Basics
What is PastWipe? PastWipe™ provides post-breach data control for regulated firms, from mid-size to enterprise, and the public sector. It reduces the usable value of stolen or exfiltrated data outside approved conditions, using policy, cryptographic validation, identity and device context, and evidence records. What is PastWipe?
Who is PastWipe for? Enterprises and government bodies, and the insurers, incident responders and advisers who support them. Priority sectors include corporate enterprises, insurance, public sector, banking and finance, healthcare, and legal and IP. Sectors
Does PastWipe replace DLP, EDR, IAM or incident response? No. Those controls remain essential. PastWipe adds a separate control stage for protected data that has already moved beyond the original trust boundary. Compare approaches
Does PastWipe stop every stolen file being used? PastWipe controls use within supported, policy-aware workflows. The outcome depends on the protected format, integration, workflow, policy, available context signals and whether an unrestricted plaintext copy already exists. Each evaluation measures the reduction in utility and legitimate acceptance under unsupported conditions for your data.
Is this a replacement for encryption? No. Encryption protects confidentiality when keys and access remain controlled. PastWipe addresses whether data should still be usable when the surrounding conditions, identity, device or purpose are no longer trusted.
RepSec
What is RepSec? RepSec™ is an optional protocol framework for expressing policy, validation and evidence consistently across participating systems. About RepSec
Is RepSec required? No. PastWipe operates without RepSec.
What is RepSec-Q? An extension of the optional RepSec framework toward post-quantum resilience. Post-quantum properties depend on the selected cryptography and implementation, and are scoped per evaluation. About RepSec-Q
How it works
How does PastWipe control data after it moves? Protected data is associated with policy. At the point of use, PastWipe checks whether current identity, device, environment, time and purpose conditions still satisfy that policy, then allows, denies, restricts or degrades the result and records the decision. How it works
Which data types can be protected? Common office documents, structured exports and application data are typical starting points. Supported formats and applications are confirmed for each evaluation.
What if someone photographs the screen or retypes the content? A photograph or retyped copy is outside technical enforcement. PastWipe limits that exposure by releasing protected content only to approved identities, devices and purposes, and by recording each release.
Can use be withdrawn after sharing? Where the workflow remains under supported control, use can be restricted, expired or withdrawn. Copies that have already become unrestricted plaintext are outside enforcement.
Can PastWipe work offline? Offline operation is designed per environment, for defined periods and policies. Because it changes the trust model, local validation, cached authority, expiry and reconciliation are specified and tested as part of the evaluation.
Deployment and integration
On-premises, cloud or hybrid? PastWipe runs on-premises, in hybrid environments or in your own cloud account, with client-controlled data and keys. Deployment
Does PastWipe need access to our data or keys? PastWipe is built around a zero-access operating model: it runs in your environment and works with your own key-management system or HSM. The data and key arrangements for each evaluation are written into its scope. Deployment
Does PastWipe integrate with our identity provider and SIEM? PastWipe uses identity and device signals from existing systems and sends evidence records to monitoring and response tools. Compare approaches
Security, privacy and compliance
Does PastWipe make us compliant? PastWipe supports your compliance programme rather than replacing it. Its evidence records support obligations such as GDPR, UK GDPR, NIS2 and DORA, and compliance decisions remain with your organisation. Regulatory evidence
What assurance documentation is available? Security, architecture and data-handling documentation is shared with qualified parties during scoping, under NDA where needed. Trust Centre
Is patent protection in place? US patent pending. Legal notices
How do we report a security issue? Email info@pastwipe.com with "Security report" in the subject line. Security disclosure
Evaluation and buying
How do we evaluate PastWipe? Through a scoped evaluation against a defined data class and workflow, with success criteria agreed in advance. Scope an evaluation
How is PastWipe priced? PastWipe is scoped per engagement. Contact us to discuss your environment. Contact
Do you work with partners? Our founding partner programme is open to MSSPs, incident-response practices and technology partners. Partner programme
Media and analyst enquiries? See the press page or email info@pastwipe.com.