Stuart Thomas

Cryptographer · Whitby
Forty years in computing. From a Commodore PET on a paper round in Scarborough, to the cryptographic systems that protect 60 million NHS patient records and 8 million daily contactless journeys across London. Now building something for Whitby.
2026 — Present
Whitby Jet Provenance Platform
The world's first cryptographic provenance verification system for a hyperlocal artisan gemstone. NFC hardware tags, AES-128 CMAC, supply chain integrity. A registered maker's claim, bound to the physical piece with mathematics. Live at authenticwhitbyjet.co.uk.
2011
TfL Contactless Travel Security Architecture
Designed the ISO 27001 and PCI DSS compliant cryptographic key management system for Transport for London's contactless payment network. 22,000 readers. Over 8 million transactions per day. Every Oyster tap. Every contactless payment on the Tube.
2004 — 2006
NHS National Cryptographic Standards
Authored the national standards for cryptographic algorithms and contactless smart card security for NHS Connecting for Health. Conducted security analysis of the air-gap between contactless smart cards and readers, corresponding directly with CESG (now NCSC) and chip manufacturers on national security policy for 60 million patient records.
2009 — 2023
Cyber Security & Data Protection Practice
Senior consulting roles across critical national infrastructure, financial services, retail, clinical research, and government. PwC. Harrods. Boots. Deloitte. The London Stock Exchange. Global privacy programmes, PCI DSS compliance, ISO 27001 certification, penetration testing, and cryptographic systems design.

My four-times great-grandfather, Robert Dixon, was a Whitby Jet worker on Henrietta Street during the Victorian era. I moved to Whitby in 2025. The platform I'm building connects forty years of cryptographic expertise with a direct family connection to the trade it protects.

Robert Dixon, Whitby Jet worker, circa early 20th century
Robert Dixon — Whitby Jet worker, Henrietta Street, Whitby. My four-times great-grandfather.
1911 Census of England and Wales showing Robert Dixon, Jet Worker, Henrietta Street, Whitby
Census of England and Wales, 1911. Robert Dixon, Head of household, Henrietta Street, Whitby. Occupation: Jet Worker.

Family photograph and genealogical research courtesy of my cousin, former chairwoman of the Scarborough Genealogical Society. With thanks.

Provenance
If you can't verify where something came from, trust is a guess.
Heritage
Whitby Jet has survived 180 million years. It deserves protection that lasts.
Honesty
Say what the system does. Say what it doesn't. Don't overclaim.
Craft
The maker's expertise identifies the material. The platform makes it unforgeable.
Accessibility
Built by a neurodivergent engineer. Designed to work for everyone.
Independence
No investors. No shareholders. No extraction. Community trust, not corporate greed.

Authentic Whitby Jet

A provenance verification and supply chain integrity system for genuine Whitby Jet jewellery. Every registered piece carries an NFC tag — in the box, on a provenance card, or embedded in the piece itself — that a customer can tap with any smartphone to see the full story: who made it, where the jet was collected, and photographs of every stage from beach to finished piece. No app. No account. Just tap and verify.

Visit the Platform →

CIPP/E (Certified Information Privacy Professional, IAPP). CiSMP with Distinction (BCS). GSEC (SANS/GIAC). GDPR Practitioner. Certificate in Legal Studies, Open University. Professional Certificate in Management, Open University. Mental Health First Aid and Advocacy (NCFE CACHE Level 2). Army Reserve, exemplary discharge. Ministry of Justice Independent Monitoring Board member (HMP Ranby), appointed by the Secretary of State. Enhanced DBS, clean record. NHS COVID-19 Vaccinator (British Red Cross).

Detailed credentials and supporting documentation available on request for bona fide professional enquiries.

I don't use LinkedIn. If you'd like to talk about the platform, about provenance, about Whitby Jet, or about anything else — the best way to reach me is through the platform's contact form.

Contact Form →

I aim to respond during normal working hours. There is no expectation or obligation to reply outside those hours.