How Blinded Tokens Match Customers Without Revealing Who They Are
Morph recognizes the same person across companies without anyone, including Sovern Morph, seeing an email or phone number. Here is how blinded identity matching works.
In Brief
Each company blinds its customer identifier before it leaves its servers. Morph applies a secret key inside a secure enclave, so the same person produces the same network token at every company, while no one sees the underlying email or phone number. Each contributor also gets a different alias for the same person, so companies cannot tell which customers they share.
A shared model of each person only works if the same person can be recognized across many companies. The obvious way to do that, comparing emails or phone numbers, is exactly what Morph is designed to avoid.
Key Takeaways
- Identifiers are blinded inside each company before anything leaves its servers.
- A secret key is applied only inside a secure enclave, so the same person maps to the same network token.
- Each contributor sees a different alias, so companies cannot discover which customers they share.
- Responses contain a likelihood score or a message, never attributes and never who else knows the person.
Step 1: Blind The Identifier At The Source
Before any data leaves a contributor, the customer identifier is transformed so that it no longer reveals the email or phone number it came from. Raw identifiers stay inside the company.
Step 2: Apply A Secret Key Inside A Secure Enclave
Morph applies a secret key inside a secure enclave, a protected environment designed so that even the operator cannot read what is being processed. The result is a network token: the same person produces the same token at every company, and no one can work backward to the original identifier.
Step 3: Give Every Contributor A Different Alias
Each contributor receives a different alias for the same person. A retailer and a bank that share a customer cannot compare notes to find out. Morph never tells one company which other companies know a person.
What A Company Actually Receives
When a contributor asks about one of its own consented customers, Morph returns a likelihood score or the single experience most likely to work. It never returns attributes, and never which other companies hold data about that person. Read more about deployment choices and the uses Morph will never support.
Frequently Asked Questions
Can Sovern Morph See Who My Customers Are?
No. Identifiers are blinded before they leave your servers and the secret key is applied only inside a secure enclave, so Sovern Morph never sees the underlying email or phone number.
Can Another Contributor Find Out That We Share A Customer?
No. Each contributor receives a different alias for the same person, and responses never reveal which other companies know that person.
See How Morph Would Work With Your Customers
Join the waitlist for a private briefing on deployment, privacy, and the goals Morph could move for your existing and new customers.
