Enterprise · Sales-assist
The matching funnel for regulated cross-tenant data partnerships.
You keep your data — we're the filter, not the destination. Open-source matching engine, hosted with cryptographic audit, lineage, review queues, and Privacy-Preserving Record Linkage. The compliance layer that engineers can read.
Privacy-Preserving Record Linkage
PPRL is a cryptographic protocol that lets two organizations match records without either side seeing the other's PII. Useful when you need entity resolution across organizational boundaries that legal can't bless with raw data exchange.
Cross-bank fraud rings
Match accounts across institutions to detect ring activity without exchanging customer data.
Healthcare federations
Patient records across hospital systems for population health, with HIPAA-safe joins.
Industry consortiums
Partners share resolved entities without raw PII crossing organizational boundaries.
Available on Enterprise. Tell us about your scenario below — happy to walk through how it would apply.
End-to-end compliance, designed for audit
- • Cryptographic audit chain — per-org, SHA-256 chained, verifiable end-to-end via the audit-log UI. Every source ingest, review-queue decision, and destination push lands in the chain.
- • Tenant isolation — Postgres-level
org_idfilters on every read and write, JWT-bound to your Clerk organization. - • SOC2-aligned controls — current control mapping available under NDA.
- • Encrypted destination credentials — connection strings + auth payloads both stored under envelope encryption with per-org keys. Masked on read; only the runtime decrypts.
- • Provenance sidecar on every export — describes how each row was resolved, end to end.
Push to the warehouse you already trust
The funnel ends at your destination, not ours. Configure one or more outbound targets per matched entity_type; we never become a copy of your source of truth.
- • Warehouses — Postgres, MySQL, Snowflake, BigQuery. Truncate-and-load or append.
- • Cloud file drops — S3, GCS, Azure Blob (CSV or Parquet, format inferred from the URL suffix).
- • Browser download — one-shot CSV / Excel / Parquet for ad-hoc exports.
- • Reverse-sync (roadmap) — updating HubSpot / Salesforce contacts in-place once review-queue decisions settle. Tracked publicly in issue #149.
Tell us about your use case
Prefer not to fill a form? ben@bensevern.dev works too.