<!--
Sitemap:
- [Welcome to Kakushi 隠し](/index): Kakushi is a private execution layer for institutions building on stablecoin rails.
- [What is Kakushi](/introduction/what-is-kakushi): Money is private.
- [Using Kakushi with AI](/introduction/using-kakushi-with-ai): Every page in these docs is available as plain markdown for use with language models.
- [Quickstart](/quickstart): This is the ten minute path.
- [Zones and the trust model](/concepts/zones-and-trust): A zone is a private blockchain only you can see inside, with a public chain's proofs underneath.
- [The portal](/concepts/the-portal): Money walks in as public USDC and becomes private the moment it crosses.
- [Accounts and custody](/concepts/accounts-and-custody): Your existing wallet address is already a Kakushi account. Nothing to deploy, nothing to enroll.
- [Bring your own address](/concepts/bring-your-own-address): A zone account is just an address, the one an auth key recovers to, with nothing deployed.
- [Virtual addresses](/concepts/virtual-addresses): Hand every customer their own address, the way a bank hands out virtual account numbers.
- [Private transfers](/concepts/private-transfers): Pay fifty thousand people and publish zero salaries.
- [Settlement and composability](/concepts/settlement-and-composability): Two institutions settle in real time without sharing a ledger or seeing each other's books.
- [Private deposits and withdrawals](/concepts/private-deposits-and-withdrawals): Soon, even the edges go dark.
- [Proofs and the verifier](/concepts/proofs-and-the-verifier): You cannot fake a balance, and you can prove you are solvent without showing a single customer.
- [Fees and gas](/concepts/fees-and-gas): Your users never hold ETH and never see gas. They pay in the dollars they are already sending.
- [Privacy and disclosure](/concepts/privacy-and-disclosure): The public sees nothing, you see everything, the regulator sees what the law entitles them to.
- [Zone policies](/concepts/zone-policies): Compliance is built into the zone. You configure your program; the substrate enforces it on every transfer.
- [Onboard a customer](/guides/onboard-a-customer): Two calls and a webhook, and your customer has a private on-chain account.
- [Accept deposits](/guides/accept-deposits): Anyone with funds on the host chain can pay into your zone, and it lands as a private balance for your user.
- [Make private transfers](/guides/private-transfers): One call moves money privately. One call pays a whole payroll.
- [Process withdrawals](/guides/withdrawals): Burn inside, release canonical USDC outside, in one call.
- [Settle between zones](/guides/settle-between-zones): Send money to another institution's zone like it is a withdrawal. It is interbank settlement.
- [Handle webhooks](/guides/webhooks): React to money moving. Do not poll for it.
- [Reconcile](/guides/reconcile): Two numbers that must always match. Assert it on a schedule.
- [Non-custodial integration](/guides/non-custodial-integration): The user signs on their device. You never hold the key, and you still cannot move their money.
- [Compliance and disclosure](/guides/compliance): You hold the whole record. Disclosure is an export, not a negotiation with the protocol.
- [SDK reference](/sdk-reference): The look-it-up layer.
- [Connect and EVM reference](/connect-and-evm-reference): The chain-level integration detail.
- [Run a zone](/run-a-zone): Most operators never run any infrastructure.
- [Protocol spec](/protocol-spec): The deep technical layer, for auditors and engineers integrating below the SDK.
- [Resources](/resources): See Key concepts for the working vocabulary, expanded throughout Core concepts.
-->

# What is Kakushi

Money is private. Not secret, not anonymous, just private in the ordinary way every bank, payroll system, and brokerage already assumes. Your balance is your business. Public blockchains broke that default by putting every balance, counterparty, and amount on a permanent, world-readable ledger.

Kakushi puts the privacy back without leaving the chains you already use. A Kakushi zone is a private execution environment you operate on top of a public chain like Base. It behaves like the EVM you know, with one difference: balances and transaction history are visible to you and to the account holder, and to no one else.

There is no new chain to adopt, no token, and no new wallet for your customers. You run the zone, you keep the customer relationship, and the privacy is the default state of the system.

## How it works at a glance

Four parties, four different views of the same zone:

* **The public** sees only what crosses the boundary: a deposit entering the zone and a withdrawal leaving it. Everything in between is invisible.
* **The operator** (you) sees every account and every transaction in the zone, the way a bank sees its core ledger.
* **The account holder** sees their own account, the way a bank customer sees their own statement.
* **The regulator** sees whatever you disclose through legal process, exactly as today.

Funds enter through a portal contract on the host chain. The portal locks the canonical asset and the zone mints a representation backed one to one. Funds leave the same way in reverse: burn the representation, release the canonical asset. Every state transition is verified with a proof, so you cannot create balances out of thin air, invent a withdrawal, or break the backing. The cryptography enforces honesty. The zone enforces privacy.

![Architecture diagram showing the host chain, portal, and zone with a proof, where a deposit enters the zone and a withdrawal leaves it.](/images/architecture.svg)

## Who it is for

Kakushi is one substrate that serves any institution that needs to move money on-chain without making it public.

* **Banks** issuing tokenized deposits, with private interbank settlement zone to zone.
* **Stablecoin issuers and infrastructure platforms** giving their own customers private balances and transfers.
* **Payments companies and PSPs** settling across borders without exposing flows.
* **Fintechs and neobanks** offering real on-chain accounts that are not public to the world.
* **Payroll and contractor platforms** paying thousands of people without publishing a single salary.
* **Trading and treasury teams** holding positions and cash without broadcasting them.

## Key concepts

A short glossary. Each is covered in depth in [Core concepts](/concepts/zones-and-trust).

* **Zone**: the private execution environment you operate. A private EVM with a single sequencer, which is you.
* **Operator**: the institution running the zone. Sees everything inside, submits batches to the host chain.
* **Host chain**: the public chain the zone settles to. Base is the primary host.
* **Portal**: the host-chain contract that locks canonical assets on deposit and releases them on withdrawal.
* **Canonical asset**: the real asset on the host chain, for example USDC. It stays locked in the portal while it is represented inside the zone.
* **Zone representation**: the one-to-one backed balance a customer holds inside the zone. A tokenized claim on the locked canonical asset.
* **Virtual address**: a host-chain address that routes incoming funds to a zone account, the way a bank virtual account number routes deposits into your real account. Many can map to one account.
* **Batch**: a group of zone transactions settled to the host chain together, with one proof.
* **Proof**: the cryptographic guarantee that a batch represents an honest state transition.
* **Verifier**: the host-chain contract that checks a proof. Proof-agnostic by design.
