Mydex Data Services Community Interest Company

What Mydex Data Services Community Interest Company does

Mydex Data Services Community Interest Company is a UK-based social enterprise, structured as a Community Interest Company (CIC) and headquartered in Edinburgh, that operates the Safe Secure Cloud platform for personal data infrastructure. The platform provides Personal Data Stores (encrypted at rest using SQLCipher/AES-256), a Personal Data Exchange (PDX) API for consent-based data sharing, Identity as a Service (IDaaS) supporting registration and multi-factor authentication, Master Reference Data Services integrating validated NHS content, the Inclued two-way engagement platform, a Web App Generator for service digitisation, and Circles of Support for guardianship. Authentication and data exchange use OpenIDConnect and OAuth2.0, with a comprehensive developer portal exposing Python SDKs and sandbox/production APIs.

The company serves two distinct user bases under a hybrid freemium and B2B subscription model. Individual citizens receive Personal Data Store services free for life, creating the underlying network of data-controlling individuals. Organisations — including UK government departments, local councils, NHS trusts, social care providers, financial services firms, and community organisations — subscribe to access the platform either directly or via the UK Government G-Cloud digital marketplace. Partnerships with NHS England and ALISS (Scotland) embed Mydex within national public-sector data ecosystems, and the company has maintained ISO/IEC 27001 certification for over 11 years. Mydex employs 11-50 staff and operates primarily in the United Kingdom with global API availability for direct enterprise deployments.

Name

Mydex Data Services Community Interest Company

Legal name

Mydex Data Services Community Interest Company

Website

https://mydex.org

Company type

Private

Founded year

2007

Operating status

Operating

Headcount range

11–50 employees

Short description

Mydex Data Services CIC is a UK social enterprise operating the Safe Secure Cloud platform, providing encrypted Personal Data Stores, consent-based data exchange APIs, and Identity as a Service to citizens (free) and public-sector and enterprise organisations (paid subscription).

Ownership category

akta.pro rank

Headquarters

HQ city

Edinburgh

HQ country

United Kingdom

HQ region

Europe

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales

Revenue model

1. Citizen Free Services: Personal Data Store and core personal data services are provided free to individual citizens for life. This creates the network of data-controlling individuals that organisations connect to.
2. Organisation Subscriptions: Government agencies, local councils, health and social care providers, and other organisations access Mydex platforms through subscription services. Services available via G-Cloud framework or direct contracts.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels8 records

Core offering

Mydex provides the Safe Secure Cloud, a personal data infrastructure platform comprising an encrypted Personal Data Store for citizens, a Personal Data Exchange API enabling consent-based data sharing between organisations and individuals, and Identity as a Service for registration, authentication and digital identity credentials. Built on these foundations are additional modules including the Inclued engagement platform, Master Reference Data Services, and a Web Application Generator for building compliant citizen services.

Product overview

Mydex Data Services CIC operates the Safe Secure Cloud, a platform-plus-modules architecture providing personal data infrastructure to citizens (free for life) and subscribing organisations (paid subscription). The core offering comprises: (1) the Personal Data Store — the foundational encrypted data repository citizens use to collect, store, and manage their personal data; (2) the Personal Data Exchange — the consent-driven data sharing layer connecting citizens with subscribing organisations; and (3) Identity as a Service — providing registration, authentication, and digital identity credential management. Built on top of these three core components are additional modules: the Inclued engagement platform, Master Reference Data Services (validated NHS, health, and geographic reference data), and the Web App Generator for rapidly creating compliant citizen-facing services. The Mydex Template System exposes structured templates (Modular About Me, Health & Wellbeing, My Support, Planning Ahead) via API. Circles of Support provides a formalised guardianship layer enabling supported self-service. All Personal Data Stores are encrypted at rest using SQLCipher. Services are available directly or via G-Cloud government procurement framework.

Differentiator

Problem solved

Functional benefit

Brands

• Safe Secure Cloud: The core platform providing Personal Data Store, Personal Data Exchange, Identity as a Service, Inclued Platform, Master Reference Data Services, and Web App Generator.
• Personal Data Store
• Personal Data Exchange
• Identity as a Service
• Inclued Platform
• Master Reference Data Services
• Web Application Generator

Products and services

• Personal Data Store Cloud-hosted, SQLCipher-encrypted personal data repository enabling citizens to collect, receive, store, and manage personal data about themselves and their lives. Organisations can deliver data into it as part of service delivery or collect data from it with citizen consent.
• Personal Data Exchange Services A data exchange layer enabling personal data to be collected, delivered, and distributed between organisations and citizens in a safe, secure, empowering, frictionless and efficient manner. Puts citizens in control of what data is used and how, enabling GDPR rights exercise and organisational transparency obligations.
• Identity as a Service Cloud-hosted identity service supporting registration, authentication, and ongoing management of privacy-protecting digital identity credentials via OpenIDConnect. Supports multi-factor authentication, profile management, identity assurance, and age verification.
• Inclued Platform Two-way engagement platform enabling safe, secure communication between citizens and organisations. Improves service access, enables participation, and builds community through personalised notifications and information, built on top of Personal Data Exchange and Identity as a Service.
• Master Reference Data Services Validated non-personal reference data service providing NHS conditions, medicines, live well content, mental health resources, pregnancy advice, countries, and postcode validations to reduce friction, effort, risk, and cost for individuals and organisations.
• Web App Generator Tool for transforming manual or paper-based services into simple, easy-to-use web applications that meet UK Government service design guidelines. Enables non-technical users to capture service requirements, map actors and data into storyboards, and generate compliant web applications integrated with PDX and IDaaS.
• Mydex Template System API-based system for rendering and interacting with elements of a member's Personal Data Store via logical groupings of attributes organised in a templates/modules/subsections hierarchy. Includes Modular About Me (MAM) feature blocks for personal data management.

Quantifiable outcome

• 94.5% performance improvement in batch SQL transactions (8 seconds to 0.44 seconds) through transaction optimisation
• +2 more outcomes

Named customers2 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Feature11 records

Partnerships

Two partnerships are on record, tiered core.

• NHS EnglandcoreTechnology or IntegrationMydex integrates NHS content services including Conditions, Live Well, Medicines, Mental Health, and Pregnancy content into its Master Reference Data Services. This enables validated health information to be used within personal data applications and service delivery.
• UK Government Digital Service (GDS)coreTechnology or IntegrationMydex services are available through G-Cloud framework and align with UK Digital Identity and Attributes Trust Framework (UKDIATF). The company is positioned as a 'Holder Service' enabling individuals to hold, use and share data independently of organisations that collect data about them.

Scale indicators2 records

Recent moves1 record

Expansion highlights5 records

Direct peers

• CitizenMe: Personal data management platform that lets individuals own, manage, and share their data with organisations. Directly comparable to Mydex's free-for-citizens Personal Data Store model and data-exchange value proposition.
• Yoti: UK-based digital identity platform providing reusable citizen identity credentials, age verification, and identity proofing. Directly comparable to Mydex's Identity as a Service product, with similar positioning around citizen-controlled identity and G-Cloud / UKDIATF alignment.
• OneID (OneID UK): UK digital identity provider focused on bank-verified reusable identities for citizen-facing services and KYC. Overlaps with Mydex's PDX / IDaaS stack on the consumer identity and data-sharing dimensions, especially for government and financial-services use cases.
• Digidentity: European digital identity provider with deep UK and EU government roots (GOV.UK Verify, eIDAS). Directly comparable to Mydex for trust-framework-aligned identity and personal data services, now part of an established European identity stack.

Broad incumbents

• Jumio: Established identity proofing and KYC vendor for financial services, healthcare, and government. Comparable in identity verification and authentication functions to Mydex's IDaaS, with broader geographic coverage.
• Veriff: Global identity verification platform offering biometric and document-based identity proofing for regulated industries. Comparable to Mydex's IDaaS and consent-based data exchange, with stronger scale and tooling for enterprise integration.
• Okta: Identity and access management incumbent serving enterprise and government. Comparable in authentication / federation mechanics to Mydex's IDaaS, but at much greater scale and breadth, with overlapping developer ecosystem.
• GBG Group: Established identity verification and location/anti-fraud vendor serving financial services and public sector globally. Competes with Mydex's Identity as a Service for KYC and onboarding use cases, with a much broader product portfolio and enterprise distribution.

Emerging players

• Solid (Inrupt): Tim Berners-Lee's personal data store / data wallet project with a similar person-centric control model. Overlaps conceptually with Mydex's PDS, with stronger brand recognition but narrower production deployments today.
• NorthRow: UK RegTech / digital onboarding vendor providing identity verification and KYC for property, financial services, and public sector. Adjacent comparator to Mydex's IDaaS and PDX consent workflows for regulated industries.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat6 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/mydexcic
• LinkedInlinkedin.com/company/mydex-cic/?viewAsMember=true
• Facebookfacebook.com/201365884697

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Mydex Data Services Community Interest Company