Skip to main content
Eye on AI

The Reason 30 Years of Cybersecurity Has Failed - and What Actually Fixes It | Trent Telford, Qanapi

55 min episode · 2 min read
·
Trent Telford

Episode

55 min

Read time

2 min

Topics

Remote Work, Leadership, Artificial Intelligence

AI-Generated Summary

Key Takeaways

  • Data-First Security Model: Rather than building stronger perimeter walls, Qanapi starts from the assumption that data will be breached. Encrypting at the individual cell, word, or paragraph level — each with a unique key — means stolen data remains unreadable. This shifts the security burden from access prevention to data-level protection, rendering exposure events largely harmless.
  • Identity-Bound Key Management: Qanapi binds each encryption key to a verified identity — human, machine, or drone — combined with conditional policies such as time windows or GPS coordinates. A drone, for example, only receives a decryption key when its hardware identity, altitude, and GPS position simultaneously match pre-set parameters, eliminating static key vulnerabilities.
  • Safe Public LLM Usage via Gateway: Enterprises can route data through Qanapi's Fathom gateway before it reaches public models like Claude or Anthropic. Sensitive fields remain encrypted; the model processes surrounding clear text and explicitly flags encrypted sections it cannot read. This solves the Samsung-style data leak problem without requiring private infrastructure or smaller context windows.
  • Post-Quantum Uplift for Legacy Systems: Federal agencies face a NIST-mandated deadline to achieve post-quantum encryption by 2030. Qanapi's API and SDK allow organizations to run batch processes across legacy systems — including decades-old IBM infrastructure — retroactively encrypting individual data fields in existing files stored in S3 or similar repositories without replacing underlying systems.
  • Drone and Autonomous Systems Security via Key Sharding: The Echo product breaks encryption keys into fragments distributed across multiple physical locations — Humvees, operator backpacks, forward bases. A drone assembles enough shards only when its identity and temporal conditions are verified across disrupted, intermittent, or adversarial networks including RF and Starlink, preventing payload interception or data falsification mid-mission.

What It Covers

Trent Telford, CEO of Qanapi, explains why 30 years of perimeter-based cybersecurity has failed and presents a data-first encryption model that ties granular, cell-level encryption to identity and policy — enabling enterprises to safely use public AI models without exposing sensitive data.

Key Questions Answered

  • Data-First Security Model: Rather than building stronger perimeter walls, Qanapi starts from the assumption that data will be breached. Encrypting at the individual cell, word, or paragraph level — each with a unique key — means stolen data remains unreadable. This shifts the security burden from access prevention to data-level protection, rendering exposure events largely harmless.
  • Identity-Bound Key Management: Qanapi binds each encryption key to a verified identity — human, machine, or drone — combined with conditional policies such as time windows or GPS coordinates. A drone, for example, only receives a decryption key when its hardware identity, altitude, and GPS position simultaneously match pre-set parameters, eliminating static key vulnerabilities.
  • Safe Public LLM Usage via Gateway: Enterprises can route data through Qanapi's Fathom gateway before it reaches public models like Claude or Anthropic. Sensitive fields remain encrypted; the model processes surrounding clear text and explicitly flags encrypted sections it cannot read. This solves the Samsung-style data leak problem without requiring private infrastructure or smaller context windows.
  • Post-Quantum Uplift for Legacy Systems: Federal agencies face a NIST-mandated deadline to achieve post-quantum encryption by 2030. Qanapi's API and SDK allow organizations to run batch processes across legacy systems — including decades-old IBM infrastructure — retroactively encrypting individual data fields in existing files stored in S3 or similar repositories without replacing underlying systems.
  • Drone and Autonomous Systems Security via Key Sharding: The Echo product breaks encryption keys into fragments distributed across multiple physical locations — Humvees, operator backpacks, forward bases. A drone assembles enough shards only when its identity and temporal conditions are verified across disrupted, intermittent, or adversarial networks including RF and Starlink, preventing payload interception or data falsification mid-mission.

Notable Moment

Telford describes a live Claude demonstration where the model processes a Qanapi-encrypted document and explicitly reports it found certain sections unreadable due to encryption — confirming that even the AI service itself cannot access protected fields, not just unauthorized human users.

Know someone who'd find this useful?

Episode Transcript

As you point out, once you're inside the wall, you can see everything. People started building or buying security systems that were effectively a wall, a round firewall with doors that would go into it, and they kept the doors locked unless you have the proper permission. It doesn't matter how high you build the wall, the bad guys go get a bigger ladder. Well, they find out how to pull a few bricks out of the wall in the bottom of the castle wall and crawl through, and you don't notice that they've crawled through. Right? They pull a rock back over, and you don't know they're in there. So that's been a really big issue. We will get to AI, but particularly with these mythos classes that can scan a code base or a piece of software externally and find undiscovered holes that then they can write exploits for us. What's the solution that you guys come up with? We start from a baseline assumption that the data will be exposed. Let's start by having you introduce yourself to listeners and explain how you got to Quantipi. And for listeners, it's Quantipi as in Quantum API, is that right? That's right. So you can explain that, but give us your background. I know you had a startup before this. Yeah. Thanks, Craig. Thanks for thanks for having me on, it's great to be here. Probably twenty odd years now, twenty five years in in the tech game, particularly in software and Internet related. So I come from that background of of twenty five years originally in in the late nineties working for the big big investment banks, but on big transformation around ecommerce and technology projects, you know, building internal intranets as we call them as we all remember in those days for Yeah. Trading systems and things around bankers trust. That was where I started. And then when they fell over, I ended up with Deutsche Bank. And then in the two thousands, I was working in ecommerce consulting, so it was a great place to learn all about, you know, the full stack of what happens across as you wanna design the Internet based systems, which we all take for granted today. But of course, twenty five years ago that wasn't the case. And then I I almost fell into the data security side probably twenty years ago now, nearly twenty years ago, nineteen years ago. I was doing some implementations of big identity and access control systems across banks and government and then came into the the very specific area around data security, and that that happened back then. So I've sort of been looking at this problem around, you know, data security and all these issues for for so many years now that what now people are looking at and thinking, wow, that's a great idea. That's that's logical. Right? That's logical. That's simple. It's something that simplicity has taken us a long time …

Get the full transcript (9,753 words) + summary by email — free

One-time email with the complete transcript and AI summary of this episode. No account needed.

One email, no spam. We’ll also show you what SignalCast does.

Browse all Eye on AI transcripts →

You just read a 3-minute summary of a 52-minute episode.

Get Eye on AI summarized like this every Monday — plus up to 2 more podcasts, free.

Pick Your Podcasts — Free

Keep Reading

More from Eye on AI

We summarize every new episode. Want them in your inbox?

Similar Episodes

Related episodes from other podcasts

Explore Related Topics

This podcast is featured in Best AI Podcasts (2026) — ranked and reviewed with AI summaries.

Read this week's AI & Machine Learning Podcast Insights — cross-podcast analysis updated weekly.

You're clearly into Eye on AI.

Every Monday, we deliver AI summaries of the latest episodes from Eye on AI and 192+ other podcasts. Free for one show.

Start My Monday Digest

No credit card · Unsubscribe anytime