The Confidential Decision Layer for Identity & Compliance
zCred provides confidential enclave coprocessing on Horizen Vela and settlement on Base—evaluating credentials, creditworthiness, and compliance rules without exposing user PII or verifier policy logic.
Encrypted claims (Bank status, GitHub, OFAC checks)
Dual-sided privacy: input data & risk rules shielded in TEE
Zero-PII Poseidon nullifier settled directly on Base
Building Infrastructure Powered By Leading Web3 Networks
How zCred Preserves Dual-Sided Privacy
From Web2 ingestion to on-chain settlement, see how our Horizen Vela WASM coprocessor processes private claims without revealing sensitive user PII or proprietary decision rules.
Signal Ingestion
Pull authentic Web2 data (bank records, GitHub activity, domain ownership) via TLSNotary/zkTLS without exposing raw credentials to servers.
TEE Coprocessing
Rust WASM decision logic executes inside sealed Intel SGX/TDX enclaves. Both private PII inputs and proprietary risk weights stay strictly confidential.
Attestation & Nullifier
Vela emits a minimal zero-PII attestation with a purpose-boundPoseidon nullifier (H(secret || policy_id || dapp_domain)) preventing cross-dApp tracking.
Base Settlement
Consuming smart contracts on Base verify user eligibility through a 1-line view call (IZcredPassport.isValid), costing minimal execution gas.
// 1. Verify zkTLS cryptographic signature inside Horizen Vela TEE
let verified_claim = zktls_verifier::verify_proof(&input.proof_blob)?;
// 2. Evaluate proprietary risk & compliance policies on private inputs
let passport_result = policy_engine::evaluate_credit_risk(
verified_claim.financial_tier,
verified_claim.identity_nullifier
)?;
// 3. Emit minimal, zero-PII attestation struct for Base EVM
let attestation = Attestation {
nullifier: poseidon_hash(&[user_secret, policy_id, dapp_domain]),
is_valid: passport_result.is_eligible,
tier_level: passport_result.tier,
timestamp: block.timestamp,
};The zCred Product Suite
Centered around our flagship Confidential Passport coprocessor, powered by open-source zkTLS and zero-knowledge primitives.
zCred Confidential Passport
Our flagship confidential decision coprocessor evaluates multi-source identity claims, credit signals, and compliance credentials inside sealed Horizen Vela TEE enclaves. It emits minimal, zero-PII attestations directly to Base smart contracts.
Underlying R&D & Ingestion Foundations
Open SourcezkTLS Identity Ingestion Engine
Pulls authentic Web2 data (bank statements, GitHub commits, domain ownership) via TLSNotary/zkTLS into cryptographically verifiable circuit inputs.
Explore NebulaID RepositoryNoir ZK CAPTCHA & Chrome Extension
Privacy-first human verification SDK and browser shield using Noir ZK circuits to prove humanity and token claims without tracking puzzles or data logging.
Explore ZAuth HQ RepositoriesConfigurable Enclave Policy Specs
Active SpecsRiskX Private Credit Policy
Evaluates multi-source financial claims inside Horizen Vela TEE to output attested credit eligibility tiers for undercollateralized lending protocols on Base.
Compliance & KYC Passport Policy
Verifies signed issuer credentials against fund jurisdiction and OFAC/AML sanctions rules inside Vela TEE for GDPR-compliant tokenized real-world asset onboarding.
Trust & Security Architecture
Confidential infrastructure requires formal cryptographic and hardware guarantees. Here is how zCred maintains zero-trust security across the entire decision lifecycle.
Hardware Enclave Isolation
Code runs inside Horizen Vela TEE enclaves (Intel SGX/TDX), ensuring neither host node operators nor cloud providers can peek at memory or modify execution logic.
Dual-Sided Privacy Invariants
Guarantees complete confidentiality for both parties: users never expose raw PII, and dApps never expose proprietary risk-scoring models or compliance rules.
Anti-Tracking Purpose-Bound Nullifiers
Nullifiers are derived per-dApp domain (Poseidon hash of secret, policy ID, and domain), preventing dApp A and dApp B from correlating user identity activity.
In-Enclave Proof Verification
Before processing claim values, the WASM enclave cryptographically verifies the signature of zkTLS witnesses and credential issuers to prevent tampered inputs.
Regulated Compliance Readiness
Designed to meet institutional RWA and GDPR requirements by keeping personal data client-side and outputting minimal non-PII compliance attestations onchain.
Gas-Efficient EVM Read
Consuming smart contracts query status through simple view functions without running expensive on-chain SNARK verifiers, saving protocol gas costs.
Built for Production Financial & RWA Use Cases
zCred is engineered for financial protocols, undercollateralized lending pools, and compliance-sensitive asset tokenization platforms requiring verifiable confidentiality.
Built by Experienced Cryptography Builders
zCred is developed by a focused engineering team with prior open-source R&D across zkTLS, Noir ZK circuits, and TEE coprocessing.
Selected for Horizen Acceleration Cohort
zCred is participating in the Horizen Acceleration Program, building directly on Vela—Horizen's confidential coprocessor—in close collaboration with the core Horizen engineering team.
Shikhar Singh
Focusing on zero-knowledge circuit development, zkTLS data ingestion primitives, and confidential computing architecture with Horizen Vela TEE.
Why zCred Leads Confidential Identity
Verify Once, Access Across Web3
Users verify private Web2 and Web3 credential signals once. zCred generates purpose-bound nullifiers so you prove eligibility without dApps tracking your identity across applications.
Dual-Sided Confidentiality (Horizen Vela)
Horizen Vela TEE enclaves shield both user identity data and verifier decision logic. Neither private PII nor proprietary risk algorithms are revealed on public smart contracts.
zkTLS Web2 Signal Ingestion
Ingest authentic Web2 signals (bank data, GitHub activity, domain ownership) using zkTLS/TLSNotary primitives. Convert raw Web2 data into cryptographically unfakeable enclave inputs.
Base Smart Contract Settlement
Minimal attestations settle directly on Base Mainnet and Sepolia. Consuming dApps verify eligibility with a single view call (IZcredPassport.isValid), eliminating expensive on-chain ZK SNARK verification gas.
Built on Open Source ZAuth & NebulaID Research
zCred unifies our prior open-source initiatives—including ZAuth HQ's Noir ZK CAPTCHA and Chrome extension, alongside NebulaID's identity aggregation thesis. All repositories are open for public audit.
Ecosystem & Developer Repositories
zCred is grounded in production-tested code. Explore our open-source repositories across ZAuth HQ and NebulaID.
ZAuth HQ
Privacy-preserving verification layer including Noir ZK CAPTCHA circuits, Chrome extension for credential shielding & anonymous tokens, and zkVerify integration.
NebulaID
Universal identity aggregation research and zkTLS-style Web2 data verification primitives (TLSNotary / Reclaim pattern) for credential portability.
Build Confidential Decisions with zCred
Empower your Base lending protocol, RWA platform, or Web3 application with confidential WASM policy execution powered by Horizen Vela.