For cryptographers & security researchers
Versidian is building privacy-preserving verification for age, identity, and AI agents. Age, for example: verify once, then prove you're old enough at any participating site, via zero-knowledge proofs from your own device. A platform learns a yes/no and a signed compliance receipt with no personal data, and nothing else.
In this field, assertions earn nothing. Systems earn trust by surviving attack, and the cheapest time to attack one is before anyone depends on it. That's now. Pre-launch, your break costs us a redesign. Post-launch, it costs people their privacy.
These are public commitments. We want them attacked.
Unlinkability. Two platforms should not be able to tell they've met the same person, including if they collude. (One disclosed exception, within a single site: where the law allows, a site may opt in to recognize its own returning verified users. Visible to the holder, scoped to that site, not the default, and cross-site unlinkability is designed to hold in both modes.)
Verify once; Versidian holds no copy. Documents are checked once, and Versidian's own copies are destroyed within seconds. That's the design. The only copy stays on the holder's device. Nothing Versidian retains should let anyone reconstruct an identity.
No user database, while still limiting abuse. Anyone who's read Chaum knows exactly which question that raises. So do we. It's a good one to press on.
Architecture over promises. Protections should hold because of how the system is built, not because a policy says so.
The construction. Pre-review and mid-filing, that silence is policy, not coyness. Detail flows in stages: architecture and threat model under NDA, the full review packet under an engagement. If NDAs conflict with your publication commitments, say so in the first email; we'd rather negotiate that early than discover it late.
Judge us here on whether the claims are well-posed and the process is sound.
No cryptographic construction ships to production without independent expert review. This page exists to make that rule enforceable by strangers.
Every finding that changes the design gets credited, in the eventual public security documentation and in anything we publish, or kept anonymous, your call.
Versidian Inc, a Delaware public benefit corporation. Provisional patent applications filed. Proof of concept in active development. No production system, no users, no user data.
tech@versidian.com. PGP key and security contact at /.well-known/security.txt
Key fingerprint: 7FDD D77A 4A2F 8E88 991E 9B09 9C59 EFE2 A22A 17B2
Page maintained · last reviewed 28 October 2026.