Updates from the Duality team

Responsible AI is no longer optional for organizations that build AI with sensitive data. In healthcare, financial services, government, and other regulated industries, every AI system must be accurate, explainable, secure, and able to withstand regulatory scrutiny. That means proving how models were trained, protecting sensitive data throughout the AI lifecycle, reducing bias, and maintaining…

IBM Sovereign Core and Duality Technologies combine customer-operated sovereign control with privacy-enhancing technologies to help organizations analyze and collaborate across sensitive, distributed data without exposing raw information. IBM Sovereign Core and Duality Technologies combine a customer-operated sovereign software foundation with privacy-preserving data collaboration. IBM Sovereign Core maintains platform identity, access, keys, logs and operational control…

Encryption remains one of the most important foundations of PII protection. However, as organizations increasingly analyze, share, and use sensitive data, encryption alone does not address the challenge of protecting data while it is actively being processed.  In reality, encryption only protects sensitive data until someone needs to use it. Every time personally identifiable information…

We’ve spent years in the Privacy-Enhancing Technologies (PETs) space. The label is accurate, and the name is functional. These are technologies that enable sensitive data to be used and computed on while remaining protected, allowing organizations to derive value from data and models without exposing them. But increasingly, the “privacy” label feels too narrow for…

The network perimeter used to be the line that mattered. Build a strong enough wall, the thinking went, and everything inside it could be trusted. That model has quietly collapsed, and zero trust data security is the framework most regulated organizations are now adopting to replace it. Data lives across cloud regions, SaaS platforms, partner…

Data security is the practice of protecting data from unauthorized access, theft, alteration, and loss. Data privacy governs whether and how personal data may be collected, used, retained, and shared. The distinction matters because a system can be technically secure and still violate privacy law: security asks whether the data is safe, while privacy asks…

Sovereign cloud is the cloud industry’s fastest-growing promise and its most frequently broken one. A sovereign cloud is a cloud environment designed so the data and workloads inside it stay fully subject to the laws and control of a single jurisdiction, and beyond the legal reach of any foreign government. That is the sovereign cloud…

When Russia’s internet regulator ordered LinkedIn blocked across the country in late 2016, it was not a censorship story. It was data localization enforcement: LinkedIn had failed to move Russian users’ personal data onto servers inside Russia, so the platform was cut off. Data localization is the legal requirement that specific categories of data be…

Duality Technologies has begun the next phase of its commercial growth, moving its advanced privacy‑preserving data collaboration technology into production with national security and defence customers. As part of this momentum, NSSIF has made a strategic investment in Duality, reflecting confidence in the company’s technology, team and long‑term potential. As organisations increasingly look for ways…