Ethereum Foundation · Privacy Cluster

Privacy for Institutions
on Ethereum

We bridge institutions and the Ethereum privacy ecosystem. From requirements to deployable solutions.

Explore case studies
Scroll
Institutions
IPTF
From requirements
to deployable solutions
Ecosystem

Map the problem space

21 use cases gathered from direct institutional conversations. Real privacy requirements grounded in regulatory constraints, not speculated.

Prototype solutions

End-to-end proof-of-concepts across ZK proofs, MPC, FHE, and TEEs. We stress-test architectures and find where they break.

Coordinate the ecosystem

Workshops with vendors and institutions. Neutral vendor assessments. Connecting the people building privacy tools with the people who need them.

What institutions tell us

"We spent six months evaluating privacy solutions before finding IPTF. Their map saved us from three vendor pitches that didn't match our compliance requirements."

HD
Head of Digital Assets
European Asset Manager

"The CROPS framework gave our risk team a common language to evaluate privacy architectures. We use it in every infrastructure decision now."

RA
Risk Analyst
Global Custodian

"Most privacy research is either too academic or too marketing. IPTF is the only resource that tells us what actually works and what doesn't."

CT
CTO
Digital Securities Platform
Case Studies

From requirements to solutions

All case studies
01
Atomic DvP Settlement
An asset manager sells a EUR 1M corporate bond position to a bank on an L2 network. Both parties want assurance that the bond and the EURC payment exchange atomically: either both legs settle or neither does, with deterministic recovery if a leg fails. The same primitive must serve derivatives margin and termination flows.
Addresses use case: Private Bonds
02
Private Bond Issuance & Trading
A bank issues a EUR 100M corporate bond series with private allocation amounts to 50 institutional investors and operates an active secondary market with RFQ-based price discovery. The bank needs hidden positions and trade sizes, atomic same-chain DvP against EURC, jurisdiction-specific selective disclosure (eWpG, MiCA), and an automated 24/7 market with daily settlement.
Addresses use case: Private Bonds
03
Private Transaction Broadcasting
A trading desk routes large institutional orders against on-chain venues. Visible transactions in the public mempool enable front-running, sandwiching, and intent inference; the spread cost on a EUR 25M order is large enough to dominate fees for the year. The desk needs broadcasting infrastructure that hides the order content, the timing, or both, while preserving validity and ordering guarantees.
Addresses use case: Private Stocks
04
Private Smart Derivatives
A bank trades ERC-6123 derivatives (interest-rate swaps, FX forwards, simple options) with named counterparties. Margin balances and daily settlement deltas must remain hidden from competitors; settlement must run automatically on the daily cadence; regulators must retain audit access on demand. Trade size, direction, and notional are competitively sensitive.
Addresses use case: Private Smart Derivatives (ERC-6123)
05
Private Identity
A bank needs to verify that counterparties and end users meet KYC, sanctions, and jurisdictional eligibility requirements without exposing personal data on chain or building cross-institutional dossiers. The same architecture must serve government registries, DAOs, and humanitarian programs whose users may be in jurisdictions where the issuer becomes unavailable, hostile, or destroyed.
Addresses use case: Private Identity
06
Private Money Market Funds
A treasurer subscribes USD 50M USDC to a tokenized T-bill money market fund. Position size, redemption timing, and yield attribution must be hidden from competitors and other fund participants. Fund NAV must be publicly verifiable on a daily or intraday cadence and must remain verifiable even if the fund operator goes offline; redemptions must continue without interruption under stress.
Addresses use case: Private Money Market Funds
07
Private Payments
A multinational bank executes daily institutional stablecoin transfers (USDC, EURC) between subsidiaries, mid-cap counterparties, and a humanitarian arm disbursing to recipients in adversarial jurisdictions. The bank needs amount and counterparty privacy on chain, selective disclosure for regulators by jurisdiction, integration with SWIFT/ISO 20022, and a separate rail where recipients have no client-side proving capability and intermediaries may be compelled or breached.
Addresses use case: Private Stablecoins for Institutional Payments
08
Private Trade Settlement
A treasury desk and a counterparty bank settle a EUR 25M corporate bond against EURC. Both parties want hidden amounts and counterparty identities, atomic execution, and selective regulator access. Some trades involve a bond on a privacy L2 against cash on Ethereum L1, forcing cross-network coordination.
Addresses use case: Private Bonds
09
White-Label Infrastructure Deployment
A bank wants to launch a private-stablecoin service under its own brand within 12 months. Building privacy infrastructure from scratch would take years of R&D; the bank wants to license vendor technology and operate the resulting stack under controlled governance, on dedicated infrastructure, with regulatory-aligned change control.
Addresses use case: Private Stablecoins for Institutional Payments
Evaluation

How we assess solutions

CROPS Framework

Every pattern and vendor rated on four dimensions.

CR
High
OS
Partial
P
Full
S
Medium

I2I vs I2U Context

Privacy requirements differ by power dynamics.

I2ISymmetric trust between institutions
I2UAsymmetric. CROPS protects the user