Skip to main content

Data Flows

This section explains how Zyphe creates, verifies, shares, accesses, and deletes identity data. Each page documents one flow, including the actors involved and the controls applied to the data.

Overview​

Zyphe's data flows are designed around decentralized identity, user sovereignty, and privacy by design. Users control when their data is shared, while organizations receive only the access required for a specific purpose.

How the flows fit together​

The main lifecycle runs from vault creation to verification and controlled reuse. Authority access and deletion are separate, policy-driven paths that apply only when their legal conditions are met.

Core Data Flows​

User Vault Creation​

The foundational flow that establishes a user's secure digital identity. This process creates a personal online datastore (vault) where user data is encrypted, sharded, and distributed across decentralized storage using advanced cryptographic techniques.

Key Features:

  • Threshold + Polynomial (TH + P) encryption
  • Data sharding across multiple nodes
  • User consent and permission management
  • UUID generation for unique identification

User Verification Flow​

The standard KYC (Know Your Customer) verification process that validates user identity and issues verifiable credentials. This flow supports documents from 190+ countries and can include separate document verification and liveness detection steps.

Key Features:

  • Multi-country document verification (190+ countries)
  • Active liveness detection (separate step)
  • Portrait matching between document and live selfie
  • Verifiable Credential (VC) issuance
  • Secure data encryption and storage

Reusable Credentials / One-Click KYC​

A flow that enables users to reuse previously verified credentials across different companies, eliminating the need for repeated verification processes.

Key Features:

  • Credential reuse across companies
  • Access grant system
  • Metadata-based eligibility checking
  • Passwordless authentication support

KYC Passport​

A flow that allows organizations to securely share verified KYC data with partner organizations without requiring users to repeat verification.

Key Features:

  • Partner organization invitations
  • User consent management for data sharing
  • Cryptographic access grants for partners
  • Flow-specific data sharing
  • Invite lifecycle management (accept/reject/revoke)

Organization Data Access Flow​

The flow that enables an organization to access user data it has been granted, ensuring proper authorization and user consent. For the operational dashboard product, see the Dashboard guide.

Key Features:

  • Company authentication
  • User permission verification
  • Secure data retrieval
  • Access control management

Authority Check​

A compliance-focused flow that handles legal requests for data access from authorities while maintaining user privacy and ensuring legitimate access.

Key Features:

  • Legal request verification
  • Hash-based data referencing
  • Authority legitimacy checking
  • Regulatory compliance

Data Deletion​

The "right to be forgotten" flow that ensures users can request complete deletion of their data while respecting legal retention requirements.

Key Features:

  • User-initiated deletion requests
  • Retention obligation evaluation
  • Access revocation
  • Automated compliance checking

Data Flow Principles​

All Zyphe data flows adhere to these core principles:

  1. User Sovereignty: Users maintain full control over their data and identity
  2. Privacy by Design: Data protection is built into every flow from the ground up
  3. Decentralized Storage: Data is distributed across multiple nodes for enhanced security
  4. Cryptographic Security: Advanced encryption ensures data remains secure
  5. Regulatory Compliance: All flows comply with relevant data protection regulations
  6. Transparency: Clear visibility into how data is processed and shared

Technical Architecture​

The same security layers support every data flow:

The architecture includes:

  • Decentralized Storage: Distributed data storage across multiple nodes
  • Threshold + Polynomial Encryption: Advanced cryptographic techniques
  • Proxy Re-Encryption (PRE): User-to-organization sharing without ever exposing plaintext to Zyphe (see Data Sharing and Encryption)
  • Verifiable Credentials: Standards-compliant digital credentials
  • Access Grants: Re-encryption keys that authorize a specific recipient to decrypt a specific document
  • Metadata Management: Efficient data discovery without compromising privacy

Getting Started​

Read the flows in this order for a complete introduction:

  1. User Vault Creation establishes the storage and consent foundation.
  2. User Verification Flow verifies identity and issues a credential.
  3. Reusable Credentials / One-Click KYC shows how a verified credential can be reused.
  4. KYC Passport explains controlled sharing with partner organizations.