01
Encrypt on the user's device
The zCred SDK encrypts credentials to the enclave's public key. Data leaves the device sealed, and no server, RPC node or operator can read it.
P-521 ECDH · AES-256-GCM
SelectedHorizen AcceleratorBase Sepolia Testnet Beta
Private evidence.
Onchain decisions.
zCred lets institutions evaluate offchain records privately and gives smart contracts a signed eligibility decision, without handing sensitive identity documents to every app.
Design Partner Pilot Program Live
- Zero raw PII stored or custodied
- Hardware-isolated AWS Nitro enclaves
- ~2,520 gas view call on Base
attestation · policy #2enclave online
Private input P-521 · AES-256-GCM
- Entity registration
- Beneficial ownership
- Jurisdiction check
- Sanctions screening
Evaluated inside Horizen Vela enclave
On-chain result0x7f3a…c91e
Eligible (Approved)
- Sanctions check
- Clear
- Jurisdiction
- Permitted
- Validity
- Policy-defined
171-byte signed attestation · Illustrative flow~2,520 gas query (< 26k tx)
How it works
Private evidence in, verifiable decision out.
zCred separates where sensitive evidence is evaluated from where decisions are verified. Raw data never touches the chain, and contracts verify a signed cryptographic decision.
02
Evaluate inside an enclave
A Horizen Vela node decrypts and runs the policy inside a hardware-isolated AWS Nitro enclave. Memory is wiped as soon as the decision is made.
Rust → WASM · Wasmtime
03
Settle a signed verdict onchain
The enclave signs a 171-byte attestation anchored to the Base Sepolia registry. Contracts verify it with a single view call. Onchain enclave-attestation verification is on the roadmap.
EIP-712 · Base Sepolia
Policies
Purpose-built for compliance. Extensible by design.
Our core focus is Compliance Shield. All policies evaluate sensitive credentials inside the same hardware enclaves and settle signed verdicts to Base.
Core Flagship
Compliance Shield
For RWA issuers, institutional pools, and compliant Web3 venues
Run KYC, sanctions screening, and investor accreditation without ever custodying personal identity documents. Your smart contracts receive one compact verdict. Your servers store zero PII.
- OFAC 50% Rule & international sanctions screening
- Restricted-jurisdiction and geofence verification
- Accredited investor & organizational entity qualification
- Policy-defined TTLs (short validity windows for sanctions)
What your contract sees
- EligibleInstitutional vaults & RWA pools
- Review RequiredDocument expired or pending refresh
- IneligibleSanctioned or restricted jurisdiction
Result: 1 byte status · 32 byte nullifier · EIP-712 signature. Zero raw PII onchain.
Exploratory Enclave Policy Modules
RiskX Credit (Exploratory)
For DeFi lending & undercollateralized credit
Evaluating offchain bank cashflows and treasury balances inside hardware enclaves to emit private credit tiers (AAA to BBB) for dynamic collateral ratios.
Agent Passport (Exploratory)
For autonomous agent payment & spending rails
Cryptographically verifying autonomous agent code provenance and enforcing onchain transaction thresholds directly from hardware enclaves.
Data boundary
A clear line between what stays private and what settles.
Data minimization is built into the architecture, not left to policy. Compliance teams can see exactly what leaves the enclave.
Stays inside the enclave
- Names, passports and identity documents
- Bank balances, income and net worth
- Cash flow and repayment history
- Intermediate scoring logic and sub-metrics
- Any link between a user's activity across apps
Settles on-chain
- Policy ID and resulting status or tier
- App-specific, unlinkable nullifier
- Expiry timestamp
- Enclave signature over the result
Total footprint: 171 bytes per attestation
For developers
Gate any contract with one view call.
Your protocol never handles personal data. Check a user's zCred status directly from Solidity with ~2,520 gas and keep your compliance surface at zero.
- Single view call (~2,520 gas / 1 SLOAD) with zero oracle latency
- Works natively with any EVM contract on Base
- Time-bound expiry is live; onchain revocation hook is on roadmap
- TypeScript SDK for client-side credential encryption
RwaPool.solSolidity ^0.8.24
import { IZcredRegistry } from "./IZcredRegistry.sol";
contract RwaPool {
IZcredRegistry constant ZCRED = IZcredRegistry(REGISTRY);
uint8 constant COMPLIANCE_SHIELD = 2;
uint8 constant ACCREDITED = 1;
function invest(bytes32 nullifier) external payable {
(bool valid, uint8 status, , ) =
ZCRED.getAttestation(COMPLIANCE_SHIELD, nullifier);
require(valid && status == ACCREDITED, "accreditation required");
// ... mint pool shares
}
}FAQ
Common questions
Does zCred ever store personal identity data?
No. Data is decrypted strictly inside an isolated hardware enclave, evaluated against the policy bytecode, and immediately zeroized from memory upon execution. The only artifact that persists is an EIP-712 signed attestation containing a 1-byte status, nullifier, and expiry timestamp.
Who owns the compliance policy and evidence sources?
The institution operates as the Rule Owner: you define the qualification criteria, sanction lists, and approved evidence sources. zCred functions as confidential decision infrastructure that executes your policy in an isolated environment without custodying your users' records.
How does verification gas cost compare to zero-knowledge proofs?
A standard smart contract view call costs ~2,520 gas (1 SLOAD). Full contract gating in an invest or mint transaction typically consumes under 26k gas. In contrast, verifying complex ZK circuits on-chain can cost 250k–500k+ gas and requires expensive off-chain proof generation for multi-source data.
Which chains and settlement environments are supported?
zCred settles to Base today, with contracts live on Base Sepolia. The registry is a standard EVM contract deployable to any EVM L1 or L2 network, backed by Horizen Vela confidential coprocessing.
Is zCred production-ready?
zCred is active on Base Sepolia testnet with 99 passing test suites. Independent third-party security audits and direct onchain hardware PCR0 measurement verification are scheduled ahead of mainnet. We are currently onboarding initial design partners for our scoped pilot program.
Scoped Pilot Program
Request a scoped pilot.
Scope one evidence source, one policy rule, and one contract gate. Benchmark review speed, zero-leak isolation, and onchain gas overhead for your protocol.
0 bytes PII stored or custodiedAWS Nitro hardware enclave isolation~2,520 gas single-slot view verification