Duality Technologies

• Oracle distributes Duality through its cloud marketplace and Red Hat supplies infrastructure beneath it, and either could ship simpler privacy features that satisfy buyers who do not need computation on encrypted data.
• Duality publishes its encryption engine as open source, so a rival can build a competing platform on the same library without licensing anything from Duality.
• No revenue, customer count, or commercial contract value appears in the reviewed record, so the documented government work may not yet represent a repeatable commercial motion.
• If encrypted collaboration stays a programme-funded pilot purchase, revenue could remain episodic rather than recurring.

Duality sells to institutions whose records are hard to move. Health registries, banks, and defense agencies own data whose value depends on combining it with data held by someone else, and the UK government describes large-scale export of patient-level records as slow, costly, and in some cases impossible.

The pain is documented rather than asserted. Describing a cancer-research pilot built on Duality's platform, the UK's Department for Science, Innovation and Technology reported that the national disease registry worked through a process that typically takes over a year for international collaborations in roughly two months, and noted that some childhood cancer subtypes affect fewer than two children per million each year, and pooling records across a larger geography is what makes robust analysis possible.

The market stays specialized. The homepage offers financial services, healthcare, government, and marketing as separate solution sets, while the work the reviewed record documents is government and research programmes rather than a broad commercial base. [s7, s1, s3]

The Duality Platform packages three capabilities behind one product: secure querying, collaborative AI, and federated analytics, orchestrated by the Duality Assistant Agent. A customer can run an encrypted query against a partner's dataset, train a model across several organizations, or analyze decentralized records while each party keeps control of its own.

Underneath sits a set of privacy techniques rather than one. The vendor names homomorphic encryption, differential privacy, multiparty computation, federated learning, and trusted execution environments, and integrates through an SDK and a REST API. An engineering post on Red Hat's site, co-written with Duality, documents how the pieces fit: attestation of the enclave, key exchange between the parties, a policy layer that denies access until permission is granted, verification that the agreed code is what runs, and per-node audit logging.

The encryption engine is public. Duality states its platform is built with OpenFHE, an open-source library released under a two-clause BSD licence and carried as a fiscally sponsored project of the NumFOCUS non-profit, whose repository shows version 1.5.1 in April 2026. [s2, s21, s5, s14]

Duality competes with other vendors applying homomorphic encryption to regulated data sharing. Covering the 2021 Series B, TechCrunch named Enveil and Paris-based Zama alongside IBM as companies working to apply the technique to enterprise data.

The sharper pressure comes from its own partners. Oracle offers the platform through its cloud marketplace and Red Hat supplies the confidential-computing infrastructure beneath it, so the platform reaches buyers and runs on layers larger vendors own. Its differentiation is the multi-party collaboration layer and the cryptographic bench behind it rather than exclusive technology, since the encryption library is published for anyone to use. [s11, s19, s21, s5]

Partners and government programmes carry the go-to-market. Oracle's newsroom states that the Duality platform is available in Oracle Cloud Marketplace and deployable on Oracle Cloud Infrastructure, and Duality announced a Red Hat partnership in June 2026, a month after the two published a joint architecture.

A government department documented one pilot itself. The UK's Department for Science, Innovation and Technology published how NHS England's National Disease Registration Service and the US National Cancer Institute studied ultra-rare childhood tumours on the Duality platform, with the code moving to the data rather than the data to the code.

Scale stays undisclosed. Announcing a strategic investment, the UK's National Security Strategic Investment Fund describes Duality as moving its technology into production with national security and defence customers, but no revenue figure, customer count, or commercial contract value appears in the reviewed record. [s19, s22, s7, s8, s21]

Duality's founders helped build the field the company sells into. Co-founder and chief scientist Shafi Goldwasser received the ACM Turing Award in 2012. Co-founder and chief cryptographer Vinod Vaikuntanathan is an MIT professor whose name sits in the BGV scheme the OpenFHE library implements. Co-founder and CTO Kurt Rohloff co-founded the PALISADE open-source encryption library and led the defense-industry consortium that developed it.

The commercial bench is thinner in the reviewed record. CEO Alon Kaufman was RSA's global director of Data Science and Innovation before founding Duality and is the quoted voice in the company's announcements. Below the founders, the reviewed sources document the scientific leadership far better than the sales organization. [s4, s14, s6]

Duality publishes a hosted trust portal. Its Scrut-hosted Trust Vault lists Cyber Essentials v3.2, ISO 27001:2022, and GDPR under compliance. No SOC 2 attestation appears on the probed trust surfaces.

The certifications cover the company rather than the cryptography. No validation of the encryption implementation itself appears on those surfaces, so the buyer-facing assurance argument leans on published code: the library the platform is built with is open to inspection and its repository shows a release in April 2026. [s15, s5, s14]

Add analyzed competitors to compare them side by side with Duality Technologies.

Duality sells to organizations whose data is hard to move. Its CEO names defense agencies, financial institutions, and healthcare systems as the groups locked out of modern AI, and the UK government describes large-scale export of patient-level records as slow, costly, and in some cases impossible. The June 2026 Red Hat announcement addresses governments and regulated enterprises that need sovereign AI without centralizing sensitive data.

The public evidence concentrates on the government end of that range. The UK's Department for Science, Innovation and Technology ran a cross-border cancer study on the platform, Oracle offers it to government and defense customers through its cloud marketplace, and the UK's National Security Strategic Investment Fund describes production work with national security and defence customers.

The commercial surface is wider than the evidence behind it. The homepage offers financial services, healthcare, government, and marketing as separate solution sets. The about page names Scotiabank among the organizations it says partner with Duality, and IEEE Spectrum reports its chief executive saying the software already helps financial firms check for fraud. The deployments the reviewed sources describe in any detail are the government ones.

The Duality Platform packages three capabilities behind one product: secure querying, collaborative AI, and federated analytics, orchestrated by the Duality Assistant Agent. Customer organizations can run encrypted queries on external datasets, train and deploy models in secure environments, and analyze decentralized data while each party keeps control of its own records.

The engineering underneath is documented in public. An engineering post on Red Hat's site, co-written with Duality, sets out enclave attestation, key exchange through Red Hat's Key Broker Service, a policy layer that denies access to assets until permission is granted, verification that the code all parties agreed to is what executes, and a built-in logging system that captures every operation and session.

The cryptographic bench shows in the components. Co-founder Vinod Vaikuntanathan is credited on the company's leadership page as co-inventor of most modern fully homomorphic encryption systems, DARPA selected Duality in 2021 to lead one of four teams building hardware to accelerate encrypted computation, and IEEE Spectrum reported that the team's chip was designed to accelerate software the company had already commercialized.

Duality reaches its market through partners and government programmes more than through visible direct sales. Oracle's newsroom states that the platform is available in Oracle Cloud Marketplace and deployable on Oracle Cloud Infrastructure, and an Oracle vice president frames the listing as a way for its customers to collaborate securely on sensitive data. Red Hat and Duality announced a partnership on 17 June 2026.

The deployment evidence is a government pilot. The UK's Department for Science, Innovation and Technology published how NHS England's National Disease Registration Service and the US National Cancer Institute studied ultra-rare childhood tumours on the Duality platform, with approved scripts executing inside the NDRS and NCI firewalls and only site-level aggregates leaving them. TechCrunch reported in 2021 that the Series B followed early deals including a US Department of Defense contract, and DARPA put Duality at the head of a federally funded research team.

What the record does not carry is commercial scale. The UK's National Security Strategic Investment Fund describes Duality as moving into production with national security and defence customers, but no revenue figure, customer count, or commercial contract value appears in the reviewed sources, and CEO Alon Kaufman remains the quoted voice in the company's announcements.

Duality publishes no pricing. The vendor's site routes interest to a demo request, and the reviewed sources do not document the unit the company charges by.

A demo-led route fits the buyers the record documents, since a platform that spans several institutions resists simple per-seat metering. No commercial deal size appears in the reviewed sources, and nothing in them supports a comparison against the conventional analytics tools competing for the same budget.

Duality delivers a platform the customer deploys on infrastructure it controls. It integrates with existing data assets, cloud storage, and workflows through an SDK and a REST API, and the Red Hat architecture extends the same posture to hybrid and sovereign environments where the protected computation runs on hardware the organization operates or rents.

Data preparation is part of the burden the product absorbs. The 4.6 release harmonizes distributed data and supports custom federated workloads so institutions with differently structured records can align them before analysis, which is the operational work multi-party projects typically stall on.

Standing up a collaboration is an organizational project. The UK government's account describes cycles of information governance, cybersecurity checks, and analytical assurance around the pilot, and those cycles ran faster than the year such approvals usually take because the privacy guarantees were designed into the architecture.

Duality publishes a hosted trust portal. Its Scrut-hosted Trust Vault lists Cyber Essentials v3.2, ISO 27001:2022, and GDPR under compliance. No SOC 2 attestation appears on the probed trust surfaces.

The certifications cover the organization rather than the cryptography. No validation of the encryption implementation itself appears on those surfaces, of the kind cryptographic-module programmes issue. For a product whose purpose is a privacy guarantee, the assurance argument instead rests on inspectable code and on attestation inside the running system: the library the platform is built with is published openly, and the Red Hat architecture describes the platform verifying that the code all parties agreed to is what runs in the enclave.

Duality open-sources its cryptographic core. The vendor states its secure data collaboration platform is built with OpenFHE, the open-source library it leverages alongside other community members, and the project is carried as a fiscally sponsored project of the NumFOCUS non-profit under a permissive licence. Its repository shows version 1.5.1 released in April 2026 and credits DARPA support for the work.

The open core buys standards credibility and seeds an ecosystem while the commercial platform sells the collaboration workflow above it. Co-founder Kurt Rohloff had already co-founded PALISADE, an earlier open-source homomorphic encryption library developed with a defense-industry consortium, so publishing the engine repeats a pattern rather than marking a recent concession.

Two partners create absorption risk. Oracle lists the platform in its cloud marketplace and Red Hat supplies the confidential-computing infrastructure beneath it, so one partner carries it to market and the other owns a layer it runs on. Duality's about page names Intel, IBM, and Oracle among its partner organizations more broadly.

Duality's founding team concentrates the inventors of its own field. Co-founder and chief scientist Shafi Goldwasser received the ACM Turing Award in 2012. Co-founder and chief cryptographer Vinod Vaikuntanathan, an MIT professor, is credited as co-inventor of most modern fully homomorphic encryption systems, and the OpenFHE library implements the BGV scheme that carries his name. Co-founder and CTO Kurt Rohloff co-founded the PALISADE open-source library and led the defense-industry consortium that developed it.

The commercial side pairs that science with operator leadership. Co-founder and CEO Alon Kaufman was RSA's global director of Data Science and Innovation before founding Duality and fronts the company's public announcements. The leadership page names vice presidents for product and for operations and customer success, though the reviewed sources document the founders in far more depth than the commercial organization.