MKT Delete
Available nowBuilt for transparency. Merkle Tree receipts clearly show what was deleted and when, using cryptographic fingerprints before and after.
Deletion you can prove.Gone, and it stays gone.
Everyone else proves someone pressed delete. Zombie Delete issues the world's first cryptographically verifiable deletion receipt: independent proof the record is gone from a named dataset at a named time – then plants a Tombstone that rejects any attempt to write it back.
The duty to delete comes from everywhere – regulators, courts, contracts, counterparties, your own security rules, and the attackers who steal whatever you keep. Nothing you run today can prove deletion happened. Zombie Delete is designed to meet every duty, and exceed them all.
Runs on enterprise servers, in your own environment, and on most blockchains.
The receipt
Cryptographically verifiable deletion receipt
A real CVDR from a live demo deletion. Open the artefact, then check the cryptographic proof computed in your browser.
Live verification
Verified.
This section re-computes body hash, Merkle transition, and Ed25519 signature against the published deployment key for the receipt shown here.
- V1: body hash + receipt_idpass
- V2: Merkle transition (pre/post root)pass
- V3: operator-v1 signaturepass
- Manifest bindingpass
- receipt_id
- 5e9619846c71e73cb99763d1e37fb11f5f790b310c5797bf332a819fd75d5345
- body_hash
- 8a8d31cddbeaacf7a23387bb27fae2ad27fc59bf68f2f4f000f512a09f42c51b
Two approaches
Choose your level of transparency
Same deletion event. Two ways to present the proof, depending on whether you need to show everything, or reveal nothing.
ZKP Delete
In developmentBuilt for privacy. Proves deletion occurred without revealing the data, the database structure, or the metadata.
In practice
Why this changes behaviour
01
A receipt, not a promise
A deletion receipt proves a record moved from a live state to a Tombstone at a defined point in time. It cannot be silently disputed later.
02
You stay in control
Off-chain, you delete your data and Zombie Delete verifies it. On the Internet Computer, deletion can be atomic and verified in the flow.
03
Built for regulated organisations
Proof requirements are spreading far beyond privacy law. Deletion and erasure duties with evidence attached now appear in more than a dozen regulated markets: data protection regimes such as GDPR and UK GDPR, California's DELETE Act, India's DPDP, China's PIPL and Brazil's LGPD, but also the EU AI Act, financial services and health sector rules, AI training data governance, and product-passport regimes that have nothing to do with personal data at all. One receipt, every regime.
Standards & partners
Standards, recognition and partners
Erasure regimes:
EU GDPR Art. 17
EDPB Blockchain Guidelines (2026)
UK GDPR
US CCPA/CPRA
US FTC Disposal Rule
US HIPAA
Illinois BIPA
US employment records (Form I-9, EEOC)
US CJIS Security Policy
US NISPOM (32 CFR 117)
ITAR / EAR technical data
US FRCP 37(e)
South Korea PIPA
Japan APPI
Singapore PDPA
Australia Privacy Act (APP 11.2)
India DPDP (2025)
China PIPL
Brazil LGPD
NIST SP 800-88r2
ISO/IEC 27555
IEEE 2883
and many more
Stay-deleted duties:
California DROP suppression list
US FCRA §611 re-insertion rules
US Do-Not-Call and CAN-SPAM opt-out persistence
UK TPS suppression
gambling self-exclusion registers
screening and delisting propagation
and many more
Ready for:
eIDAS 2.0
DORA
MiCA
FATF Travel Rule
EU AI Act Art. 10 (2027)
DMA Art. 5(2)
US EO 14117
and many more
Recognition:
Paris Blockchain Week Top 100
VDS Top 100 Startups
Pitch by Deel Finalist
#WCHL25 2nd and 3rd Place
LegalTechTalk London 2026 Finalist
InnCyber Innovation Hub Finalist (2026)
Pilot Partners
Use cases
Where deletion duties show up
The duty to delete is not privacy-only. It appears wherever retained data creates legal, operational, or security risk – and wherever someone later asks you to prove the record is gone.
01
Legal & disputes
Support spoliation defence, legal hold release, and court-ordered erasure with a receipt that shows a named record left a named dataset at a named time.
02
Healthcare
Prove patient and research records were removed from specified systems when retention ends, without relying on a screenshot or an internal log alone.
03
Defence & dual-use
Reduce retained attack surface and enforce internal security rules that require sensitive material to be deleted – then kept deleted.
04
Financial services
Meet retention-to-deletion boundaries across customer, transaction, and counterparties data with audit-grade proof for regulators and internal control.
05
Enterprise security
Delete what you no longer need to keep. Every retained record is stealable data; a Tombstone rejects attempts to write it back on guarded paths.
06
Contracts & counterparties
Honour inter-company deletion obligations in contracts and data-sharing arrangements with independent proof both sides can verify.
The company
Together Alone Ventures
Zombie Delete is a product of Together Alone Ventures OÜ, building cryptographic trust infrastructure for organisations that need proof, not promises. Provable, not claimable.
Contact
Talk to our team
If you need to prove deletion to anyone who asks, prove a relationship to an institution, or build anywhere "just trust us" no longer works. We'd like to hear from you.
FAQ
Common questions
What is a Tombstone?
A cryptographic replacement for deleted data. It removes access to the original content while preserving referential integrity, and stops the data being re-ingested.
MKT Delete vs ZKP Delete?
Both rely on the same deletion event. MKT exposes state changes for auditability. ZKP wraps the proof so it can stay private.
Do you see our data?
No. MKT Delete operates on hashed representations only. ZKP Delete adds a further privacy layer.
Do you control our data?
No. We stay out of the data path entirely. Your data remains in your systems, under your control; Zombie Delete verifies deletion events and issues receipts. We never hold, route, or process the underlying data.
Can auditors verify receipts?
Yes. Receipts can be shared with auditors, regulators, or counterparties, and verified independently, with no access to us or to your systems required.