Blind Insight Wants Every Hospital and School District to Query Encrypted Data Without Decrypting It

The Santa Monica startup, backed by Sequoia at pre-seed, is selling APIs that promise searchable encryption for HIPAA and FERPA workloads.

About Blind Insight

Published

On the product page for Blind Insight, the pitch is unusually concrete for a cryptography startup: NIST-approved, FIPS-compliant encryption that keeps data protected even during processing and analysis, exposed to developers through an API and a free beta at beta.blindinsight.io [Blind Insight]. That sentence is the entire bet. If a hospital analyst can run a query against patient records, or a school district can join two datasets about student outcomes, without either party ever seeing the underlying plaintext, then a large category of compliance friction quietly disappears. The Santa Monica company, founded in 2022, is trying to turn that promise into a developer platform.

The bet

Blind Insight sells what it calls a private data platform that combines real-time searchable encryption with fine-grained programmable data access controls [Blind Insight]. In plain terms: data stays encrypted at rest, in transit, and during computation, and the people who can query it are gated by policies the customer writes. The company is pointing the product squarely at regulated verticals. Its healthcare page talks about HIPAA-compliant analytics for hospital systems and software vendors that want to mobilize internal data for quality improvement and product development without internal theft or accidental exposure [Blind Insight]. A separate insights post argues that K-12 districts urgently need privacy-preserving tech in the wake of a major 2024 student data breach [Blind Insight]. The ICP, then, is fairly readable from the marketing: a mid-market healthcare software company, a hospital system data team, or a district-level EdTech buyer, with a developer or security architect as the technical champion and a compliance officer as the budget co-signer. Pricing is published on the site, which suggests a self-serve motion sitting underneath any enterprise contract [Blind Insight].

Why it could be big

Searchable and computable encryption has been an academic conversation for two decades. What is different now is that the buyers have stopped treating data residency, pseudonymization, and breach exposure as paperwork problems and started treating them as architecture problems. The European Data Protection Board's recent pseudonymization guidelines, which Blind Insight has written about, are pushing engineering teams to find tooling that lets them keep using sensitive datasets without holding the raw values [Blind Insight]. Healthcare analytics, clinical research collaborations, and EdTech vendors selling into districts all need a credible answer when a procurement team asks who can see the data and under what conditions.

The investor signal here is the loudest fact in the file. Crunchbase records a pre-seed round led by Sequoia Capital, with Altari Ventures and 500 Global also on the cap table [Crunchbase]. Sequoia does not write many pre-seed checks, and when it does, it tends to write them into infrastructure categories where the firm believes a default standard is up for grabs. Privacy-enhancing technology, or PETs, is one of those categories. If Blind Insight becomes the API that healthcare ISVs and EdTech vendors call when they need to handle regulated data, the upside looks like a developer-platform business rather than a services consultancy.

The team and traction

The founding team is the second reason to take the company seriously. Jackie Peters is listed as Founder and CEO [Crunchbase]. Nick Sullivan is technical co-founder; his LinkedIn lists service on the Internet Architecture Board, which is a rare credential for a pre-seed cryptography startup and matters for a product whose entire credibility rests on protocol-level correctness [LinkedIn]. Jathan McCollum is CTO, with a prior operating background that includes Textla [LinkedIn]. Three co-founders, one of them with deep standards-body roots, is a defensible shape for a company that will eventually need to win architecture review conversations inside Epic-adjacent shops and at large districts.

Round Date Lead Other Investors
Pre-seed Dec 31, 2024 Sequoia Capital Altari Ventures, 500 Global

Source: [Crunchbase]

The honest counterfactual

The bear case is not about the cryptography. It is about the sales motion. Searchable encryption has historically struggled because the procurement cycle in healthcare and education is long, the budget owner is often a CISO who wants a named reference customer in the same vertical, and the renewal motion depends on whether the encrypted query layer actually gets wired into production analytics, not just a pilot. Competitors in the broader confidential computing and PETs space include Duality, Enveil, Opaque Systems, and the confidential computing offerings from the major clouds, each of which has a head start on enterprise references. Bulls would answer that none of those vendors has won the regulated mid-market, where a developer-first API with published pricing and a free beta is a more natural fit than a six-figure enterprise license, and that the Sequoia-led round gives Blind Insight enough runway to land the first vertical-specific lighthouse customers [Crunchbase] [Blind Insight].

What to watch

Three things will tell the story over the next twelve months. First, named customers in healthcare or K-12, ideally with a quote from a CISO or a head of data, which would convert the marketing claims into a procurement reference. Second, a seed extension or a priced seed round, which Sequoia-backed pre-seeds typically raise within twelve to eighteen months and which would signal that early API usage is converting to contracts. Third, the shape of the developer funnel coming out of beta.blindinsight.io: how many teams are integrating the API, and in what verticals.

ICP, plainly stated: a regulated mid-market data team (healthcare ISV, hospital analytics group, or K-12 district technology office) with a developer champion and a compliance co-signer, buying an API to keep sensitive data usable without keeping it readable. Realistic competitive set: Duality, Enveil, Opaque Systems, and the confidential computing primitives shipped by AWS, Azure, and GCP, plus the in-house "we will just tokenize it ourselves" option that every security architect considers first. Procurement cycle, budget owner, renewal motion: that is the conversation I want to have with Jackie Peters in twelve months.

Pipe Haddad, Enterprise and SaaS Reporter, Startuply.

Read on Startuply.vc