About ValiDeck
ValiDeck is an infrastructure company working at the intersection of payment systems, commerce data, and privacy engineering. It is developing PCX (the Privacy-Compliant eXtensible protocol), a proposed technical framework through which transaction records produced by different merchants and payment channels can be normalized and handled under a consistent set of technical and privacy rules.
Digital commerce generates huge volumes of transaction records that are reliable within the systems that create them but difficult to use coherently once they are distributed across different organizations, formats, and data environments. ValiDeck concentrates on this underlying coordination problem: the record structures, transformation methods, trust boundaries, and interfaces required to make transaction-derived information usable across systems while constraining unnecessary disclosure. The company is based in Waterloo, Ontario.
How we started
ValiDeck pivoted from identity-based verification to a privacy-preserving model as regulatory frameworks evolved and market sentiment shifted — laying the foundation for PCX.
ValiDeck began in 2016 as an idea to make online search meaningful and trustworthy. Meaningful search depends on trust, and the signal it leans on most, online reviews, was exactly what couldn’t be trusted: they were submitted with no reliable way to verify who stood behind them. The early approach tied each review to the reviewer’s verified identity, a phone number for instance, to make it credible. That approach was filed for protection in the US in 2018 and received a patent grant in 2021. It didn’t survive contact with the world.
Global privacy frameworks, Europe’s GDPR above all, were making identity-linked user data exactly what people and regulators no longer wanted. Conversations with investors made the same point from the other direction: an identity-based review system was a non-starter. What people wanted was the opposite: to participate in the digital economy without exposing themselves. So the model was inverted.
The payment-card industry uses tokenization to protect the card number from exposure; ValiDeck repurposed the same idea to protect the individual, linking records to a token rather than an identity. In 2019, ValiDeck filed a PCT application introducing the token-based capture-and-aggregation of customer transaction records (CTR). That is where PCX begins. The patent family now granted in the US, Australia, and India underpins the PCX protocol. It protects personal and confidential information at the core of the protocol: a transaction is captured under a token that links it to a pseudonymized customer identifier rather than to a personal identity, and a loyalty program runs on that link.
The Privacy-Compliant eXtensible (PCX) protocol described across this site, generalizes and formalizes the tokenization process. The granted PCT patent decouples each record from the person behind it. The pending patent applications based on PCX go further, hardening how the records themselves are stored. Each record is decomposed, encrypted under the customer’s own key, and separated, so that no single point of compromise yields a readable history. They also extend the protocol beyond the direct merchant-to-customer channel, to the cross-merchant loyalty, privacy-preserving search, and analytics described elsewhere on this site.
Infrastructure, not a product
PCX is designed as shared infrastructure, not as a closed platform. ValiDeck will develop the protocol and build reference implementations to demonstrate what can be created on top of it, but it does not intend to own every application that will use the rail. The objective is to let payment providers, merchants, technology companies, and independent developers build competing services on the same privacy-compliant foundation.
This reflects a different philosophy from platforms whose competitive advantage depends on concentrating user data within a proprietary ecosystem. ValiDeck aims to make data useful without making it captive. Like ARM, the idea is to define the architecture, prove that it works, and enable an ecosystem to build on it. ValiDeck’s token-based loyalty program will be the first reference implementation of that approach.
Our mission
ValiDeck’s mission is to build the world’s privacy-first data rail for global loyalty and payments, where every transaction is customer-controlled, secure, and interoperable.
That data rail is designed to let:
- customers capture and control their records in a secure cloud account, keyed to a customer-controlled pseudonym;
- businesses run privacy-compliant loyalty programs without collecting personal identifiers; and
- enterprises access verified, privacy-protected data that improves decision-making and customer engagement.
The goal is a data rail where privacy and utility reinforce one another rather than trade off: the foundation for trust in digital commerce.
Where we’re focused
Europe is ValiDeck’s primary strategic market. PSD2 and the proposed PSD3, the Financial Data Access framework (FiDA), and the privacy questions around a digital euro are pushing toward the same requirement: financial data that stays useful without exposing the person behind it. PCX was designed for that requirement rather than retrofitted to it, which is also why formal European standardization sits on the roadmap rather than being an afterthought to it.
Where we are today
PCX is pre-build. The protocol is specified end to end and the core intellectual property is granted, but the data rail has not been built yet: ValiDeck is at the stage of securing funding, an engineering team, and the first payment-channel and merchant partners. We would rather say that plainly than imply a platform that is already running. The Roadmap sets out what Phase I involves, and what has to be true before Phase II can begin.
Team
Alok Narula — Founder
Around 25 years in technical communication and information architecture at semiconductor and enterprise-software companies, including STMicroelectronics, Broadcom, and IBM; now building ValiDeck. He is the named inventor across the PCX patent family. ValiDeck is a small, focused effort by design at this stage. Building the Phase I rail will mean building a team, and that is part of what the next milestone funds.
Backing
ValiDeck has institutional support from IPON (Intellectual Property Ontario), which provides IP development support, and Communitech (Waterloo’s technology-innovation hub), which provides ecosystem and IP-strategy support. The work also advances through relationships with prospective payment and research collaborators.