Updates from the Duality team

For years, Fully Homomorphic Encryption (FHE) has been the “holy grail” of data privacy. The promise is incredible: the ability to compute on encrypted data without ever needing to decrypt it. In a world of constant data breaches and strict privacy regulations, it allows for a “privacy-by-design” economy where sensitive information like medical records or…

Your legal team just approved a new AI project. The model is powerful, the use case is clear, and everyone is excited. Then someone asks the question nobody wants to answer: “What happens to the sensitive data we feed into this thing?” That moment of silence is familiar to almost every enterprise AI team right…

Most data breaches don’t happen because attackers broke an advanced algorithm. They happen because data was sitting somewhere, unencrypted, and the wrong person got to it. That’s the core problem with data at rest. It’s everywhere, databases, backup drives, file servers, cloud storage buckets, and it’s stationary, which makes it an easy target. Unlike data…

The Change Healthcare breach of 2024 exposed the records of 192 million individuals – the largest healthcare data breach in U.S. history, per HHS OCR. The organization had a DLP policy. A global bank with enterprise-grade DLP tooling watched sensitive client data flow quietly into employee personal cloud apps, week after week, undetected. The U.S….

In financial services, visibility determines the quality of every decision. Each institution holds detailed internal data: transactions, behavioral signals, and risk indicators. Yet the patterns that matter most rarely exist within a single organization. They emerge across banks, payment networks, and jurisdictions. Fraud schemes span multiple institutions. Money laundering flows move through layered accounts across…

The biggest hurdle for healthcare AI isn’t a lack of data, models, or good intentions. It’s access. The most valuable data for training powerful AI simply cannot be moved and centralized in the way traditional systems require. Across the healthcare and life sciences ecosystem, the necessary datasets already exist, distributed among hospitals, research networks, and…

Data is no longer just an asset, it’s a liability, a regulatory obligation, and a strategic advantage all at once. Yet many organizations still blur a critical distinction: data residency vs data sovereignty. At first glance, they sound interchangeable. They are not. Confusing them can lead to compliance failures, legal exposure, and costly architectural mistakes,…

What Is Data Sovereignty Under GDPR? Many people hear “data sovereignty” and think it’s simple: just keep EU data physically stored on servers within the European Union. But that’s a dangerously incomplete picture. In reality, data sovereignty under GDPR is a far more profound legal and technical principle that governs how personal data is accessed,…

Data sovereignty laws have evolved from a niche compliance concern into a primary architectural constraint for any organization operating across borders. In 2026, regulatory fragmentation is accelerating, and businesses must navigate a growing patchwork of national rules that directly influence how data is stored, processed, and shared. The complexity is both legal and deeply technical….