Sumproof — a shared number no one can rig
Every industry benchmark, price index, and reference rate today is produced the same way: everyone ships their data to a middleman, and the middleman says trust me, the number is right. Both halves are broken — the data-sharing takes months of legal work, and no one can check the middleman’s math. That failure has a name: LIBOR.
Sumproof produces one pooled statistic that is exact, publicly re-verifiable byte-for-byte, and tamper-evident — with no trusted aggregator, and each party’s raw data staying home. A number that carries its own proof.
Exact and byte-reproducible — the pooled number recomputes bit-for-bit on any machine
Publicly re-verifiable — any outsider re-derives it and catches a dropped, duplicated or altered contribution
Private option — each party can keep its raw data hidden while the pooled result still verifies
No trusted aggregator — the party publishing the number is never trusted for correctness
See it live on real crypto data
BTC, ETH and SOL reference rates streaming live from major exchanges, each signed and re-verified in your browser by the actual Rust verifier compiled to WebAssembly. Simulate the October 2025 attack — one venue dumps 30% — and watch the single feed crater while the verifiable rate holds and names the venue. Then switch to private aggregation: five desks pool one benchmark under Pedersen commitments, and it verifies without revealing a single book. No incumbent (CF Benchmarks, Chainlink, Pyth) offers a verifiable rate that hides the constituents’ data.
Open the live demoYour EU Article 9 pay-gap report — browser-local, verifiable
The EU Pay Transparency Directive’s first reports are due June 2027, on 2026 pay data. Sumproof Pay computes all seven required statistics entirely in your browser — payroll never uploaded — and produces a canonical report your works council can verify independently. Free draft tool live now.
Compute your pay-gap reportValidated on real, public data
A cross-exchange BTC reference rate from 5 exchanges’ real trades, verified in your browser.
4,077 U.S. hospitals’ emergency-department wait times, pooled across 53 state associations.
4,621 U.S. banks’ net income, pooled by state — with every contribution hidden in the private mode.
How it holds up
The aggregation math is bitrep, an open-source library — necessarily open, because the whole point is that you verify the number yourself. Each party signs its own contribution; a Merkle-sum tree binds the exact pooled result to exactly those signed contributions.
The construction is machine-checked (Lean 4 proofs of the tree binding and the private-mode homomorphism and binding), symbolically verified (ProVerif, with the aggregator modelled as the attacker), red-teamed on real messy data, and re-implemented in a second language to prove the result is byte-identical across implementations.
Honest scope: it makes every input attributable — it does not read minds. A member can still misreport its own data; the construction makes that signed and litigable, not invisible. Privacy in the private mode means raw data stays home, not that the pooled aggregate is secret.
Who it’s for
Industry associations that publish member benchmarks; crypto reference-rate and proof-of-reserves providers; trading desks that want a shared, exact, verifiable reference without revealing their order flow; and anyone whose published number needs to survive the question “prove it.”
Proprietary. Pilots available now.
A fixed-fee pilot runs a verifiable benchmark for your group and hands you the artifact, the verify page, and a report. Built and operated by Clouthier Simulation Labs.
Request a pilot