> For the complete documentation index, see [llms.txt](https://gl-docs.gitbook.io/zkpass/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gl-docs.gitbook.io/zkpass/zkpass-developers-guide/zkpass-modules/dvr/key-concepts/zkpass-proof.md).

# zkPass Proof

A zkPass Proof is a token that the zkPass Service generates. It is a composite of several key components.

* <mark style="color:orange;">**Zero-Knowledge Proof**</mark>: This is the crux of the cryptographic proof generated by executing a specific query on user data using a Zero Knowledge Virtual Machine (ZKVM), which runs within a Trusted Execution Environment (TEE). It verifies that the query has been executed correctly while keeping the underlying data confidential.
* <mark style="color:orange;">**Query Output**</mark>: This results from the application running on the ZKVM. This output is intended to be shared, and the Zero-Knowledge Proof guarantees its integrity.
* <mark style="color:orange;">**Metadata**</mark>: This includes auxiliary information about the proof from the application's perspective. In the context of DVR, they are timestamps, the unique identifier for the Data Verification Request (DVR), and other contextual data that might be necessary for auditing or verification.

## <mark style="color:blue;">Pipeline for zkPass Proof</mark>

The zkPass proof is constructed in a DVR pipeline of processes that start with two main inputs: User Data and the DVR Info, as illustrated here.

<figure><img src="https://2052969365-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4jZpZP97P7tNPc6tR9Mf%2Fuploads%2Fb4UhIWcTAIMwBr3JZB5I%2FzkPass%20DVR%20App%20run-time%20pipeline.png?alt=media&amp;token=60001b13-fec1-45a9-a67c-c7c4cf45f4ea" alt="" width="375"><figcaption></figcaption></figure>

## <mark style="color:blue;">Integrity and Authenticity</mark>

The zkPass Proof object is signed by the zkPass Service into a JSON Web Signature (JWS) token to ensure its authenticity and integrity. Any tampering with the proof token can be easily detected, providing an additional layer of security.

<figure><img src="https://2052969365-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4jZpZP97P7tNPc6tR9Mf%2Fuploads%2FBmhpTysiVl1emMvvJA9N%2FzkPass%20Proof%20Token.png?alt=media&amp;token=8ff6d272-dfe8-4803-8711-0b0a748e42c8" alt="" width="375"><figcaption></figcaption></figure>

## <mark style="color:blue;">Role in Data Privacy</mark>

The zkPass Proof facilitates a paradigm where the Verifier does not need direct access to the original, sensitive data. The Verifier can confirm the validity of a specific claim about the data by examining the Zero-Knowledge Proof. This is particularly powerful in scenarios that require stringent data privacy controls.

## <mark style="color:blue;">Transparency in Query Execution</mark>

The zkPass Proof isn't just about data confidentiality; it also ensures transparency in query execution. It is an immutable record, confirming that a particular query has been executed faithfully against the user data, adhering to all specified conditions or requirements.

## <mark style="color:blue;">Summary</mark>

The zkPass Proof is a robust, secure, and flexible mechanism designed to facilitate privacy-preserving data operations. It encapsulates the cryptographic proof of a query's accurate execution, the query's output, and relevant metadata, all wrapped in a secure, authenticated package. It provides a versatile and transparent way to conduct data operations while maintaining the highest data privacy and integrity standards.<br>