xArchive: Long-Term Physical PII Archive

The Problem

PII in digital archives is a permanent breach target. Physical paper records degrade. No existing solution separates sensitive data from non-sensitive with guaranteed recoverability across decades.

Healthcare organizations must retain patient records for 30 years or more under HIPAA. Government census data, legal discovery archives, and insurance claim histories all carry similar long-horizon retention mandates. Every year those records sit in a digital archive, they accumulate breach risk.

Traditional approaches force a binary choice: keep full PII online (and accept breach exposure) or redact permanently (and lose the data forever). Neither option satisfies compliance requirements that demand both privacy protection and future recoverability.

The Old Way

The PRIVATE.ME Solution

L1-L3 redaction strips all PII from the document. The entity map -- the key to restoring the original -- is vaulted via Double XorIDA into QR shares printed on archival paper. The redacted document is stored digitally, safe to breach.

xArchive creates a physical-digital separation: the redacted document lives in any digital archive (cloud, on-premise, tape) with zero breach risk because it contains no PII. The entity map that links redacted tokens back to real identities exists only as physical QR codes distributed across separate locations.

Double XorIDA provides both secrecy and fault tolerance. Any K-of-N QR shares reconstruct the entity map; fewer than K reveals nothing. Archival-grade paper and UV-stable ink ensure 50+ year durability.

The New Way

How It Works

Three-stage pipeline: redact, vault, archive. Each stage is independently auditable and the redacted output is safe to store anywhere.

Use Cases

Integration

import { archivePII, reconstructEntities } from '@private.me/xarchive';

// Redact PII and vault entity map as QR shares
const result = await archivePII(documentBuffer, {
  n: 3,        // total shares
  k: 2,        // threshold to reconstruct
  format: 'qr-archival',
});

// result.redactedDoc  -- safe to store digitally
// result.qrShares     -- print on archival paper

// Later: scan K shares to reconstruct
const entities = await reconstructEntities(scannedShares);

Security Properties

Verifiable Data Protection

Every operation in this ACI produces a verifiable audit trail via xProve. HMAC-chained integrity proofs let auditors confirm that data was split, stored, and reconstructed correctly — without accessing the data itself.

Ready to deploy xArchive?

Talk to Ren, our AI sales engineer, or book a live demo with our team.

Ship Proofs, Not Source

xArchive generates cryptographic proofs of correct execution without exposing proprietary algorithms. Verify integrity using zero-knowledge proofs — no source code required.

Use Cases