Papers Quickstart
Get ACI Core
Full Control Protected Bundle

ACI Core: Deploy Proprietary Algorithms Without Exposing Source Code

Distribute proprietary algorithms to customer infrastructure via npm with information-theoretic security. XorIDA 2-of-2 threshold sharing means Share 1 alone reveals nothing about your algorithm.

4 Building Blocks Information-Theoretic Security Cryptographic Billing npm Compatible
The Challenge

Protecting Proprietary Algorithms During npm Distribution

SaaS works for consumer apps, but enterprise customers demand on-premises deployment. Traditional npm distribution exposes your source code the moment npm install runs.

The dilemma: Enterprise contracts require you to deploy your proprietary algorithm to customer infrastructure, but npm gives them the entire codebase. Obfuscation can be reversed. Encryption keys must be stored somewhere. Legal contracts don't prevent code theft.

You need a way to deliver the algorithm to customer servers without exposing the intellectual property. That's exactly what ACI Core provides.

How It Works

XorIDA 2-of-2 Threshold Sharing

ACI Core uses XorIDA threshold sharing to split your algorithm into two shares. Share 1 ships via npm. Share 2 is payment-gated on Private.Me infrastructure.

Information-Theoretic Security
Share 1 alone reveals NOTHING about the algorithm. Not computationally hard to reverse-engineer — mathematically impossible. This is the same security model used by one-time pads.

The customer runs npm install @your-vendor/algorithm and gets Share 1. When their application starts, it calls Private.Me to retrieve Share 2. Share 2 is only delivered if their Stripe subscription is active.

If the subscription expires, Share 2 stops being delivered. The algorithm stops working. No refunds needed. No access revocation infrastructure. Billing enforcement is cryptographic, not contractual.

What's Included

Four Building Blocks in One Bundle

ACI Core is a bundle of four core packages. You get all four together — this is not four separate installations.

Threshold Sharing
Crypto
XorIDA 2-of-2 splitting and reconstruction. Information-theoretic security over GF(2). Sub-millisecond performance.
@private.me/crypto
Key Transport
xChange
Secure key exchange for Share 2 delivery. Encrypted envelopes with HMAC verification. Zero-copy streaming.
@private.me/xchange
Trust Registry
xRegistry
DID resolution and capability discovery. Trust registry for vendor verification. Service endpoint management.
@private.me/xregistry
Agent SDK
xBind
Identity-based M2M authentication. Replace API keys with cryptographic identity. 603× faster than OAuth.
@private.me/xbind
Included Free
These building blocks are included FREE when you purchase any Private.Me product. ACI Core is only needed if you want Full Control protection for your own algorithms. If you just need the building blocks for development, buy any product and get access to all four packages.
Integration

Installation & Usage

Step 1: Install the Bundle

npm / pnpm / yarn
# One package, four building blocks included
npm install @private.me/aci-core

Step 2: Configure Your Algorithm for Full Control

Upload your algorithm to Private.Me. We split it into Share 1 (public npm) and Share 2 (payment-gated). You control the vendor account and billing.

TypeScript Example
import { FullControl } from '@private.me/aci-core';

// Customer runs this on their infrastructure
const algorithm = await FullControl.activate({
  vendorId: 'your-vendor-id',
  algorithmId: 'your-algorithm-id',
  connectionId: 'customer-connection-id'
});

// Share 2 delivered only if subscription is active
const result = await algorithm.run(inputData);

Step 3: Customer Subscribes

Customer visits your Stripe Checkout page → Subscribes → Gets Share 2 delivery credentials → Algorithm works on their infrastructure.

Important
Subscription expiry stops Share 2 delivery immediately. Customer's algorithm stops working until they renew. No refund logic needed. Billing enforcement is cryptographic.
Pricing

Simple, Transparent Pricing

Free trial: 3 months on all tiers, then choose the tier that fits your needs. All tiers include the complete bundle of four building blocks.

Tier Price What You Get
Basic $5/month 1 algorithm, 100 activations/month, community support
Middle $10/month 5 algorithms, 1,000 activations/month, email support
Enterprise $15/month Unlimited algorithms, unlimited activations, priority support

Tiers: Basic $5/month, Pro $10/month, Enterprise $15/month

Purchase Endpoint

const response = await fetch('https://private.me/api/purchase', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    product: 'aci-core',
    tier: 'pro',  // basic | pro | enterprise
    email: 'user@example.com',
  }),
});

const data = await response.json();
if (!response.ok) {
  // RFC 7807 structured error with fields object
  console.error(data.title, data.detail, data.fields);
}

Error handling: API returns RFC 7807 Problem Details with fields object for validation errors.

Free with Product Purchase
Buy any Private.Me product and get ACI Core building blocks included free. The subscription is only for Full Control IP protection. If you just need crypto/xchange/xregistry/xbind for development, buy any product (xDebug, xRegistry, etc.) and access all four packages at no additional cost.
Get Started — Free Trial