Indonesia was PryvX's first market outside Europe — not an opportunistic expansion, but a deliberate one. Over 280 million people, one of the world's fastest-growing digital economies, fraud at scale across digital financial services, and a Personal Data Protection Law (2022) that put data-sharing risk on every boardroom's agenda. All of it pointed to the exact problem PETs are built to solve: organizations that need to collaborate on sensitive data but structurally can't, or won't, move it out of their own environment.
That thesis became a real product. In 2024, PryvX entered a strategic collaboration with INDICO, the digital-platform subsidiary of Telkomsel — Indonesia's largest mobile operator — to bring privacy-preserving data collaboration to industry-wide problems, starting with fraud prevention. The result is INDICO DataHub, a live commercial platform, not a pilot or a whitepaper.
The problem DataHub was built for
Data is valuable precisely because it's sensitive — which is exactly why it's hard to share. A bank can't hand its transaction history to a telco to catch mule accounts; a telco can't hand subscriber data to a bank to catch SIM-swap fraud. Regulation, competitive sensitivity, and plain trust all sit in the way, even when every party involved would benefit from collaborating. As DataHub's own positioning puts it: "data is the new currency, but strict privacy laws make traditional data exchanges risky."
That's the gap DataHub closes — letting organizations unlock value from shared data assets without the legal and reputational exposure of a traditional data exchange.
Inside DataHub: the Data Clean Room in practice
At the core of DataHub is the Data Clean Room — a neutral, no-code collaborative space where two or more parties can process encrypted datasets together using privacy-enhancing technology, without either side ever exposing raw data to the other or to INDICO. This is where PryvX's PET stack does the work.
Underneath the Clean Room sits the PET stack PryvX brought to the partnership: federated learning, homomorphic encryption, secure multi-party computation, and differential privacy — the same primitives that let a bank and a telecom operator jointly train a fraud-detection signal without either one ever seeing the other's underlying customer data. No-code access matters just as much as the cryptography: compliance and data teams can stand up a collaboration without a software development cycle on either side.
What it's being used for today
The near-term focus is fraud prevention: detecting SIM fraud, mule accounts, and identity theft across telecom and financial services, patterns that are effectively invisible to any single institution looking only at its own data. PryvX has additional partners at pilot and commercial-negotiation stage across fintech, financial services, and digital lending in Indonesia. Medium-term, the roadmap points at credit scoring for underbanked populations, healthcare data collaboration, and cross-agency government use — all use cases where Indonesia's financial regulator and its digital-identity and financial-inclusion ambitions are already pointed in the same direction.
As of publication, INDICO reports platform-wide numbers for DataHub of over 170 million Indonesian audience insights, 50,000+ secure data exchanges facilitated, a 92% customer satisfaction rate, and 40%+ return on data investment for participants — figures for the platform as a whole, spanning the Marketplace and Clean Room together.
"In Sweden most collaboration happens over Teams calls. In Indonesia the real work happens over breakfast, lunch and dinner."
— Margit Arctaedius, Co-Founder & CPO, PryvX
What building this taught us
A few things stood out from getting a PET-based product into production in a new market, rather than just onto a whiteboard:
- Find a problem organizations genuinely cannot solve alone. PETs land hardest where competitive or regulatory dynamics already block the collaboration the problem requires — fraud detection across institutions is exactly that shape of problem.
- A credible local partner matters more than a good demo. Convincing a major operator to trust an early-stage foreign company with some of the country's most sensitive data took proof, patience, and persistence — and moved faster once we had a partner with real standing in the sector.
- PET concepts need explaining before they can be sold. "We never touch your raw data" is not self-evident; it has to be taught before it can be trusted.
- Regulation can be a tailwind, not just a constraint. Indonesia's Personal Data Protection Law raised the exact awareness that makes a privacy-preserving platform easier to justify internally.
- Enter through an ecosystem platform. Building on top of INDICO, rather than selling point-to-point to individual banks and telcos, cut the education burden and put PryvX in front of the right buyers faster.
Why it matters beyond Indonesia
Indonesia's scale and the density of its digital ecosystem mean a solution proven here can serve as a reference case for the rest of Southeast Asia. For PryvX, DataHub is the proof point that privacy-enhancing technology isn't a research artifact — it's infrastructure that a country's largest mobile operator will build a commercial data-collaboration product on top of, today. You can explore DataHub directly at indico.co.id/datahub.
