Skip to content
Go to the App (opens in a new tab)

CITIZENSTAR

Decentralize Everything™

The verification that opens the door without asking you to hand over your life in exchange.

CitizenStar checks that you are who you say you are — your face, your document, your data — holds them under Iceland's privacy framework and screens them against the public sanctions lists. Out of that comes your Citizen ID: the passport of the verified client. One verification, valid across the whole ecosystem. Absolute privacy, not anonymity.

  • Genuinely verified identity Face, document and data checked. Behind every Citizen ID there is a real person, not an account.
  • Privacy by jurisdiction CitizenStar ehf. is an Icelandic company, and the choice is deliberate: Iceland's privacy framework is what governs your data.
  • Screened against public lists Every verification is checked against the public sanctions lists: OFAC, the United Nations and each country's own blacklists.

This sphere is not a video: it is being generated on your device right now. A C core compiled to WebAssembly — 85 KB — rendered by CueSphere, our graphics engine. That is how light all of our technology is.

Manifesto

Proving who you are should not cost you everything else.

Every time you open an account you are asked for the same things: the document, the face, the address, the proof. And every time you hand them over again, to another company, which will keep them somewhere else under other rules. The result is a copy of your identity waiting at every counter you have ever passed.

CitizenStar exists to break that chain. We check once — face, document and data — hold only what is needed under Iceland's privacy framework, and issue a Citizen ID that serves as proof without forcing you to hand the original around. Whoever needs to know you are real, knows. Whoever does not need to, learns nothing.

We do not believe in the anonymity that shelters abuse. We believe in absolute privacy with verified identity: real people, with real rights, in a system that cannot betray them because it does not keep more than it has to.

The Network

The network where the identity we verify lives.

The Citizen ID does not stay in a file of ours: it is the key to Xatoxi, the decentralized peer-to-peer network where every node is a verified citizen contributing their device. There is no central authority that can read, sell or delete what is yours — and it is verification that stops somebody from standing up ten thousand fake nodes and taking the network. The more of us there are, the stronger it gets.

The product

TIODOL — Your money in dollars, in your pocket, anywhere.

Tiodol is the digital account of the CitizenStar ecosystem: open your account in minutes, convert your local currency to dollars and back whenever you need to, and pay anywhere in the world with your Mastercard. Every holder's identity is verified by CitizenStar, and everything travels protected by the same quantum-resistant engineering that holds up the ecosystem.

  1. Open your account, without friction.

    Accounts are opened through Italbank, our banking partner, with CitizenStar identity verification built in. A real account, with regulated backing, from your phone.

  2. Cash in and out in your local currency.

    Deposit and withdraw in your local currency through our network of In & Out partners. Your money converts to USD and from USD back to your currency when you decide.

  3. Pay with your Frida Kahlo edition Mastercard.

    Physical and virtual, accepted at millions of merchants. Issued and processed by our own card processor: the full payment cycle happens inside CitizenStar technology.

  4. FIAT money, CitizenStar engineering.

    Regulated financial rails, protected with the ecosystem's post-quantum encryption. No speculation and no cryptocurrencies.

Tiodol Mastercard, Frida Kahlo edition

Tiodol Mastercard, Frida Kahlo edition.

Who is behind it: Tiodol is a product and brand of CitizenStar + DOL + Italbank. CitizenStar defined the business model, the integration and the operating model, and is the developer and maintainer of 100% of the technology. A first version of financial microservices (2021) validated with more than 40,000 users and 500,000 microtransactions.

Basix — the ecosystem

One ecosystem, five freedoms.

Basix is the set of native applications of the CitizenStar ecosystem. They all share the same foundation: a decentralized peer-to-peer network, post-quantum encryption and the Citizen ID — the human verification that guarantees there is a person on the other side. You choose which ones to use and what information you share in each.

QCHAT Conversations that belong to you

A decentralized P2P communication channel with post-quantum encryption between verified users.

  • Channels between users/nodes or entire groups.
  • Each conversation lives in its own block, controlled only by its participants.
  • Delete any bit you shared; by unanimous vote, the block self-destructs.
  • The network has no centre: nobody else can read you.
★ SILVER STAR

QVAULT Your vault, spread across the world

Decentralized P2P file storage and exchange with post-quantum encryption.

  • Files encrypted and fragmented across nodes: none holds your complete file.
  • Share while keeping control of every bit.
  • A hybrid vault for your most sensitive data.
★ SILVER STAR

QBLOCK The transparency of the network, in your hand

Network explorer: browse operations and activity between nodes.

  • Browse every operation on the network in real time.
  • Absolute transparency of the network; total privacy of people.
  • UI/UX in 3D graphics (CueSphere), 24/365.
★ SILVER STAR

QASH Your FIAT money, always available

Instant access to your FIAT money, bank accounts and cards, with post-quantum grade security.

  • Manage accounts and cards for every FIAT microservice.
  • Send and receive money between ecosystem accounts, instantly.
  • Native integration with Tiodol: your USD account and your Mastercard.
★ GOLD STAR

QLAN Managing your privacy

The control panel of your digital identity: what you share, with whom and until when. COMING SOON

  • Your data is yours: your security, your freedom, your right to choose.
★ SILVER STAR

CitizenStar QChat

Conversations that are yours, on a decentralized network.

A node of CitizenStar's decentralized network that you run on your own machine. Every conversation is a chain: each message is a transaction sealed under a key only the members of that moment hold, and every block is certified by the members who write. There is no server in the middle; the seeds of the network only introduce nodes to each other.

The conversations screen of CitizenStar QChat, with the CitizenStar logo and Decentralize Everything™ in its header
The node's web console, running. The mark in its header and its footer is drawn by the application itself.

CONVERSATIONS Direct, groups and bulletins

Three kinds, and the kind is fixed when the conversation is founded.

  • A direct is two people, and both write.
  • A group has those who write and those who only read.
  • A bulletin is a community where the founder alone writes.
  • You join through the founder, or with an invitation that expires and has its uses counted.

MESSAGES From sent to read

The state of a message is what the chain says, not what a server says.

  • Four states: sending, sent, delivered and read.
  • A typing indicator, with a switch of its own.
  • Four presence switches that are yours, the public profile among them.
  • Hiding a message is a matter for your machine: the chain is what it is.

FILES Shared and kept

What you share travels down the chain; what you keep goes to a vault only you open.

  • A shared file is cut into chunks, sealed under the epoch key and written into the conversation chain.
  • The vault keeps your files as fragments sealed under a key derived from your identity.
  • Its recipe exports and travels: only the identity that sealed it opens it.

QBLOCK The explorer of your chains

The transparency is on the inside: what you can audit is your own copy.

  • Every chain, with its founder, its epoch, its members and its validators.
  • Every block, with its certificate judged signature by signature.
  • Verification of the whole chain from the genesis.
  • It reads on the machine where the chain lives and on no other.

AUDIO AND VIDEO Voice and video inside the conversation

In the web console, inside a direct.

  • A live voice and video call between the two members.
  • It starts from the conversation itself, without leaving for another tool.
  • It belongs to the web console: the command-line manual does not cover it.

EXCHANGES An exchange that settles itself

A file exchange between two people, in the web console: it settles whole or not at all.

  • A puts their file in the vault; B puts theirs.
  • Each one sees the other file's metadata, not the file.
  • If both accept, the exchange runs at the same time for both.
  • Nobody holds anything in the middle: either it happens whole, or it does not.
See CitizenStar QChat Published release: 2.1.0

Technology — the Cue stack

We build verification from the wire to the screen.

The decentralized plane is written in 100% pure ANSI C, with no heavy dependencies: more than twenty-five in-house components covering everything from network transport to the distributed ledger. On top of all that runs the verification engine, which is what turns a person into a Citizen ID. A platform that is auditable, portable and light enough to run full post-quantum encryption on a low-end phone.

The verification pipeline Reading the identity document, matching the face against it, and screening against the public sanctions lists. At the end of the road the Citizen ID is issued.
Our own peer-to-peer transport Direct node-to-node communication (UDP first, TCP fallback), with NAT traversal and relay nodes.
Discovery without servers Nodes find each other through a distributed hash table (DHT): there is no central directory to shut down or censor.
Post-quantum secure channel Key exchange and continuous cipher renewal (forward secrecy) over our Cuetum cryptography.
A distributed ledger per conversation Each channel or vault keeps its own replicated ledger, validated by peer consensus — no mining and no wasted energy.

XATOFR Our own face recognition

The component that compares a person's face with the photograph on their document. Written in C, like the rest of the plane.

  • Face matched against the identity document.
  • Our own inference engine, no third-party API.

XATOOCR Identity document reading

It extracts the document's data without anybody typing it in: fewer transcription errors and fewer hands the information passes through.

  • The data goes in once, already checked.
  • It feeds the sanctions screening directly.

CUEZERO Quantum Interchain Comms protocol

The layer 0 of the network: truly decentralized communication with end-to-end quantum resistance.

  • P2P + quantum-resistant encryption (Cuetum).
  • Light, mobile, 100% ANSI C.

CUETUM Proprietary post-quantum encryption

Our cryptography, aligned with the NIST final post-quantum standards (FIPS 203) and with HQC, selected in 2025.

  • ML-KEM/Kyber · BIKE · FrodoKEM · HQC.
  • Proprietary key generation (ZKP + key pair).

CUEGRAPH AI Graph Network

An AI graph network that runs on the device — it makes your life easier without keeping your data.

  • Graph deep learning + CueZero + Cuetum.
  • Works even on low-end devices.

CUESPHERE Low-level 3D graphics engine

The engine rendering the sphere on this very page: a C core compiled to WebAssembly (~85 KB), generated on your device in real time.

  • Web (WebGL + WASM) + Android (OpenGL).
  • Progressive geometry: dynamic subdivision and colour states.

CUEDROP Decentralized block storage

A drop of power in your hands: block fragmentation, distribution across nodes and reconstruction on demand.

  • Block sharding + Cuetum + CueZero.

CUEBLOCK Block data structure

The brick of the network's private data structures: efficient, secure and accessible.

  • Hash-based blocks (Put/Get) + CueDrop sharding.

The entire decentralized plane: 100% pure ANSI C · auditable · portable · no heavy dependencies · the same code, from the server to the humblest phone.

cuezero

The framework for building on the network.

cuezero is the platform distributed applications are written with on top of CitizenStar's decentralized network: a node, messaging, signed records, transport and chains, with no server in the middle. CitizenStar QChat is a node of that network — the messaging, the files and the chains it shows come from this ground, and any other application is written the same way.

NODE The network, inside your application

Identity, links, routes and agreement in a single process. There is no infrastructure to stand up.

MESSAGING Direct and by topic

Messages to one peer, and publication by topic with fan-out and duplicates dropped.

RECORDS A distributed table of signed records

Profiles, public cards, fragments. Every record is signed, expires, and is offered again.

TRANSPORT Direct path, relay when needed

UDP first and NAT traversal; when two nodes have no direct path, a relay.

ENCRYPTION A post-quantum channel

The handshake and the key rotation use quantum-resistant cryptography, end to end.

CHAINS A ledger per conversation

Blocks certified by the members who write, each with its epoch and its key.

cuezero is handed over by agreement — write to us and we will talk it through. What is published today runs on Linux x86_64: it is the platform of the CitizenStar QChat release you can download.

SaaS — for businesses

What we built to verify millions, available to your company.

Every component of the CitizenStar ecosystem was born to do two things: know who is on the other side, and withstand the quantum era. Today that same stack is available as a service for organizations that cannot afford to wait.

VERIFICATION Citizen ID as a service

Identity verification via API/SDK: document reading, face matching and screening against the public sanctions lists. Your client verifies once and you receive the result, not the file.

ENCRYPTION Post-quantum as a service

Integrate quantum-resistant encryption via API/SDK (Cuetum), aligned with the NIST final standards. Post-quantum migration without rewriting your infrastructure.

COMMUNICATIONS Secure channels (CueZero)

Messaging, signalling and P2P data transfer, encrypted end to end, without going through third-party servers.

STORAGE Decentralized vaults

Fragmented and distributed data (CueDrop + enterprise QVault), with granular access control and a hybrid mode for regulatory requirements.

BAAS Banking as a service (with Italbank)

Account opening, identity verification and regulated financial services, embeddable in your product via API. The same engine behind Tiodol's account opening.

PROCESSING Cards in real time

The processor that issues and processes Tiodol's Mastercard: physical and virtual issuing, real-time transactions, anti-fraud and reconciliation. White-label on Mastercard rails. Written in pure ANSI C.

AUTHORIZER Connected to your banking core

Real-time transaction authorization against your balances and rules, integrating with your core via TCP/IP or RESTful — without replacing your infrastructure. Also in pure ANSI C.

AUDIT Post-quantum hardening

Our laboratory identifies gaps and vulnerabilities against the “harvest now, decrypt later” threat and applies the fix.

TIODOL For your organization

As an allied product — embed Tiodol in your offering — or as a turnkey solution: the complete platform operating under your brand, with 100% CitizenStar technology behind it.

We do not just build it: we run it. CitizenStar runs the entire technology side of its partners today — Italbank, Italcambio, Italtransfer and DOL — processing real operations, in production, every single day.

Partners

An ecosystem is not built alone.

Our partners are what let verification touch the real world.

Banking partner — Italbank

Tiodol accounts are opened with Italbank, combining the backing of the regulated financial system with CitizenStar technology, which also develops and operates their platform.

Financial and In & Out partners

Italcambio, Italtransfer and DOL — with technology operated by CitizenStar (DOL is also a co-creator of Tiodol). They connect the USD account with each country's local currency.

Network partner — Xatoxi

Xatoxi is the quantum-resistant decentralized network the Citizen ID opens the door to: every node is a verified person, and that verification is ours.

Brand partners — the Frida Kahlo universe

Frida Kahlo, Frida Kahlo Tequila and Frida Kahlo Fintech (FKF): the alliance behind the card edition.

Learn

Understand the technology that protects you.

MODULE 1 Decentralization 101

What a distributed ledger is and why it removes the need to trust an intermediary.

  • DLT fundamentals: blocks and chains of information.
  • Nodes: the backbone of every decentralized network.
  • Cryptography: symmetric vs. asymmetric, RSA/ECC and their limits.
  • Peer consensus, without mining or wasted energy.
Open the module →

MODULE 2 Verification 101

What a verified identity really is: what gets checked, what gets kept, and what a Citizen ID is.

  • Claimed identity versus verified identity.
  • Minimization: checking without keeping everything.
  • Sanctions screening: OFAC, the United Nations and country lists.
  • The Citizen ID: the passport of the verified client.
Open the module →
See the full syllabus →

Community — Xatoxi

Verified people. A network you can trust.

Xatoxi is the quantum-resistant decentralized network the Citizen ID opens the door to. Every member is a real person, verified by CitizenStar — no bots, no fake accounts, no anonymity to shelter abuse. Your privacy is absolute; your identity, verified.

Xatoxi, the quantum-resistant decentralized network

★ BRONZE STAR

Subscribers: they receive news, bulletins and updates by email. No access to the ecosystem.

★ SILVER STAR

Verified members: access to the Basix ecosystem (QChat, QVault, QBlock, QLan).

★ GOLD STAR

Verified members with access on top of that to the financial microservices (Tiodol, Qash FIAT).

Access is invitation only.

No code? Subscribe and request access.

About us

From an everyday problem to a digital passport.

THE PROBLEM A copy of you at every counter

Every sign-up asks again for the document, the face and the address. The result is your identity scattered across companies you did not choose and cannot audit.

THE METHOD Verify once, prove always

We check face, document and data, hold them under Iceland's privacy framework and screen them against the public sanctions lists. Out of that comes the Citizen ID.

TODAY The complete platform

The verification engine, an ecosystem of applications on a decentralized network, and a financial product with first-tier partners.

Our laboratory — the core. An R&D team specialized in low-level languages: the whole decentralized plane is pure ANSI C, written to make the most of memory and CPU. That is why the platform runs on all kinds of phones with solid encryption and low battery use. All of our code is 100% proprietary.

We collect just enough to verify you, and not one record more. What does not need keeping is not kept; what does lives under the privacy framework of Iceland.

Join the core. If you write advanced C and have experience in encryption or computer vision, we want to meet you. Write to us →

Contact

Let's talk.

Keep up with CitizenStar solutions.

News on verified identity, privacy and post-quantum security, in your inbox. No spam: we do not collect your data here either.