Concepts
Business Passport
The Business Passport is the parent ECZ-ID of an accountable organisation. Every machine Passport resolves to one, and its tier describes the organisation, never the machine.
Live in production and publicly readable, with no account and no key. Measured read-only on 2026-10-10.
Accountability Chain:Identity
The parent of every machine identity
An ECZ-ID Business Passport identifies the organisation that answers for its machines. A free family Passport needs a parent at the DECLARED tier or above; if the organisation has none, the free journey creates a DECLARED parent for it.
| Tier | Meaning | Acquired |
|---|---|---|
| DECLARED | Self-declared organisation identity. Not independently verified. | Free, in TrustOps |
| VERIFIED | The organisation’s identity has been verified. | Paid tier, in TrustOps |
| ASSURED | The highest parent tier. | Paid tier, in TrustOps |
A parent tier is never inherited by a machine
A Verified organisation does not make its machines verified. The live record states it for its own parent: “The parent organisation’s identity is verified. This machine is not.” Read parent_tier_context.tier_meaning and never let a parent tier colour a child.
Every profile field says where it came from
The public projection classifies each published profile attribute, so a reader can tell a declaration from a reference. resolver_v2.identity.attributes[] carries a classification and, where external, the source and the date it was checked.
| Classification | What it means |
|---|---|
CUSTOMER_DECLARED | Stated by the organisation. Not checked. |
EXTERNALLY_REFERENCED | Matched to an external register, which is named with the date checked. |
CONTROL_BOUND | Backed by a demonstrated control proof. |
EVIDENCE_SUPPORTED | Backed by recorded evidence. |
NOT_CLASSIFIED | No classification is published. |
Related
This page is explanation, not authority. Current state is only ever the live Resolver record. Live facts on this page were measured read-only on 2026-10-10.