Cryptographic Data Self-Protection That Holds Even After Root Compromise

BicDroid is a data security company headquartered in Waterloo, Ontario, built around a single engineering thesis: that data should protect itself in cryptography, so protection survives even when the network, operating system, application, and privileged accounts around it have all failed. It was founded by Dr. En-Hui Yang, a University Professor at the University of Waterloo and IEEE Fellow who previously co-founded Slipstream Data, later acquired by BlackBerry. Customers span government, healthcare, financial services, critical infrastructure, airport operations, electric power, telecom, and education.

Five products layer into what the company calls a trusted encrypted sub-network. PACSAC chains an authenticated mobile user through the OS into the Trusted Execution Environment and down to encrypted data. QDocSE pairs a kernel-resident file-system cryptographic module with BCEI-CERI, which derives a verified identity for each running program from a hash of its binary, dependencies, configuration, and runtime, then resolves access as plaintext, ciphertext-only, or denial. A hardware-rooted server anchors keys, policy, and audit in customer-owned HSMs.

The stated differentiator is a defense whose effectiveness does not erode as attackers accelerate: without the keys, an intruder holding root cannot forge the execution identity that unlocks plaintext. BIACS supplies customer-owned authentication with no long-term secret on the device, LineageCrypt gives each application and AI agent a private identity it owns rather than holds, and LightNet gates app-to-app traffic by cryptographic identity. Vendor materials cite roughly 100 million protected smartphones, patents granted across eight jurisdictions, and certification by national cryptographic authorities.