What you see
The Compliance screen mirrors your activity, one row per payout, with a Disclose action on each row and a running list of disclosures you have already produced. Select one payout or several, disclose, and export. Everything happens on your device with the escrow key you hold.How disclosure works
1
Pick a payout
Open Compliance, filter to the payout an auditor is asking about, and select it. You can
select more than one to disclose a set at once.
2
Disclose
Your device decrypts the amount using the escrow/disclosure key, a key you hold on your
device, not Confiroll. The decryption happens locally in your browser.
3
Get a verifiable disclosure
The result is the amount plus a cryptographic proof that this amount matches the encrypted
value already recorded on-chain for that payout. The proof ties the figure to the exact
settlement, so it cannot be swapped for a different number.
4
Export for auditors
Export the disclosure and hand it to the auditor. They check it against the public on-chain
data themselves. No account, no Confiroll login, and no trust in your word required.
What a disclosure contains
The on-chain settlement this disclosure is about, so the auditor can locate the exact
transaction on the block explorer.
The cleartext figure, decrypted on your device with the escrow/disclosure key.
A cryptographic proof that the disclosed amount corresponds to the ciphertext recorded on-chain
for that payout. This is what makes the disclosure verifiable rather than a bare assertion.
The on-chain values the proof checks against, so the auditor can verify with the public ledger
and nothing else.
Who holds the key
You hold the escrow key
The escrow/disclosure key lives on your device, derived and kept on your side. Disclosure
runs locally in your browser against public on-chain data.
Confiroll holds nothing
Confiroll holds zero keys and cannot read any amount. Its servers only serve the public
on-chain data that a disclosure is checked against.
This is the whole point of Confiroll being blind. Confiroll cannot read your amounts, and you
can prove them. Because the disclosure is produced on your device and verified against the
public ledger, its correctness never depends on trusting Confiroll.
An audit workflow
1
An auditor requests specific payouts
Your auditor names the contractors and periods they need substantiated, for example every
payout to one contractor in a quarter.
2
You disclose the set
In Compliance, filter to those payouts, select them, and disclose. Your device decrypts each
amount with the escrow key and builds a matching proof for each one.
3
You export and deliver
Export the disclosures as a bundle and send it to the auditor alongside the transaction
references.
4
The auditor verifies independently
The auditor checks each disclosed amount against the on-chain ciphertext using the included
proof. Each figure ties to a real, final settlement, so the audit stands on cryptographic
verification rather than your assurance.
Under the hood, each payout carries an encrypted copy readable only by the holder of the
escrow/disclosure key. You hold that key, and disclosure happens on your device against the
public on-chain data. See
Confidential token flow for exactly what is encrypted and
how the matching proof is formed.
FAQ
Can Confiroll disclose a payout on my behalf?
Can Confiroll disclose a payout on my behalf?
No. The escrow/disclosure key is yours and stays on your device. Confiroll holds zero keys
and cannot read any amount, so it has nothing to disclose. Only you can produce a disclosure,
and you produce it locally in your browser.
Is a disclosure independently verifiable?
Is a disclosure independently verifiable?
Yes. A disclosure is the amount plus a proof that the amount matches the on-chain ciphertext
for that payout. An auditor checks the proof against the public ledger. They do not need to
trust you, and they do not need to trust Confiroll. The math either verifies or it does not.
Can I disclose many payouts at once?
Can I disclose many payouts at once?
Yes. Filter to the payouts an audit covers, select the set, and disclose them together. Your
device decrypts each amount and builds a matching proof for each, and you export the whole set
as one bundle to hand off.
What does the auditor actually receive?
What does the auditor actually receive?
A bundle of disclosures. Each one names the on-chain payout, states the cleartext amount, and
includes a proof that the amount matches the on-chain ciphertext, plus the public reference
data to check against. The auditor verifies each figure against the public ledger and ties it
to a final settlement.