Secure, verifiable data provenance — not just file storage
NeoZip combines standard ZIP tools with a device-held Data Wallet, wallet-encrypted identity keys, and optional blockchain verification — all in a single desktop app.
As teams load documents and file collections into AI pipelines, the hard problem is no longer just collecting data — it is proving integrity, lineage, and security before ingestion. NeoZip Desktop turns every archive into a cryptographically signed container your pipelines can trust.
Data Wallet. A device-held cryptographic vault — credentials and control stay on your machine, not in a third-party cloud.
Identity keys. Wallet-encrypted signing so every archive is tied to a distinct, verifiable author — not a shared password.
Blockchain proof. Optional timestamps and tokenization for an immutable audit trail of what was packaged, when, and by whom.
First stable Mac release — signed & notarized DMG. Default Token Service is Base Sepolia; production uses Base Mainnet with optional membership.
Windows 10 / 11 (x64)
AppImage · deb (x64)
Installers are served from Vercel Blob.
Modern AI depends on verifiable provenance — not passive file storage. Each layer of NeoZip Desktop addresses a different part of that challenge: familiar archives, local sovereignty, cryptographic identity, and optional immutable proof.
The familiar vehicle
NeoZip keeps the universal utility of traditional archiving — zero friction for enterprise teams — while supporting modern algorithms like Zstandard alongside Deflate.
AI & data pipelines
High-performance compression speeds transit of large document collections, codebases, and log files into vector databases and RAG ingestion gateways with less bandwidth overhead.
Local sovereignty
Unlike software that stores keys in centralized cloud databases, NeoZip localizes cryptographic control on your physical machine. The Data Wallet is a secure vault on the desktop — your root of trust for archive operations.
AI & data pipelines
Corporate IP stays under your control before it is deliberately cleared for AI consumption. Credentials and control vectors never need to live in a third-party SaaS vault.
Definitively verifying who
Archives are not only locked — they are cryptographically signed by a distinct identity key (WebAuthn and Verifiable Credentials–ready), not a shared password string.
AI & data pipelines
Automated pipelines can verify with mathematical certainty that training data came from an authorized engineer or vetted expert — mitigating AI data poisoning and unauthorized tampering.
Unchangeable truth
Anchor archive identity to decentralized networks: hash and timestamp via OpenTimestamps on Bitcoin, or tokenize content proofs as NFTs on supported EVM chains for ownership and chain of custody.
AI & data pipelines
Meet transparency expectations under regulations like the EU AI Act — auditable proof of what was ingested, when, and who approved it, with a trail that cannot be retroactively altered like a conventional database.
Teams are moving from sprawling data lakes toward curated, hyper-focused datasets for SLMs and RAG. NeoZip's Data Wallet is the checkpoint that declares a package ready for AI — or quarantines it when proof fails.
Package specific reference materials instead of pointing a model at an entire messy directory. The Data Wallet signs the archive as gold-standard, scope-bounded context.
Cryptographic primitives including zero-knowledge proofs let pipelines verify dataset parameters — for example, compliance-cleared Q3 text only — without prematurely decrypting sensitive contents on the network.
Build smart ingestion gates with NeoZip developer kits: verify Data Wallet credentials and blockchain timestamps on arrival. Match signature and hash — ingest. Fail verification — quarantine immediately.
NeoZip Desktop transforms the humble .zip from a passive file-shrinker into a secure, cryptographically signed container. Package, verify, and track intellectual property with certainty — a trustworthy pipeline for enterprise AI.
Everything below ships in v1.0.0 — wallet onboarding, signing, verification, and optional on-chain proof in one workflow.
Device-generated EVM Data Wallet as your cryptographic root of trust. Wallet-encrypted X25519 identity key for recipient-side encryption — private keys never leave your device.
Create and extract ZIP and NeoZip (.nzip) archives with Deflate or Zstandard compression. Browse contents and configure default extract paths.
Verify archive integrity and generate certificates documenting integrity and on-chain or timestamp-server proof. Keep a full history of verification results.
Overview of archives you've worked with, tokenized items, verification history, certificates, and quick navigation.
Setup wizard: Account (email, optional phone, Mainnet membership), Data Wallet create or import, Encryption key registration, then Review / Continue — or use basic mode without finishing account setup.
Server-managed micro-grants to your Data Wallet on Base Sepolia testnet — no manual faucet needed. Gas funding is hidden on Base Mainnet.
ECIES X25519 + AES-256-GCM for recipient encryption today. HPKE (RFC 9180) and hybrid post-quantum ML-KEM-768 suites are on the roadmap.
Optionally tokenize archive content proofs as NFTs on configured EVM networks. Requires a compatible on-chain contract (v2.50+) and a funded Data Wallet.
Obtain verified blockchain timestamps via the NeoZip Token Service — no separate wallet funding required for the timestamp-only path.
Up to 3 accounts per device with sidebar switching, per-account Data Wallets, and independent settings and preferences.
Deep-link verification flows from external apps or emails. Trigger archive verification directly from a URL.
Open .zip and .nzip files directly from Finder or Explorer. Configure your default extract path, appearance, and advanced preferences.
First stable Mac Path A release — signed and notarized Apple Silicon DMG. Install updates manually from this site or GitHub Releases (no in-app auto-update). Highlights from the 1.0.0 README and CHANGELOG:
First stable Mac Path A release — signed, notarized Apple Silicon DMG (manual install; no in-app auto-update)
Setup wizard — Account (email / membership), Data Wallet, Encryption, then Review / Continue
Mainnet membership — $10/year Token Service Mainnet Membership via Stripe when using production
Networks — default install stays on Base Sepolia testnet; production Token Service pairs with Base Mainnet
APPNOTE §6 Merkle v1 — tokenize and timestamp digests match on-chain / Token Service verification
Native Zstd — create and extract via Electron 37 / Node 22.15+ zlib streaming
Gas funding — Token Service micro-grants are testnet-only (hidden on Base Mainnet)
Multi-account — up to three profiles per Token Service deployment on one Mac
Shared connection store — ~/.neozip/connection/ aligned with NeoZip CLI and NeoZip MCP
NeoZip Desktop 1.0.0 is the first stable Mac release. We welcome bug reports, feature requests, and general feedback.