Founding pilot

Buyer integration pilot.

A small, paid first step for a team evaluating privacy-preserving data acquisition. Synthetic or customer-approved non-sensitive data only. Marketplace payments remain simulated.

01 / The offer

What you get.

Verifiable, end to end delivery against a live LoopXXI attestation system.

Synthetic data only
One capsule, fully verified.

Within five business days of scope confirmation, LoopXXI delivers one synthetic encrypted capsule, a production_server attestation you can verify yourself, buyer-local decryption integration guidance, and a concise evidence packet.

Delivered: one synthetic encrypted capsule
Verified: production_server attestation
Guidance: buyer-local decryption
Evidence: what we could and could not see
$149 one time, subject to scope

Three founding slots. Five business day delivery after scope is confirmed. No real seller data, no data brokerage, no custody, and no payment handling between buyer and seller.

Inquiry only. No checkout, no payment, and no obligation until scope is confirmed.
02 / Honest scope

What LoopXXI could and could not see.

The evidence packet is the point. It states exactly what the architecture exposes.

LoopXXI could see

The encrypted capsule row, its integrity hashes, the user signature, the public verification key, and the production_server attestation receipt.

LoopXXI could not see

The capsule plaintext, the data encryption key, the vault key, the vault passphrase, or the buyer local decryption output. Encryption happens on device. Keys are held by the user and never transmitted.

Provenance is not a claim of truth.

A LoopXXI attestation proves that an authenticated LoopXXI session sealed this capsule at time T. It does not prove the capsule content is true, accurate, or trustworthy.

03 / Scope and limits

What this pilot is not.

Clear boundaries so nothing is overclaimed.

  • Data: synthetic or customer-approved non-sensitive data only. No real personal data is sold or brokered.
  • Payments: marketplace payments remain simulated. No real sats move and no checkout is activated.
  • Custody: LoopXXI never holds buyer or seller funds or keys. There is no payment handling between buyer and seller.
  • Lightning: Real Lightning is not enabled for this pilot.