The world's most valuable commercial data sits behind logins — bank balances, ride histories, streaming activity, employer payrolls. zkTLS is the breakthrough that lets a user prove any of it, instantly, without sharing a password and without the platform's permission. EarnOS has built the engine that makes it work at scale.
Proof of execution · Today
187
Provider integrations
65M+
Verified outcomes
3M+
Verified humans
120+
Brand contracts
$0
Marginal cost / proof
Act 01 · The Problem
The internet's most valuable data is locked behind logins.
Every meaningful commercial fact about a person — what they earn, what they spend, where they travel, what they own, who they bank with — sits inside a third-party platform's database. The owner of that data, the user, has no way to prove any of it to anyone else without surrendering their password or trusting a screenshot. The entire economy works around this gap.
$474B
Annual ad spend wasted on unverified humans
01
Brands pay $300B+ a year to advertise to people they cannot verify exist. More than half of web traffic is now bots.
02
Lenders, insurers, and platforms re-do the same KYC check dozens of times because no proof carries between them.
03
The user — who actually owns this data — is the only party that cannot monetise it. Every other participant in the chain extracts value from data the user can't even prove they have.
Act 02 · The Unlock
zkTLS is the cryptographic key to that vault.
zkTLS — zero-knowledge transport layer security — lets a user mathematically prove any fact about their account at any login-protected service. Without sharing the password. Without the platform's cooperation. Without revealing anything beyond the specific fact being proven. It is the missing trust primitive of the internet, and it is now production-grade.
01
Before zkTLS
To prove your bank balance you'd screenshot it, share your password, or beg the bank for a verification letter. All three are slow, leaky, or forgeable.
After zkTLS
A signed cryptographic proof attesting "this user has > $10,000 at Chase" — generated in seconds, with the user's password never leaving their device.
02
Before zkTLS
To verify a user is a real Spotify customer, a brand had to trust an OAuth integration built by someone Spotify approved. If Spotify said no, the integration died.
After zkTLS
The user themselves proves it directly. Spotify's permission is not required. The integration cannot be revoked because there is nothing to revoke.
03
Before zkTLS
A KYC check at one bank meant nothing to a second bank. Every fintech, lender, and platform pays $20–$200 to re-verify the same identity from scratch.
After zkTLS
A proof of "verified at a Tier 1 bank" travels with the user across every service — portable, composable, and reusable — without the original bank ever being involved again.
04
Before zkTLS
Brands paid premium CPMs to advertise to "verified humans" they could only assume existed. Half the impressions were bots.
After zkTLS
Every user touched by a campaign carries a cryptographic proof of being a real human, with real accounts, on real platforms. Outcome-priced advertising becomes possible for the first time.
The shorthand: zkTLS is to user data what HTTPS was to the web. Once the trust primitive exists, every commercial layer that sits on top of it gets rebuilt — advertising, lending, loyalty, identity, insurance, hiring. The companies that own the rails will own a generational platform.
Act 03 · The Score
Many proofs. One verdict. Total portability.
A single zkTLS proof says one thing about one account. Stacked together — with device signals, KYC, email, passkeys, and on-chain identity — they fuse into a composite score: Pulse. One number, out of 20, summarising a human's whole digital life. The score travels with the user, accepted by every service downstream, without re-onboarding, re-KYC, or re-running a single proof.
Pulse
● Real · Human
18/ 20
Verified human
Continuous · Cryptographic · Private
The composition · Four assurance rungs
A threshold of 18 / 20.
Pulse is the weighted sum of every signal a user accumulates — from a passive IP fingerprint to a high-assurance zkTLS bank attestation. Crossing 18/20 unlocks "verified human" status, the gate every commercial unlock sits behind. The score updates continuously as new signals fuse in, and only the verdict is ever revealed.
0 pts
Signal
IP_GEO · MMP · device hint
0.5 pts
Self-asserted
email · display name
1.5 — 6 pts
Verified
phone · zkTLS:Spotify · zkTLS:Netflix
6 — 16 pts
High assurance
KYC · zkTLS:Kraken · World ID · Self.xyz
Implication 01
Travels with the human.
Every downstream service — fintech, marketplace, brand, lender, employer — accepts a Pulse-signed verdict instead of running its own onboarding. The score is the credential. The repeat-KYC tax disappears for any participant on the network.
Implication 02
Compounds with use.
Every new proof a user generates raises their score, raises their lifetime value, and makes the next service that accepts Pulse more confident. The user's incentive to accumulate proofs aligns with EarnOS's incentive to provide them.
Implication 03
Privacy by construction.
Pulse reveals the verdict — never the underlying data. GDPR-compatible by construction, not by promise. Regulators see privacy-by-design. Users see one button. Brands see a green light.
Act 04 · The Commercial Unlocks
Four multi-billion-dollar markets, all gated by the same primitive.
Once you can prove any logged-in fact, you stop competing on inferred data and start charging on certainty. Four distinct commercial layers open up — each independently a category, each compounding the others. EarnOS already has products live in all four.
Unlock 01 · Verified Attention
Advertising priced on certainty, not impressions.
Brands pay only when a real, cryptographically-verified human completes a real action — a Spotify connect, an Uber ride, a Strava session. The cost-per-mille model breaks; the cost-per-proven-outcome model takes its place. EarnOS routes brand spend directly to users at a 75/25 split.
Live with
Kraken pays for verified crypto-active users · Uber pays for verified rides · 120+ brands signed
Unlock 02 · Verified Earnings & Spend
Underwriting on real cashflow, not credit bureaus.
A user can prove their Uber driver income, their freelance payouts, their bank deposits, their crypto holdings — directly to a lender, in seconds, without screenshots or 1099 forms. Underwriting models that today rely on stale FICO scores can switch to live, cryptographically-attested cashflow data.
A Hilton Diamond member, a Marriott Bonvoy elite, a frequent United flyer — all can prove their status to any third-party brand and receive a discount, an upgrade, or a tailored offer. The walled garden of loyalty programs becomes composable. New entrant brands can finally target competitors' loyal users.
A user proves once that they have a Tier 1 verified bank account or government ID. That proof becomes a portable credential — accepted by every fintech, marketplace, and platform downstream. The repeat-KYC tax that today costs the financial sector tens of billions a year disappears for any participant on the network.
We didn't invent zkTLS. We built the only engine that makes it commercial.
zkTLS as a research primitive has existed for a few years. Turning it into infrastructure that runs at consumer speeds, across hundreds of providers, with marginal cost approaching zero — that is the eight-figure engineering investment EarnOS has already made. The Proof Engine is the result.
187
Providers integrated
23
Categories covered
4
Proof-generation modes
~$0
Cost per in-house proof
The four-mode cascade
For every proof request, the engine picks the strongest method that works for that provider and falls back automatically. The user never sees the difference; the routing layer is the moat.
Mode 01
Direct
1–3 seconds
Fastest path. Used where speed matters more than cryptographic privacy on the wire. Standard for ~20 providers.
Mode 02
Proxy
2–5 seconds
Routed through a residential network. Provider sees a normal request; EarnOS never sees the user's plaintext data.
Mode 03
MPC-TLS
3–5 seconds
Two-party cryptography. Neither EarnOS nor any third party can see the user's session data. Default for sensitive providers.
Mode 04
MPC-TLS + ZK
+ 6 milliseconds
Adds a zero-knowledge proof layer. The user proves a fact (e.g. "balance > $X") without revealing the underlying value. Strongest privacy guarantee on the market.
The Hybrid Network — coverage moat
For the 187 covered providers, EarnOS runs the proof in-house at near-zero marginal cost. For long-tail providers, EarnOS routes to external zkTLS networks (Reclaim, Opacity, Primus, vLayer) through a single adapter — paying per-proof only when needed. The result: cost advantage on the head of the curve, full coverage of the tail, and switching costs that compound with every new integration.
Act 06 · The Moats
Why the Engine is hard to copy.
A research lab can publish zkTLS papers; a startup can integrate one provider. Replicating what EarnOS has built — the schema library, the routing layer, the cost economics, the brand pipeline that makes it all worth running — is a multi-year, multi-team effort that compounds against itself the longer you wait to start.
Moat 01
Provider schema library.
Each of the 187 providers required hand-tuned schema work — login flows, cookie semantics, JSON path extraction, anti-bot bypass, refresh logic. This is years of integration debt that can't be shortcutted. Every new schema makes the next one easier; every schema break makes the network more resilient.
187 providers · 23 categories · 400+ endpoints
Moat 02
Cost structure at scale.
Routing the head of the curve in-house drives marginal cost toward zero. External peers cost per-proof — but only get used for the long tail. A competitor that doesn't operate the in-house engine is paying a vendor on every proof. At consumer volume, that gap compounds into a structural cost moat measured in tens of millions per year.
~$0 in-house · pay-per-proof externally
Moat 03
Routing & composability.
The Hybrid Proof Orchestrator picks the best mode and provider for each request, falls back gracefully, aggregates across networks, and signs the result. This is a year of engineering most competitors won't recreate — and once it's wired into a brand's pipeline, switching networks means re-wiring every integration.
4 proof modes · 5 networks · single API
Moat 04
Demand-side brand pipeline.
120+ signed brand contracts and $120M+ in accessible GMV mean the engine isn't a research project — it's already paying for itself. New zkTLS networks have to build the demand side from scratch. EarnOS converts every new schema into immediate brand revenue the day it ships.
120+ brands · $120M+ GMV · live commercial loop
The compounding effect
More schemas drive more brand integrations. More brand integrations fund more schema work. More schemas reduce per-proof cost. Lower cost wins more brand business. Every loop tightens the others. The wheel turns once and never stops.
Act 07 · The Markets
Each unlock is a category. Stacked, they are a platform.
The conservative way to size this is to look at each commercial unlock alone. The honest way is to recognise that EarnOS sits across all four — and that a single user generates value across multiple at the same time. The verified human becomes the unit of account.
$300B+
Annual TAM
Verified Attention
Global digital ad spend that today flows to bots, fraud, and unverifiable users. Outcome-priced advertising on cryptographic proof of human is the rebuild.
Cat. Dentsu / WFA
$60B+
Annual TAM
Underwriting & Credit
Lending decisions made on verified live cashflow instead of stale credit bureau data. Direct-to-source income and balance attestation replaces stated-income loans.
Cat. Plaid / FICO
$100B+
Annual TAM
Loyalty & Rewards
Walled-garden loyalty programs (airline, hotel, retail) that today don't compose with each other. zkTLS unlocks cross-brand loyalty arbitrage at industrial scale.
Cat. Bond Brand Loyalty
$20B+
Annual TAM
Identity & KYC
Repeated identity verification spend across fintech, marketplaces, gambling, and crypto. Single verification, infinite portability — the repeat-KYC tax disappears.
Cat. Onfido / Persona
Sources directional, drawn from public industry reports. Sized to illustrate scale of unlock; not modelled as captured GMV.
Proven.
The internet's missing trust primitive is built. EarnOS owns the engine, the schemas, the routing, and the brand pipeline that turns it into revenue. Every proof we run today makes the next one cheaper, faster, and more valuable.
