Qanapi
Qanapi provides quantum-resistant, API-driven encryption and key management, including Smart Data Proxies and a Decentralized Key Management Service for defense, serving US Federal, Google Workspace enterprises, financial services, healthcare, and developer customers globally.
- Company typePrivate
- Founded2024
- HeadquartersWashington, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Qanapi does
Qanapi is a private cybersecurity company that provides quantum-resistant, API-driven encryption and key management, organized around two go-to-market suites. The Zero Trust Data Platform centers on the Qanapi Encryption API, which exposes AES-256 (FIPS 140-2 symmetric) and RSA-2048/4096 (asymmetric, BYO-key) encryption through Smart Data Proxies — project-scoped HTTP endpoints that selectively encrypt, classify, decrypt, or forward JSON payloads while preserving HTTP method, headers, and body structure. The Qanapi Productivity Suite bundles Google Workspace add-ons (KMS for Workspace, Hosted S/MIME for Gmail, Live Redaction for Google Docs, Email Data Classification) that ride on top of the Encryption API. The company is privately held under Qanapi, Inc. (a Delaware corporation and wholly owned subsidiary of Cocoon Data, Inc.) with an Australian affiliate (Cocoon Data Holdings Pty Limited) for non-North American customers, and is headquartered in Washington, DC with a registered office in Sydney.
The company serves four primary verticals: US Federal/Department of Defense (with a dedicated federal site and the new DKMS for 2026 NDS and Q-BID mandates), Global Public Sector, Financial Services & Tech, and Healthcare & Life Sciences. Compliance posture is built around FedRAMP, DoD IL4, CMMC 2.0, ISO 27001, PCI DSS, HIPAA, and GDPR. Revenue is generated through a freemium self-serve funnel, per-seat Productivity Suite subscriptions, usage-based API pricing, and quote-based federal/enterprise contracts distributed via Carahsoft, StackArmor, Second Front, ATX Defense, and the Google Cloud Marketplace. The technology is delivered as a multi-tenant cloud SaaS on Google Cloud Platform with optional Cloud HSM-backed master keys, native SIEM connectors, and an internal-only AI classification pipeline that does not send customer data to third parties.
Strategic activity in 2025 has centered on launching the Decentralized Key Management Service (DKMS) — an API-driven distributed KMS using Verifiable Concealed Shares (VCS) for operation in disconnected, intermittent, low-bandwidth (DDIL) environments — alongside federal channel build-out, Google Cloud Marketplace listing, and NVIDIA Inception membership. Leadership is led by founder/CEO/Chairman Trent Telford with CTO Paul Bockelman, CSO & VP Public Sector Martin Rieger, and VP Product Marketing Myrthe Doedens. Headcount sits at 11-50, no funding rounds or revenue figures are disclosed, and no named reference customers are publicly listed.
Qanapi firmographics
Firmographics- Name
- Qanapi
- Legal name
- Qanapi, Inc.
- Website
- https://qanapi.com
- Company type
- Private
- Founded year
- 2024
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Qanapi provides quantum-resistant, API-driven encryption and key management, including Smart Data Proxies and a Decentralized Key Management Service for defense, serving US Federal, Google Workspace enterprises, financial services, healthcare, and developer customers globally.
- Ownership category
- akta.pro rank
Qanapi industry classification
Industry- Product category
- Data Encryption and Key Management Software
- NAICS
- Security Systems Services (except Locksmiths) (561621), Software Publishers (5132)
- akta.pro primary industry
- Quantum-Safe Cryptographic Algorithms & Protocols (PQC) (HDAGAGAC)
- akta.pro secondary industries
- Quantum-Safe Data-at-Rest Protection (Storage/Database/File Encryption) (HDAGAGAI), Quantum-Safe Network Infrastructure & Migration (PQC-enabled Networking) (HDAGAFAG)
Keywords
Where Qanapi is headquartered
LocationHeadquarters
- HQ city
- Washington
- HQ country
- United States
- HQ region
- North America
Offices3 records
Markets served
Qanapi business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- Subscription Billing (Paid Tiers): Recurring subscription revenue after free trial converts to paid; bills are calculated daily on a pro-rata basis when new users are added, and renewals are billed per the agreed schedule. Refunds only issued where required by law.
- Freemium / Free Trial: Free trial of the Qanapi Productivity Suite and Zero Trust Bundle, plus a self-serve free sign-up at qanapi.cloud with no credit card required; trial converts to paid subscription unless cancelled.
- Per-Seat / Per-User Licensing: User subscriptions are provisioned per unique E-mail ID, with new authenticated users automatically billed monthly on a pro-rata basis; license model(s) purchased define allowed usage up to the number of subscriptions.
- Usage-Based API (Zero Trust Data Platform / Encryption API): API-tier pricing for the Encryption API and Smart Data Proxies, where customers pay for API access and consumption to encrypt/decrypt or forward data; distinct pricing page from the Productivity Suite.
- Channel / Marketplace Resale: Distribution through resellers (e.g., Carahsoft, StackArmor, Second Front, ATX Defense) and the Google Cloud Marketplace, where Qanapi is sold as "cocoondatakboss-gcp-public/qanapi-cse."
- Professional Services / Early-Access Programs: Lead-capture and "Register for Early Access" flow for the DKMS whitepaper targeting defense and coalition customers implies professional services, deployment support, and enterprise onboarding for mission-critical deployments.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free trial / Free sign-up for both Productivity Suite and Zero Trust Bundle (no credit card required) |
| Per seat | Monthly | Qanapi Productivity Suite (paid) — Google Workspace encryption add-ons (KMS, S/MIME, Live Redaction, Email Classification) |
| Usage-based | Pay-as-you-go | Zero Trust Data Platform / Encryption API — developer/enterprise API tier |
| Subscription | Annual | Enterprise / Federal Bundle (Zero Trust Federal Bundle) — quote-based |
Go-to-market motion6 records
Distribution channels6 records
Marketing channels11 records
Qanapi product offering
Product offeringCore offering
Qanapi sells a quantum-resistant Encryption API and Smart Data Proxy platform that lets developers and enterprises selectively encrypt, classify, decrypt, and forward sensitive fields inside any HTTP/JSON payload without changing application code. It offers a Decentralized Key Management Service (DKMS) for defense and coalition customers built around Verifiable Concealed Shares, plus a Google Productivity Suite of client-side encryption add-ons (KMS for Workspace, Hosted S/MIME for Gmail, Live Redaction for Docs, Email Data Classification) and a Zero Trust Federal Bundle for U.S. government buyers.
Product overview
Qanapi offers a unified Zero-Trust security platform at the data layer, organized around two go-to-market suites. The Zero Trust Data Platform centers on the Qanapi Encryption API (a quantum-resistant, FIPS 140-2 AES-256 / RSA-2048 / RSA-4096 encryption engine) and exposes its capabilities through Smart Data Proxies, with the new Distributed Key Management Service (DKMS) for defense customers, plus platform-level features such as SafeShare and AI Data Provenance. The Qanapi Productivity Suite bundles the Google Productivity Suite products — KMS for Google Workspace, Hosted S/MIME for Gmail, Live Redaction for Google Docs (Secure Collaboration), and Email Data Classification — which are packaged Qanapi applications that ride on top of the Encryption API. The company also offers a Zero Trust Federal Bundle for U.S. government and defense customers.
Differentiator
Problem solved
Functional benefit
Products and services
- Qanapi Encryption API Developer-facing HTTP API providing quantum-resistant, zero-trust encryption (AES-256 FIPS 140-2, RSA-2048/4096) with optional Cloud HSM-backed master keys. Encrypts, decrypts, classifies, and optionally forwards any HTTP/JSON payload via Smart Data Proxies, targeted at developers, security engineers, and enterprise integrators handling sensitive data across cloud apps and APIs.
- Distributed Key Management Service (DKMS) API-driven, decentralized key management service that uses Verifiable Concealed Shares (VCS) to maintain cryptographic operations in disconnected, intermittent, and low-bandwidth (DDIL) environments. Purpose-built for U.S. Department of Defense, federal agencies, and coalition defense partners that must meet the 2026 National Defense Strategy data-centric security mandates and the DoW's Quantum and Battlefield Information Dominance (Q-BID) Critical Technology Area requirements.
- KMS for Google Workspace (Client-Side Encryption Workspace) Key Management Service that gives organizations complete control over their Google Workspace data by encrypting it client-side before it reaches Google's servers, leveraging the underlying Encryption API. Targeted at enterprises standardized on Google Workspace that need data sovereignty and regulatory compliance.
- Hosted S/MIME for Gmail Hosted S/MIME email signing and encryption service for Gmail that secures communications with advanced cryptographic protection and access controls for sensitive messages, targeted at Gmail-using enterprises that need signed and encrypted email.
- Live Redaction for Google Docs (Secure Collaboration) Implements multi-level classification redaction inside Google Docs, enabling secure collaboration on documents containing sensitive information without sacrificing productivity, for organizations that need to redact sensitive content in collaborative Docs.
- Email Data Classification Categorizes sensitive data within emails and ensures each message carries the required data classification markers in line with the customer's classification schema. Targeted at regulated organizations that need consistent classification of email content for compliance and downstream controls.
- Zero Trust Data Platform Single unified platform delivering zero-trust security at the data layer, bundling the Qanapi Encryption API, Smart Data Proxies, Live Redaction, Hosted S/MIME, Email Classification, AI Data Provenance, SafeShare, and the Distributed Key Management Service. Sold on a usage-based API pricing tier and targeted at developers and enterprises embedding encryption into APIs and SaaS products.
- Qanapi Productivity Suite (Google Productivity Suite) Per-seat subscription suite packaging KMS for Google Workspace, Hosted S/MIME for Gmail, Live Redaction for Google Docs, and Email Data Classification. Sold as a productivity-focused subscription offering for enterprises standardized on Google Workspace that need client-side encryption, S/MIME, and classification.
- Zero Trust Federal Bundle Government-focused bundle of Qanapi capabilities positioned for U.S. federal customers and the defense sector. Sold via direct sales and channel partners including Carahsoft, StackArmor, and Second Front, with quote-based enterprise pricing aligned to FedRAMP, DoD IL4, CMMC 2.0, and 2026 NDS / Q-BID requirements.
Quantifiable outcome
- Encryption API deployable in minutes via cURL/SDK to protect data on any network, cloud, application or device
- +4 more outcomes
Companies that use Qanapi
Customer profileSegments6 records
Ideal customer profiles6 records
Qanapi technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration22 records
AI capability7 records
Feature8 records
Qanapi partnerships and signals
Strategic signalPartnerships
16 partnerships are on record, tiered flagship defense partner, flagship cloud distribution, flagship public-sector distributor, strategic defense partner, strategic federal channel partner, adjacent ecosystem program, core logging integration, secondary logging integration (in development) and adjacent integration template.
- ATX Defenseflagship defense partnerATX Defense is featured on Qanapi's homepage "Our trusted partners" row with logo linking to atxdefense.com, indicating a co-marketing or reseller relationship in the defense/coalition segment that aligns with Qanapi's DKMS and NDS/Q-BID positioning.
- Google Cloud Marketplace (cocoondatakboss-gcp-public/qanapi-cse)flagship cloud distributionQanapi's client-side encryption product is listed on the Google Cloud Marketplace, allowing GCP customers to subscribe and procure through their existing cloud billing relationship; integrated with Google Workspace as primary product surface.
- Carahsoftflagship public-sector distributorCarahsoft is the leading US Government IT solutions provider and is featured on Qanapi's homepage as a trusted partner; the dedicated carahsoft.com/qanapi landing page positions Carahsoft as the procurement channel for Qanapi's federal and public-sector customers.
- Second Front Systemsstrategic defense partnerSecond Front is featured on Qanapi's trusted-partners row with a link to secondfront.com; Second Front accelerates delivery of commercial software to the DoD, suggesting joint positioning to bring Qanapi's DKMS / encryption technology to defense end users.
- StackArmorstrategic federal channel partnerStackArmor is featured on Qanapi's homepage with logo linking to stackarmor.com; positioned as a federal/compliance-focused channel partner that resells or implements Qanapi's zero-trust data and encryption platform to government customers.
- NVIDIA (NVIDIA Inception Program)adjacent ecosystem programQanapi is a member of the NVIDIA Inception Program, which supports AI-focused startups; the Inception badge appears on Qanapi's homepage partner strip, providing access to NVIDIA's startup/AI ecosystem for marketing and go-to-market visibility.
- Splunkcore logging integrationSplunk Connector is offered as a built-in Log Destination inside Qanapi projects, sending events to Splunk Cloud or Splunk Enterprise for SIEM and security monitoring of encryption/decryption activity.
- Google Cloud Loggingcore logging integrationGoogle Cloud Logging connector in Qanapi projects sends events into Google Cloud Logging, which can then be ingested by Google Chronicle for SIEM functionality; complements Qanapi's GCP datacenter footprint.
- Exabeamsecondary logging integration (in development)Exabeam Connector listed in Qanapi docs as "Coming Soon" — planned Log Destination that will forward Qanapi events to Exabeam's SIEM platform.
- Atlassian Confluenceadjacent integration templateAvailable as a pre-configured integration Template in Qanapi's dashboard Templates tab; lets customers integrate Qanapi's encryption into Confluence via Qanapi's proprietary AI-generated code.
- Atlassian Jiraadjacent integration templateListed as a quickstart integration Template inside Qanapi's dashboard for embedding Qanapi encryption into Jira workflows.
- Monday.comadjacent integration templatePre-built integration Template in Qanapi's dashboard for protecting sensitive data in Monday.com workspaces.
- Workdayadjacent integration templatePre-configured integration Template for encrypting Workday data through Qanapi's API.
- Asanaadjacent integration templatePre-built integration Template for encrypting task/project data in Asana via Qanapi's encryption API.
- Stripeadjacent integration templateStripe integration Template available for encrypting payment-related fields (e.g., card numbers, CVV) through Qanapi before they reach Stripe endpoints.
- Salesforceadjacent integration templateSalesforce integration Template offered for protecting customer/CRM data via Qanapi's encryption API.
Scale indicators8 records
Recent moves6 records
Expansion highlights7 records
Qanapi competitors and assessment
Company assessmentDirect peers
- HashiCorp Vault: Industry-standard secrets and key management platform used by enterprises for encryption key lifecycle, policy enforcement, and dynamic secrets — directly comparable to Qanapi's API-driven Encryption API and DKMS offerings.
- Virtru: Direct competitor in client-side encryption for Google Workspace and Microsoft 365, with end-to-end encryption, key management, and data classification — overlapping directly with Qanapi's Productivity Suite products (KMS, S/MIME, Live Redaction).
- Baffle: Startup focused on record-level encryption and zero-trust data security for cloud databases and data lakes — comparable to Qanapi's selective field encryption and Smart Data Proxy approach.
- Keyfactor: PKI-as-a-service and machine identity management vendor that addresses enterprise certificate and key lifecycle — adjacent to Qanapi's DKMS positioning around key distribution and crypto-agility.
- Skyflow: API-driven data privacy vault offering field-level encryption, tokenization, and governance for PII/PHI/PCI data — directly comparable to Qanapi's Encryption API and Smart Data Proxies for regulated workloads.
Broad incumbents
- AWS Key Management Service (KMS): Hyperscaler-native key management with FIPS 140-2/3 validated HSMs and growing PQC support — a baseline alternative Qanapi must displace in any cloud-resident deployment.
- Entrust: Long-standing PKI, HSM, and key management vendor serving financial services and government — competes with Qanapi on encryption, key management, and digital signature/S/MIME workflows.
- Google Cloud Key Management: Native KMS offering in GCP, tightly integrated with Google Workspace client-side encryption — directly competes with Qanapi's Workspace products and is also Qanapi's underlying infrastructure (channel partner AND competitor).
- Thales (including Imperva and SafeNet): Major incumbent in HSMs, enterprise key management, and data-at-rest encryption with FIPS-validated hardware — the legacy supplier Qanapi's DKMS and API strategy is positioned against in federal and regulated markets.
Emerging players
- Duality Technologies: Privacy-enhancing computation vendor using homomorphic encryption for data collaboration — shares Qanapi's posture of making advanced cryptography developer-accessible via APIs in regulated environments.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Qanapi social profiles
Digital presenceQanapi compliance and trust
Trust signalCompliance11 records
Qanapi financial estimates
Financial estimateRevenue estimate
Valuation estimate
Qanapi leadership team
Management profileNumber of profiles
Profiles4 records
Qanapi subsidiaries and ownership
Company hierarchySubsidiaries1 record
Qanapi funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Qanapi M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Qanapi
What does Qanapi do?
Qanapi sells a quantum-resistant Encryption API and Smart Data Proxy platform that lets developers and enterprises selectively encrypt, classify, decrypt, and forward sensitive fields inside any HTTP/JSON payload without changing application code. It offers a Decentralized Key Management Service (DKMS) for defense and coalition customers built around Verifiable Concealed Shares, plus a Google Productivity Suite of client-side encryption add-ons (KMS for Workspace, Hosted S/MIME for Gmail, Live Redaction for Docs, Email Data Classification) and a Zero Trust Federal Bundle for U.S. government buyers.
Is Qanapi a public or private company?
Qanapi is a private company. It is classified as corporate owned and is currently operating.
When was Qanapi founded?
Qanapi was founded in 2024. It employs 11 to 50 people.
Where is Qanapi based?
Qanapi is headquartered in Washington, United States, in the North America region.
How does Qanapi make money?
Six revenue lines are on record. Subscription Billing (Paid Tiers) is the primary driver. The others are freemium / Free Trial, per-Seat / Per-User Licensing, usage-Based API (Zero Trust Data Platform / Encryption API), channel / Marketplace Resale and professional Services / Early-Access Programs.
Who are Qanapi's main competitors?
Direct peers on record are HashiCorp Vault, Virtru, Baffle, Keyfactor and Skyflow. Broad incumbents are AWS Key Management Service (KMS), Entrust, Google Cloud Key Management and Thales (including Imperva and SafeNet). Duality Technologies is listed as an emerging player.
Does Qanapi have an API?
Yes. Qanapi offers a public developer API for encryption, decryption, and key management across two versions. API v1 is exposed via Smart Data Proxy HTTP endpoints (https://your-tenant.qanapi.cloud/proxy/{project_id}) that act as intermediaries to encrypt, classify, decrypt, or forward data with headers X-Qanapi-Authorization (API key), X-Qanapi-Mode (encrypt/decrypt), X-Qanapi-Fields (comma-separated fields), X-Qanapi-Classification, X-Qanapi-Destination, and Content-Type. API v2 is a JSON-based programmatic API with authentication via JWT bearer tokens (login, refresh, logout, retrieve user details). Officially supported SDKs for API v2 are published for TypeScript/JavaScript (npm: qanapi), Python (PyPI: qanapi), and Golang (github.com/qanapi/qanapi-sdk-golang). The SDK client supports configurable baseURL, subdomain, apiKey, logLevel, and maxRetries. Authentication uses API keys for the proxy and JWT bearer tokens for v2. The service offers a free trial/sandbox and tiered pricing. Developer documentation is at docs.qanapi.com.
What industry is Qanapi in?
Qanapi's product category is Data Encryption and Key Management Software. Its primary akta.pro industry code is HDAGAGAC, Quantum-Safe Cryptographic Algorithms & Protocols (PQC), with a secondary code of HDAGAGAI, Quantum-Safe Data-at-Rest Protection (Storage/Database/File Encryption). Its NAICS code is 561621.