In any organization, honest feedback from the correct people is important. However getting it correctly can prove to be a challenge, if both the respondents want to preserve their anonymity while the organization wants to ensure controlled access to the feedback mechanism.

Current options are either essentially public forms that are prone to spam & abuse, or systems that allow controlled access with some form of tracking, but rely on trust - whether it's an honest server admin or a third-party whistleblower platform.

ZeroProof aims to fix this.

Our system provides respondents with a open-source client app that utilizes RSA Blind Signatures to provide mathematical anonymity - cryptographically decoupling the act of obtaining a "response ticket" from the actual submission.

To prevent the server from identifying specific users with targeted private keys, our open-source client generates a visual Security Pattern (identicon) from the campaign public key. If your pattern matches your peers', you have verifiable proof the system is untampered.

By shifting the requirement from "trusting people" to "trusting math," we enable respondents to be more transparent while organizations get more candid feedback.

One of the team members ended up spending a decent bit of time initially just trying to integrate the crypto library with database storage of cryptographic values and API endpoint logic.

Initially the different components were built by different teammates, however towards the later stages integrating the API endpoints and workflows proved to be a bit difficult.

In order to get around paid API services and other restrictions, we ended up using whatsapp-web.js to simulate a browser and automate sending OTPs through WhatsApp.