Skip to main content
There are three broad ways to put a confidential or compliance-controlled token onchain: build confidential token contracts yourself, adopt a permissioned token standard (such as ERC-3643) that controls who can hold an asset, or use managed confidential-asset infrastructure that handles confidentiality, compliance, and operations behind an API. They solve different parts of the problem, and only the third gives you encrypted balances plus disclosure, audit, and operations without building a blockchain organization.

​
The three approaches

​
1. DIY confidential token contracts

Write and operate your own contracts that encrypt balances and amounts and verify activity with zero-knowledge proofs. This gives maximum control but requires deep expertise in cryptography, proving systems, circuits, key management, and onchain operations — and you own all of it forever, including audits, incident response, and upgrades.

​
2. Permissioned / compliance token standards (e.g. ERC-3643)

Standards like ERC-3643 (“T-REX”) add identity and permissioning to tokens: only verified, allowlisted identities can hold or transfer the asset. This is valuable for regulated distribution — but note what it does and does not do. It controls who participates; it does not by itself encrypt balances or amounts. On a public chain, an ERC-3643 token’s balances and transfers are still visible; the privacy is about gating participation, not hiding values.

​
3. Managed confidential-asset infrastructure (Ryle)

A platform that provides encrypted balances and amounts, selective disclosure, audit logging, policy/KYC controls, and operations behind a Console and APIs. You work with business-level primitives — assets, accounts, mints, redemptions, policies, events — while the platform manages proofs, circuits, signing, gas, and network coordination. It can also layer confidentiality onto an asset you already issue or a third-party asset.

​
Side-by-side comparison

​
How to choose

  • Need confidentiality (hidden balances/amounts) and compliance? That is the gap managed confidential-asset infrastructure fills.
  • Need only gated participation on otherwise-public tokens? A permissioned standard may be enough.
  • Have a dedicated cryptography and protocol team and a reason to own the stack? DIY is possible, at significant ongoing cost.
Ryle is designed so that integrating confidential assets feels closer to integrating a payments processor than building a blockchain product.

​
FAQ

Not on its own. ERC-3643 controls which identities can hold or transfer an asset, but balances and transfer amounts remain visible on a public chain. Confidentiality requires encrypting those values, which is what confidential digital assets do.
No. Managed confidential-asset infrastructure provides both: encrypted balances and amounts plus participation control, selective disclosure, and an audit trail.
Yes. Ryle supports a confidential layer on an asset you already issue, a brand-new confidential asset, or confidentiality on a third-party asset — all behind the same API.