Compliance
Current Status
WorkProof is currently in beta with the following status:
- No formal certifications yet
- Security best practices followed
- Code reviewed internally
- Running on Base Sepolia testnet only
- Not recommended for production use
Beta Period
During the beta phase (Q1 2025):
- Service is free to use (pay only for gas)
- No SLA guarantees
- Data may be cleared periodically
- API may change without notice
- Mainnet launch planned for Q2 2025
Data Handling
What We Store
| Data | Location | Retention |
|---|---|---|
| Job metadata (ID, status, timestamps) | Controller memory | 24 hours |
| Payment info (tx hash, amount) | Controller memory | 24 hours |
| Attestation data | Base Sepolia blockchain | Permanent |
| Code submitted | Ephemeral VM only | Destroyed after execution |
What We Don't Store
- User accounts or identities
- API keys (not required)
- IP addresses (rate limiting only, not logged)
- Execution logs (only attestation hash stored)
Encryption
- All API communication: TLS 1.3
- Blockchain data: Public by design
- No persistent database (in-memory only)
Operational Security
- Environment validation - Required env vars checked on startup
- Unhandled rejection catching - Prevents crashes from async errors
- No secrets in code - All sensitive config via environment variables
GDPR Considerations
WorkProof is designed to minimize data collection:
- No personal data collected
- No user accounts
- No cookies or tracking
- All data ephemeral (except blockchain)
Contact
For compliance questions:
- Email: partnerships@workproof.run
- Contract:
0x3Faff789460Bf79db94b0034AF7dd779C81e6BA9 - Network: Base Sepolia
Last updated: February 5, 2026