Sovereign Digital Identity
Your identity,
not theirs.
A digital identity that belongs to you - created on your own device, pseudo-anonymous by default, and built so we couldn't read your data even if we wanted to.
Why it matters
A different shape of digital ID
Digital identity is becoming essential to everyday life - banking, healthcare, voting, work, social media. Most of the systems being rolled out concentrate that power with a single issuer who sees every use. Flowsta Identity is built around a different idea: the keys to your identity belong to you, no single party gates access, and no one - including us - needs to see what you do with it.
Built from a single principle.
You shouldn't have to trust anyone - including us - to keep your digital identity safe. So we built it so no single party can read it, lose it, freeze it, or take it away. Your identity is created in the Flowsta Vault on your own device. Your keys and your data live there - encrypted, never on our servers - and everything derives from a 24-word recovery phrase only you hold. Flowsta is how you use your identity. Not who holds it.
What makes it different
Six things that set it apart
Pseudo-Anonymous by Default
Your identity is a cryptographic key, not a real name. Use it without revealing who you are - until you choose to.
Decentralized
Powered by Holochain - no central server to hack, no single company to deplatform you, no single point of failure.
Zero-Knowledge
Mathematically impossible for anyone to read your data - not even Flowsta. The architecture, not the policy.
No Activity Trail
What you do inside apps never touches our servers. There's no central log of your behavior to mine, sell, or hand over.
You Can Leave
If Flowsta-the-company vanished tomorrow, your identity still works. Open standard, runs on any Holochain conductor.
Verifiable Trust
The parts that touch your keys are open source. Anyone can audit. You don't have to trust us - the math does the work.
Pseudo-anonymous, plainly
Anonymous unless you choose otherwise
Your Flowsta Identity is a cryptographic key - not a name, an address, or a government number. You can sign in, sign files, link devices, and use any app on the standard without ever revealing who you are in real life.
If you choose to share your Flowsta DID or one of your Holochain agent IDs publicly - by posting it, putting it on a website, or attaching your real name to your account - you've chosen to associate that identity with yourself. Until then, what you do with it stays separate from who you are.
That's the difference between anonymous (no identifier at all) and pseudo-anonymous (a stable identifier that doesn't have to be tied to a real name). Pseudo-anonymity lets you build a reputation, sign work as the same author over time, and be recognised across services - without giving up the right to be private when you want it.
A different design
How it differs from centralized digital ID
Most digital identity schemes being rolled out solve real problems - and we don't want to take that away. The difference is structural. Here's how it lands at the points that matter for you.
Centralized digital ID
A single party - usually a government or large company.Flowsta Identity
You do. Your identity comes from your own 24-word recovery phrase.Centralized digital ID
One government-issued number across every service that asks for it.Flowsta Identity
A key you created - not a number in anyone's registry. You choose what each app learns about you.Centralized digital ID
Every use can be logged centrally and correlated over time.Flowsta Identity
You approve every use on your own device, and what you do inside apps stays between you and them.Centralized digital ID
Recovery goes through the issuer - or it's not possible at all.Flowsta Identity
Your recovery phrase restores everything. You control it.Centralized digital ID
Your identity goes with it.Flowsta Identity
Your keys and data are already on your device, so everything keeps working. The standard is open.In practice
What you can do with it
Sign in to apps
One login for Flowsta, Sign It, third-party Holochain apps and any service that supports the standard.
Sign your files
Use Sign It to cryptographically sign anything you make. Your authorship and rights, verifiable by anyone.
Run Holochain apps
Vault hosts a local conductor. Third-party Holochain apps install alongside your identity - you approve every connection.
More on the way - proof of humanity, AI agents that act on your behalf, and an open ecosystem of third-party apps.
Verifiable trust
You don't have to trust us
The parts of the system that handle your identity and your keys - Flowsta Vault, the Holochain network code, the SDKs - are open source. Anyone can read them. Anyone can build their own client against the same standard.
The other parts of our stack (the billing system, the dashboard, the coordination layer) aren't open source - but they don't need to be for your privacy. The system is built so that even if we wanted to read your identity data, we couldn't. That's what zero-knowledge really means: it isn't us promising not to look - it's a system built so we can't.
And nothing is shared without your say-so: apps can read your private data only when you consent - and without it, that data is mathematically out of reach to everyone else, us included.
In short: you don't have to take our word for any of this. The cryptography is open. The math is the same for everyone. We built it so we couldn't snoop even if we wanted to.