Exclusive control by the user terminal

The user terminal remains the sole owner of its private encryption and signature keys.

It therefore remains the sole guarantor of access to the encrypted data it sends, even on public clouds.

You therefore create your own digital identity independently of any authority, and it is you who disseminate it to your contacts.

End-to-end encryption privacy

In the case of document sharing between users, a key sharing mechanism between the different devices is set up in a completely transparent and confidential manner.

These keys are linked to the working directory to be shared, users' personal keys remain private.

You therefore only allow reading of your files to your trusted contacts. They remain unreadable to others.

Zero Knowledge : No knowledge diffusion

The use of multiple “challenge / response” type protocols makes it possible to prove the authenticity of information without revealing private data.

No knowledge of your identity is required beforehand by the system since it is created anonymously without anyone having the information except yourself.

Traceability - Historization

Parsec keeps all data permanently by default, which allows workspace owners to see all changes made over a period of time.

In the event of a dispute, Parsec therefore offers an audit trail of the files, including a follow-up of their different versions including the timestamp of the modifications, since the first time you used the service.

Concurrent write access

Parsec addresses write concurrency issues by multiple users on a single, end-to-end fully encrypted working directory.

Several users can therefore work at the same time in the same workspace.

Data integrity

Any data uploaded by a user is cryptographically signed in a manner transparent to use: data integrity is continuously ensured by Parsec.

The files are therefore signed from your terminal and any modification is visible.

Simple enrollment

Parsec builds a cryptographic chain of trust as users are added to the organization, which makes it possible to verify the identity of the administrator(s) who added them.

This complex process does not impact the invitation of users in Parsec, which is done in a simple way.

You are therefore your own identity service and you easily deliver access to your trusted contacts.

Availability

Parsec ensures higher availability than most public clouds.

Additional optional systems via our Business offer such as software RAID 5 further enhance it.

The PARSEC metadata server can use an arbitrary number (> 3) of Amazon S3 or OpenStack SWIFT storage instances.

In the event of a storage service failure, the server provides nominal service with n - 1 services available, both read and write. It emits logs making it possible to inform the operator of the problem as well as of the missing objects on the unavailable storage service.

Resilience

Parsec traces and keeps the history of all changes within the enclaves: Parsec is thus able to reconstruct any temporal state of each enclave.

In the case for example of a malicious use undertaken by a user or an attack of a terminal by a ransonware, the files accessible on an open PARSEC enclave which would have been corrupted remain entirely and immediately recoverable in an integral way in the precise state they were in at any time.

Revocation by re-encryption

When deleting a user, the system re-encrypts the workspaces previously shared with him.

Thus, it is no longer possible for the revoked user to decrypt the new data.

You can therefore withdraw your trust in one of your users at any time by excluding them from your workspaces or from your entire organization.

Micro-perimeter data sanctuary

Parsec allows the creation of several distinct workspaces within the organization, each using different cryptographic keys.

Thus, data access rights can be compartmentalized, and it is impossible for a user to access data in workspaces to which they have not been invited, even if they are from the same organization.

Multi-Organizational

In addition to the creation of different users and compartmentalized workgroups within the same organization, it is possible for the same user to have several completely independent organizations.