flash-zk: a server-blind encrypted database for private AI

Most AI databases can read you.

This one is designed not to.

Sealed envelopes. Blind indexes. The key never lives on the server. RAG and agent memory sit on that — not on a vendor that holds plaintext at query time.

We did not ship new crypto in 1.3.1. We shipped the rule, in the open:

Default is strong. You can weaken it. It holds if you keep the key.

What gets refused next is already written. No surprise cut. No ops backdoor. No “encryption later.”

The rest is in the repo. Don’t take our word — run it.

npm install flash-zk
npx flashsh wrap-key

import { FlashClient } from "flash-zk";
const client = new FlashClient({ storagePath: "./flash_data" });

Then read the three pages. In that order.

1. Do this first
2. Mission
3. Security ahead

flash-zk@1.3.1 — same engine as 1.3.0. The difference is what we will no longer let you turn off.