Atakama

Atakama is a file-level encryption platform built on distributed key management. Rather than relying on a centralized key server, it fragments each file's unique AES-256 encryption key into "key shards" that are distributed across physical devices, user workstations, mobile devices, and/or an Atakama Key Shard Server (KSS). Encryption is policy-based and operates without passwords, decoupling file access verification from identity and access management (IAM) systems. The cryptographic foundation combines asymmetric, symmetric (AES-256), and threshold cryptography, with the symmetric component considered quantum-resistant at sufficient bit lengths. Decryption is initiated by clicking a file, which triggers a push notification to the user's mobile device requesting approval. Administrators can configure session-based decryption windows to reduce repeated approvals. The KSS deployment option supports automated and batch file processing use cases. Key capabilities include: - Secure File Transfer: generates download links shareable via email, Teams, or Slack, with sender control over decryption events and recipient identity verification. - Encrypted Search: allows searching within encrypted files without requiring decryption or maintaining an unencrypted search index. - Detailed User History: logs user file interactions for compliance, trend analysis, and alerting; logs can be fed into SIEMs and SOCs. - Data Classification Integration: integrates with third-party data classification tools to automatically encrypt files based on classification policy. The platform supports network drives, cloud storage, and hybrid environments, and is intended to address ransomware data exfiltration, regulatory compliance for data at rest, and zero trust at the file level.