Getting Started with Umbra Pay
What is Umbra Pay?
Umbra Pay is a privacy-first on-chain payroll platform powered by Flare Confidential Compute (FCC). It allows organizations to coordinate payroll on-chain while keeping salary amounts and payouts strictly private inside hardware-isolated Trusted Execution Environments (TEEs).
Using a two-chain architecture, Umbra Pay uses Flare Coston2 as the fast coordination network and Ethereum Sepolia as the native money settlement chain.
How It Works
The Umbra Pay flow is straightforward:
Create Organization
Employer deploys an UmbraOrg smart contract on Flare Coston2.
Add Employees
Enter wallet addresses and salary amounts. Salaries are encrypted and synced with the TEE Enclave API.
Deposit Native ETH
Employer deposits native ETH directly to the TEE Vault address on Ethereum Sepolia.
Run Payroll
Executing payroll on Coston2 updates the enclave ledger balances in hardware TEE isolation.
Enclave Settlement
Employees request withdrawals, and the enclave signs and broadcasts native ETH settlement transactions directly to Sepolia.
Prerequisites
- A Web3 wallet (MetaMask, Rainbow, Coinbase Wallet, etc.)
- Coston2 C2ETH for gas fees on Flare Coston2
- Ethereum Sepolia ETH for funding employer deposits
For Employers
Umbra Pay gives employers full control over private payroll operations. From deploying an organization to tracking hardware-attested budget solvency, everything is designed to be simple while keeping salary data confidential.
Creating an Organization
Deploy a new organization smart contract by clicking Create Organization on the employer dashboard. This deploys an UmbraOrg contract on Flare Coston2.
Adding Employees
Enter each employee's wallet address, role, and salary amount. Salary payloads are stored as encrypted blobs on Coston2 and synced with the TEE Enclave API.
Depositing Funds
Fund your payroll vault by depositing native ETH directly to the TEE vault address (0x294dB937C2b9f02A29987472a3F16918a08d1185) on Ethereum Sepolia.
Running Payroll
Trigger batch payroll on Coston2 with a single click. The TEE enclave verifies payroll claims and updates employee private ledger balances inside hardware isolation.
For Employees
Employees access their funds via the employee portal on Ethereum Sepolia and Flare Coston2.
Connecting & Auto-Discovery
When you connect your wallet, Umbra Pay queries the Factory contract to automatically find every organization you belong to.
Withdrawing Funds
Request a withdrawal through the portal. The TEE enclave validates your private balance and issues a signed native ETH settlement transaction directly to your wallet on Sepolia.
Smart Contracts
Deployed Contract Addresses
| Function | Description |
|---|---|
| UmbraOrgFactory (Coston2) | 0x8C00cab72b52644c0F98570c5DC094E3E214B241 |
| Demo UmbraOrg (Coston2) | 0x89E6fBd9B415D6E16b2cbeD92D4924659B8e9D94 |
| TEE Vault Address (Sepolia) | 0x294dB937C2b9f02A29987472a3F16918a08d1185 |
TEE Privacy & FCC
Why Trusted Execution Environments?
TEEs provide hardware-enforced memory isolation and cryptographic attestation. Unlike legacy FHE or complex multiparty computation, TEEs allow instant computation and direct native key management without computational overhead or expensive gas fees.
Features
TEE Hardware Privacy
Salaries and payout ledger balances remain isolated inside hardware enclaves.
Two-Chain Settlement
Coston2 for instant coordination, Sepolia for native ETH deposits and settlements.
Employee Auto-Discovery
Automatic registration and organization lookup upon wallet connection.
Instant Withdrawal
Enclave-signed direct native ETH transfers to employee wallets on Sepolia.
Frequently Asked Questions
Ready to get started?
Launch Umbra Pay and experience confidential on-chain payroll.