Zyrua

Problem

KYC and age/nationality checks normally require handing raw personal data to whoever's asking, and storing that data anywhere creates a breach liability and a GDPR problem. The goal was to let a user prove a fact about their identity — "I'm over 18," "I'm a resident of X" — without the verifier ever seeing the underlying document or data.

Architecture

Zero-knowledge circuits (Circom) generate proofs client-side over identity attributes; snarkjs verifies them without the raw data ever leaving the user's device. Backend in Rust (Actix-web) handles proof verification and session state; frontend in React + Vite handles attribute selection and proof generation.

Key decisions

• Client-side proof generation: keeps raw identity data off the wire entirely, which is the actual GDPR win, not just a compliance checkbox.
• Circom + snarkjs over a heavier ZK stack: smaller circuit development surface for attribute-style proofs (age, residency) versus general-purpose computation.
• Rust for verification: proof verification is the security-critical path, and Actix-web's throughput matters if verification runs per-request at scale.

Results

Working end-to-end flow from attribute selection to proof verification; ongoing development toward production GDPR compliance review.