Drop your financial reports, records, or code. NoData finds every sensitive field in your browser and seals each into a governed Capsule, so your team and your AI read only what policy allows: protecting your data from leaks, misuse, and AI.
Not a tool, infrastructure. We never hold your keys. Seal it yourself and we only ever see ciphertext; hand us the text and we encrypt it for you, which is the one moment we see it.
You have these. But your data keeps moving, to employees, customers, AI, partners. Keep your security stack; add the data layer.
Point NoData at a folder, a drive, or your whole repo. It finds every sensitive field locally: deterministic code, never an LLM, and no value ever leaves. You see field · category · count.
Each sensitive field is sealed into a Capsule. The policy you choose, the encryption, and the right to revoke travel with the data even after it leaves your network.
Your team and your AI read only what policy allows. Every grant and every denial emits a signed, hash-chained receipt you can export and audit.
Drag a folder to instantly scan, classify, and secure sensitive PII. 100% in-browser, nothing uploads. It runs the same content-blind engine as the API.
Open the full agent scannerScan → what we found → proposed policy → approve → toolbox. The complete four-step flow, on your own folder.Or take a quick preview right here:
// same scan, from your own code
import { NoData } from "@nodatachat/sdk"
const nd = new NoData(process.env.NDP_KEY)
const scan = await nd.scanLocalFiles("./")
await nd.sealAll(scan.findings)
// → content-blind: field · category · count. never a value.Here we’re world-class. In the AI era we built the mathematical and cryptographic path that completely prevents language models from reading sensitive data. Not “almost”, not “most likely”: real control. ↑ scan and see how it works
Deny-by-default.
if it wasn’t granted, it doesn’t exist to the AI.Not filtered afterwards. Not hidden in a prompt. Not redacted after exposure. If access wasn’t granted, the model never receives the data. Minimize & Prove.
After you seal, the data lives in a dedicated Capsule for every client and employee. Here’s what reassures every CISO, every DPO, and every customer.
Every capsule is sealed to your public key, so the stored copy is one we have no key for. Reading it back is a different question: if you post text for us to encrypt, we handle it in that moment. Seal it yourself and we never do.
The agent encrypts on the device; the server holds a Capsule it cannot open; only the person’s key decrypts.
Every touch binds a signed, hash-chained receipt you can export and audit: who or what opened, when, on which device.
Export a Capsule as a standalone file that opens offline, forever, even if NoData disappears. A Capsule for life, not a rented login.
One call blocks the Capsule key at release: every live link 410s at once. Crypto-shred, not a row delete.
AI builds a portal in a weekend. Trust infrastructure is what you maintain for years. We replace it, not your product.
A governed access decision is an authorization that was computed, cryptographically enforced, and recorded in the proof chain.
Revocation is free on purpose: turning access off is the action we want you to take without hesitating.
Plans buy capabilities · the meter handles volume. Customer capsules unlimited and never metered. Full pricing →
Already have a key? Open your API console →