# ANKATech

> ANKATech Solutions Inc. builds ANKASecure©, a Cryptographic Control Plane for the enterprise: cryptography governed by runtime policy instead of hardcoded in applications, across classical, post-quantum and composite hybrid algorithms.

ANKASecure© sits between enterprise applications and cryptographic execution. Applications reference a stable key identifier; the platform resolves the algorithm, the key material and the policy at runtime, executes the operation, and records it in a signed, verifiable audit trail. Changing an algorithm — including the migration from RSA/ECC to NIST post-quantum standards — is a policy update, not an application rewrite. Post-quantum readiness is the catalyst; long-term cryptographic governance is the outcome.

## What ANKASecure© is

- **Category**: Cryptographic Control Plane (the reference architecture is published at https://cryptographiccontrolplane.org — ANKASecure© is its originating implementation)
- **Framework**: CAPA — Crypto Agility Posture Architecture (five pillars, six maturity levels)
- **Root of trust**: the customer's own HSM (Thales Luna, Entrust nShield, AWS CloudHSM) or cloud KMS (AWS KMS, GCP KMS, Azure Key Vault / Managed HSM); key material never leaves the customer's custody domain
- **Deployment models**: SaaS (operated by ANKATech), Private Cloud, On-premise (air-gapped supported)

## Capabilities

- **Cryptographic operations**: encrypt, decrypt, sign, verify, re-encrypt, re-sign, sign-then-encrypt; compact (JOSE JWE/JWS) and streaming for files of any size with constant memory and no disk materialisation
- **Algorithms**: 120+ (80+ single-component across 21+ families, 40+ composite hybrid classical + post-quantum), including ML-KEM (FIPS 203), ML-DSA (FIPS 204), SLH-DSA (FIPS 205), FALCON, and regional families (KISA, CRYPTREC, MySEAL)
- **Key lifecycle**: stable key identifiers with versioned material; rotation without re-encryption and without application changes; nine lifecycle states; import of PKCS#12 / JKS keystores
- **Policy governance**: algorithm availability, rotation and lifecycle policies per deployment and per tenant; 29 templates aligned with NIST, NSA CNSA 2.0, BSI, ANSSI, ETSI, CRYPTREC, KISA and more; sub-second propagation; five-pillar cryptographic posture measurement
- **Governed third-party exchange**: cryptographic capabilities granted to counterparties instead of sharing keys — scoped by exchange context and constraint policy, revocable unilaterally, every invocation audited
- **Evidence**: HMAC-signed, hash-chained audit trail with integrity verification; forwarding to SIEM/XDR (Splunk, Microsoft Sentinel, QRadar/ArcSight via Syslog CEF, OCSF webhooks); observability export over OpenTelemetry
- **Digital signatures with long-term evidence**: RFC 3161 qualified timestamps embedded as JAdES; detached signatures for large files
- **Legacy modernization**: PKCS#7 / S/MIME to JOSE conversion, then re-signing and re-encryption to post-quantum algorithms

## Interfaces

- **REST API** described in OpenAPI 3.0 — any language
- **Java SDK** (data plane) and **Java Admin SDK** (control plane)
- **Crypto CLI** and **Admin CLI** with interactive and batch modes
- **Admin Console** web application

## Who we serve

Financial services, healthcare, government and defense, technology platforms, and critical infrastructure — organizations with long-lived sensitive data, regulatory cryptographic mandates, or third-party data exchange.

## Licensing

Three editions — Standard, Professional, Enterprise — sold sales-assisted; proofs of concept run on-premise in the customer's environment.

## Contact

- Website: https://ankatech.co
- Email: info@ankatech.co
- Documentation: https://docs.ankatech.co
- Reference architecture: https://cryptographiccontrolplane.org

## Pages

- https://ankatech.co/en — Homepage
- https://ankatech.co/en/platform — The platform
- https://ankatech.co/en/pricing — Editions
- https://ankatech.co/en/compliance — Regulatory frameworks and evidence
- https://ankatech.co/en/capa — CAPA maturity model and self-assessment
- https://ankatech.co/en/assessment — PQC risk assessment
- https://ankatech.co/en/docs — Developer documentation
- https://ankatech.co/en/start/security-leaders — For executives
- https://ankatech.co/en/start/developers — For developers
- https://ankatech.co/en/start/partners — Partner program
- https://ankatech.co/en/about — Company
- https://ankatech.co/en/contact — Contact