CipherStash Stack – Data Level Access Control in TS/JS

In plain words

CipherStash Stack is a searchable encryption platform for TypeScript and PostgreSQL that enables field-level data encryption without requiring deep cryptography expertise. It includes an SDK, transparent SQL proxy, key management via Zerokms, and authentication services with OIDC federation. The platform integrates with popular frameworks like Prisma, Next, and Drizzle, allowing developers to encrypt individual database fields in approximately 15 minutes with queries executing in milliseconds. It targets developers who need to protect sensitive data while maintaining searchability and query performance.

written from the facts on this page · September 2026

From the sources

A set of secure building blocks for adding Data Level Access Control to your TypeScript app: encryption in use, key management, transparent SQL access, auth, and agent skills.

CipherStash Stack is a set of composable building blocks for adding Data Level Access Control to the TypeScript apps you already have: encryption in use, key management, a transparent SQL proxy, identity-bound auth, and agent skills. Data Level Access Control (DLAC) enforces access on individual data values: each one carries its own encryption, and the right to decrypt it is bound to an identity. Encryption at rest protects the disk; row-level security gates which rows a user sees — but in both, the database still reads every value in the clear. DLAC protects the data itself, and that protection travels with the value wherever it goes. CipherStash Stack is our set of composable building…from cipherstash.com

In the maker’s words, at launch

Hi HN, I'm Dan Draper, founder of CipherStash. We've spent 5 years building per-value searchable encryption tech. We realized that encryption like this is incredibly powerful but the engineering required is generally not worth the effort. So we built a platform and opensource SDK to take the cry out of cryptography…

• RW
  Read Wikipedia privately using homomorphic encryption2022 · spiralwiki.com · ▲331

  Hi, creator here. This is a demo of our recent work presented at Oakland (IEEE S&P): https://eprint.iacr.org/2022/368. The server and client code are written in Rust and available here: https://github.com/menonsamir/spiral-rs. The general aim of our work is to show that homomorphic encryption is practical today for real-world applications. The server we use to serve this costs $35/month! A quick overview: the client uses homomorphic encryption to encrypt the article number that they would like to retrieve. The server processes the query and…

• 
  Searchable encryption, SQL proxy for Postgres2025 · cipherstash.com · ▲10

  CipherStash Proxy keeps your sensitive data in PostgreSQL encrypted and searchable, without changing your SQL queries. It is written in Rust, uses a formally type-check SQL mapper and searchable encryption.

• 
  Data Prism – Weekly newsletter about data science, ML, AI and analytics2017 · dataprism.co · ▲233

  DataPrism turns the clouds you already use into sovereign, provable, unreadable storage. Client-side encryption, one TypeScript SDK, invisible to your users.

• 
  Bi-directional sync between Postgres and SQLite2023 · powersync.com · ▲356

  Hi HN, Today we’re launching PowerSync, a Postgres<>SQLite bi-directional sync engine that enables an offline-first app architecture. It currently supports Flutter, React Native and web (JavaScript) using Wasm SQLite in the browser, with more client SDKs on the way. Conrad and I (Ralf) have been working on our sync engine since 2009, originally as part of a full-stack app platform. That version of the system is still used in production worldwide and we’ve learnt a lot from its use cases and scaling. About a year ago we started on spinning off PowerSync as a standalone product that is…

• HN
  Hacker News Clone – Clojure, GraphQL Learning Project2019 · ▲179

  I have ported "The Fullstack Tutorial for GraphQL" series, https:&#x2F;&#x2F;www.howtographql.com&#x2F;, from Javascript to Clojure&#x2F;script. Blog post: https:&#x2F;&#x2F;promesante.github.io&#x2F;2019&#x2F;08&#x2F;14&#x2F;clojure_graphql_full... Source code GitHub repo: https:&#x2F;&#x2F;github.com&#x2F;promesante&#x2F;hn-clj-pedestal-re-frame Suggestions and corrections, more than welcome.

• 
  Stack, an open-source Clerk/Firebase Auth alternative2024 · stack-auth.com · ▲144

  Hey HN! Happy to finally launch Stack. We made it because we like to put apps into production quickly, and authentication & user management was taking up way too much time. We have components like and that automatically adapt to whatever theme & design system you're using. Check the blog post to see the example with Radix UI and Joy UI. Also, there's an admin dashboard for monitoring and editing accounts. Stack is 100% AGPL&#x2F;MIT-licensed, so you can self-host it. Cheers!

• 
  /dev/null▲483

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲345

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Brew ▲900

  Like Claude design for email marketing

  AI · May 2026 · brew.new

• 
  Kilo Code for VS Code▲896

  Parallel agents, diff reviewer, and multi-model comparisons

  Dev tools · May 2026 · kilo.ai

• 
  StoreClaw▲806

  Grow your store profits with agents that know how to sell

  AI · May 2026 · storeclaw.ai

• 
  PollyReach▲795

  Give your agent a real number and voice to make calls.

  AI · May 2026 · pollyreach.ai

• 
  Needle: We Distilled Gemini Tool Calling into a 26M Model▲776

  Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok&#x2F;s prefill and 1200 tok&#x2F;s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…

  Life & fun · May 2026 · github.com

• 
  Files.md – Open-source alternative to Obsidian▲730

  🌱 Private, quiet space for thinking. Simple app for .md files. - zakirullin/files.md

  Dev tools · May 2026 · github.com