Skip to main content

Data & Privacy Architecture

Sentra's data handling architecture is built on the premise of absolute privacy, verifiable security, and flexible storage options.

Storage Layer​

The storage engine is designed to be highly modular.

  • IPFS Storage Engine: Default decentralized file storage mechanism ensuring data immutability and high availability.
  • Pluggable Storage Engine: Enterprise clients can seamlessly swap the default storage for custom, proprietary, or on-premise object storage solutions to comply with internal data governance policies.

TEE Data Processing​

To ensure that sensitive data remains encrypted even during active processing, Sentra leverages Trusted Execution Environments (TEE). This hardware-level isolation guarantees that no unauthorized entity (not even the host system administrator) can access the data while it is being computed.

This enables advanced privacy-preserving features:

1. Partial Data Disclosure​

Users can present a Verifiable Credential or a dataset and cryptographically prove a subset of that data without revealing the entire payload.

  • Example: Proving one is over 18 without revealing the exact date of birth.

2. Formula-Based Data Disclosure​

Complex computations can be run against user data within the TEE, outputting only the result of the formula to the verifier, rather than the raw data itself.

  • Example: A financial institution running a credit-scoring algorithm against a user's transaction history. The verifier receives the score (e.g., "750"), but never sees the underlying transaction history.

Verification Services​

A suite of API endpoints designed for third-party integrators to instantly verify the cryptographic proofs generated by the TEE and the DID registries.