Passport Families & Packages
ECZ-ID organises identity into 7 canonical passport categories containing 33 child passports total. There are 33 packages (18 core bundles including KYA Ready Pack™ + 8 advanced / accelerator packages including ECZ-ID Digital Counterparty Infrastructure Pack™ + 7 extension packages spanning DORA, SBOM, Trade Finance, and Construction) to accelerate acquisition. There are also 9 add-ons / companion products: Insurability Readiness™ (derived, not purchasable), Procurement Evidence Add-on, PulseGuard Live Trust Add-on, Software & API Trust Add-on, Counterparty Verification API, ECZ-ID LedgerCore Evidence Anchoring Add-on™, ECZ-ID Resolver Reliance Receipts Add-on™, ECZ-ID Authority Delegation Register Add-on™, and ECZ-ID Domain & Origin Binding Add-on™.
The Complete ECZ-ID Identity System
Understanding the full structure: parent passport, child passports, families, packages, derived add-ons, and how TrustOps and Resolver fit together.
ECZ-ID Business Passport™ (Parent)
Every organisation starts with one parent passport—the ECZ-ID Business Passport™. This is the root credential. All child passports, packages, and derived add-ons attach to this parent. It is provisioned through TrustOps.
33 Child Passports (7 Families)
Child passports are the specific identity credentials for each entity type. There are 33 total, organised into 7 canonical families. Each child passport belongs to exactly one family. You acquire child passports through packages via TrustOps.
33 Packages (Acquisition Paths)
Packages are the commercial acquisition objects—how you buy access to child passports.18 core bundles cover commercial combinations of child passports, including the KYA Ready Pack™ for agent-first onboarding. 8 advanced / accelerator packages extend the system for enterprise, legal, audit, underwriting, telematics, analytics, connector, and counterparty trust needs. 7 extension packages cover DORA Managed/Enterprise, SBOM Managed/Enterprise, the DORA/SBOM Enterprise Suite, the Trade Finance Release Pack™, and the Construction Dispute Resolution Pack™.
ECZ-ID Insurability Readiness™ (Derived Add-On)
Not a package. Not purchasable. Not manually editable. This is automatically derived from active passport state, evidence state, and canonical Backend/Core rules. It indicates readiness for insurer engagement and attaches to the parent passport.
🏗️ This Site (Developer Gateway)
Discovery, onboarding guidance, build scaffolds, and starter kits. Explains but does not provision. ECZ-ID separates setup, verification state, and public proof by design.
⚡ TrustOps
Provisioning, pricing, sales, checkout, credentialing, and ongoing credential operations. TrustOps is the commercial and operational control surface.
🔍 Resolver
Verification, proof lookups, public badge display, and third-party evidence-state checks. Resolver is the public read-only proof surface.
What Happens After Purchase
Discover & Choose
Browse this gateway. Choose your starter kit or domain path. Understand what passports and packages you need.
Acquire via TrustOps
Go to TrustOps /start. Select packages, complete checkout, and receive your credentials.
Return & Build
Come back here with your credentials. Complete your agent/system build using starter scaffolds.
Verify & Deploy
Check Resolver state, confirm badges and proof URLs, then deploy to production.
Choose the Parent Tier That Unlocks Everything Else
Every child passport and package attaches to the ECZ-ID Business Passport™. Verified or Assured is required for child passport activation, badge provisioning, and package access.
Declared
FreeEntry tier — establish your identity spine, no cost
- •ECZ-ID Business Passport™
- •Public resolver page
- •Business identity dashboard
- •Business Passport API
- •Immutable ledger
- •Evidence submission
Verified
£19.99/monthResolver-verifiable identity + child passport access
SKU: ECZ-PARENT-VERIFIED
- •Everything in Declared
- •Child passport activation
- •Badge provisioning
- •Insurability readiness
- •Integration API access
- •Authority delegation
Assured
£49.99/monthFull assurance for regulated and high-stakes operations
SKU: ECZ-PARENT-ASSURED
- •Everything in Verified
- •Assured-tier passports
- •Quantum-safe credentials
- •Advanced custody chains
- •Regulator-grade evidence
- •Priority support
Seven Canonical Identity Families — 33 Child Passports
Each family groups related child passports for a specific entity domain. The Robotics family includes environment-based child passports with humanoid profile support. The Aerial Mobility family covers D1–D4 drone classes only.
Digital & Operational
Machine-readable identity for agents, cyber posture, APIs, AI models, datasets, IoT devices, and software supply chain systems.
Child Passports (7)
Applicable Domains
Product, Risk & Transfer
Identity for products, custody transfer, and risk policy objects that need durable proof, provenance, and transfer integrity.
Child Passports (3)
Applicable Domains
Robotics
Environment-based identity for robotic systems. Humanoids are handled as controlled variants within the correct robot passport — environment passport first, humanoid second.
Child Passports (3)
Applicable Domains
Humanoid is not a separate passport SKU. Use the correct environment passport first (Industrial, Public-Space, or Domestic), then apply the HUMANOID variant/profile. HUMANOID currently requires Assured parent tier.
Road & Freight Mobility
Identity for robotaxis, autonomous cars, autonomous haulage, cross-border freight, and high-value cargo mobility systems.
Child Passports (5)
Applicable Domains
Aerial Mobility
Identity for drones and aerial systems across D1–D4 classes. Supports operator linkage, mission evidence record, and mandate/insurance-grade aerial trust.
Child Passports (4)
Applicable Domains
D1, D2, D3, and D4 only. No extra drone passport families or unofficial aerial classes.
Infrastructure-Grade
Identity for intermodal transfer, industrial sites, critical infrastructure, funds flow, marine vessels, cargo containers, aircraft, and aviation components.
Child Passports (8)
Applicable Domains
Control & Trust Overlays
Control-plane trust surfaces for platforms, continuity, and licensed operators that govern how the wider ECZ-ID system is relied upon.
Child Passports (3)
Applicable Domains
9 Add-Ons / Companion Products
Four are flow-linked and activatable through TrustOps. Four are TrustOps-routed infrastructure add-ons documented here. One is derived automatically from active passport state, evidence state, and canonical Backend/Core rules.
Procurement Evidence Add-on
Structured procurement evidence linked to ECZ-ID credential state. Provides verifiable evidence records for procurement gate compliance.
Enter guided flow →PulseGuard Live Trust Add-on
Real-time credential posture monitoring. Alerts when trust state changes — keeping your credential estate live and current.
Enter guided flow →Software & API Trust Add-on
Extended trust coverage for software components and API endpoints. Attaches software supply chain evidence to the identity spine.
Enter guided flow →Counterparty Verification API
Verifier product and companion API for programmatic counterparty credential verification via the ECZ-ID resolver.
Enter guided flow →ECZ-ID LedgerCore Evidence Anchoring Add-on™
Adds a TrustOps-routed path for anchoring additional evidence references and receipt events to the customer's ECZ-ID context where supported. Developer Gateway explains the route; TrustOps and Backend/Core handle evidence actions and lifecycle.
Continue setup in TrustOps →ECZ-ID Resolver Reliance Receipts Add-on™
Adds a TrustOps-routed reliance-receipt pathway for customers and counterparties that need a record of Resolver-based reliance checks where supported. It does not replace Resolver proof and does not make Developer Gateway a proof surface.
Continue setup in TrustOps →ECZ-ID Authority Delegation Register Add-on™
Adds a TrustOps-routed register for documenting delegated authority contexts such as staff, operators, agents, API clients, or controlled counterparties where supported. Backend/Core remains the authority writer; Developer Gateway only explains the route.
Continue setup in TrustOps →ECZ-ID Domain & Origin Binding Add-on™
Adds a TrustOps-routed path for associating official domains, API origins, repository/package namespaces, or digital surfaces with an ECZ-ID context where supported. Public metadata remains discovery only; Resolver is the proof surface.
Continue setup in TrustOps →ECZ-ID Insurability Readiness™
A derived add-on on the parent passport. It is NOT a package, NOT separately purchasable, and NOT manually editable. It is computed from active passport state, evidence state, and canonical Backend/Core rules and indicates readiness for insurer engagement.
Included as a derived readiness signal on eligible parent passports. Not counted in the 33 packages.
33 Packages — Your Path to Production
18 core bundles (includes KYA Ready Pack™) + 8 advanced / accelerator packages (includes ECZ-ID Digital Counterparty Infrastructure Pack™) + 7 extension packages (DORA, SBOM, Trade Finance, Construction) = 33 total. All provisioning and pricing through TrustOps.
18 Core Bundles (includes KYA Ready Pack™)
ECZ Core Resolve Gate
Foundational identity resolution. Establishes resolver presence with identity continuity built in.
KYB Gate Pack
Know-Your-Business credentialing. Cyber resilience, risk policy, product passport, and custody transfer in one package.
Capital Access Pack
Financial access credentialing. Combines financial authority, risk, custody, identity continuity, and platform safe-harbour.
Payout Unlock Pack
Unlock payout flows with financial authority, custody transfer, risk policy, and identity continuity.
Hold Release Pack
Custody release credentialing for regulated hold-and-release workflows. Financial authority, custody, risk, identity, and platform safe-harbour.
Developer Payout Pack
Payment credentialing for developer ecosystems. API passport, agent credential, and software supply chain.
Supplier Eligibility Pack
Supply chain eligibility credentialing. Product passport, custody transfer, and IoT device identity.
Tax Integrity Pack
Tax compliance credentialing. Financial authority, risk policy, and identity continuity.
Digital Custody Chain Pack
Digital custody chain credentialing. Custody transfer, identity continuity, and product passport.
eTrade Documents Pack
Trade documentation credentialing. Cargo container, custody transfer, and intermodal transfer passports.
Critical Operator Pack
Critical infrastructure operator credentialing. Critical infrastructure, industrial site, and licensed operator.
Cyber Governance Pack
Cyber governance credentialing. Cyber resilience, software supply chain, and API passport.
DORA Essentials
DORA Essentials baseline credentialing. Cyber resilience, software supply chain, risk policy, and identity continuity.
SBOM Essentials
SBOM Essentials baseline credentialing. Software supply chain, product, cyber resilience, and IoT device.
AI Provenance Pack
AI provenance credentialing. AI model, dataset, software supply chain, and agent credential.
Provider Credentialing Pack
Provider credentialing for practitioner-based operations. Base price plus £5.99 per practitioner.
Healthcare Integrity Pack
Healthcare integrity credentialing. Agent credential, identity continuity, and risk policy. Base price plus £5.99 per practitioner.
KYA Ready Pack™
KYA Ready Pack™
Know-Your-Agent readiness pack. Agent credential, identity continuity, and API passport — everything needed for agent-first onboarding.
KYA Ready Pack™ is counted as one of the 18 core bundles in the 33 total packages.
8 Advanced / Accelerator Packages (includes ECZ-ID Digital Counterparty Infrastructure Pack™)
Policy-as-Code Gate Adapters
Policy-as-code integration adapters for embedding ECZ-ID gate checks into existing policy engines.
Underwriting Workbench
Dedicated underwriting workbench for insurers and risk operators, with ECZ-ID-backed risk attribution.
Connector Marketplace
Pre-built connectors for third-party integrations, each independently credentialed via ECZ-ID.
Telematics Premium Pack
Premium telematics overlay for fleet-based operations. Telematics data linked to ECZ-ID identity spine.
SBOM/Vuln Ingestion Analytics Overlay
SBOM and vulnerability ingestion analytics overlay. Continuous monitoring tied to ECZ-ID software supply chain passports.
Contract Clause Generator
Automated contract clause generation powered by ECZ-ID identity and authority state.
Public Bundle Registry + Receipt Envelope Publisher
Public-facing bundle registry with receipt envelope publishing. Enables transparent, verifiable credential distribution.
ECZ-ID Digital Counterparty Infrastructure Pack™
A TrustOps-acquired package for making a business, counterparty, or digital counterparty relationship resolvable through ECZ-ID identity, authority, evidence, and Resolver verification surfaces. Composes Platform Safe-Harbour, Risk Policy, and Identity Continuity into a machine-readable, resolver-verifiable digital counterparty baseline. Requires a Verified or Assured parent ECZ-ID Business Passport™ (per TrustOps).
How to Choose Your Path
Start with what you're building. The entity type determines the relevant passport category. The deployment scope determines the package.
Building AI agents?
Start with the Digital & Operational category. KYA Ready Pack™ and Developer Payout Pack are the fastest agent-first onboarding paths.
Start with Agents →Deploying robots?
The Robotics category covers Industrial, Public-Space, and Domestic environments. Humanoids credential within the appropriate environment passport.
Robotics & Humanoids →Operating drones?
The Aerial Mobility category covers D1–D4 classes. Choose the D1–D4 Drone Passport path that matches your aircraft class, then use package selection in TrustOps where aerial operations overlap with trade, custody, or infrastructure requirements.
Drones & Aerial →Enterprise multi-domain?
Use the advanced infrastructure services where you need policy-as-code, underwriting, connector distribution, telematics, SBOM analytics, legal automation, or public bundle publishing.
Explore All Domains →Need a Custom Configuration?
These packages cover common patterns, but every deployment is different. TrustOps can configure custom passport bundles for any combination of domains, entity types, and scale requirements.
Discuss custom configuration via TrustOps ↗Explore by Domain
Each domain page shows how ECZ-ID identity works for specific entity types and use cases.
Ready to Choose Your Package?
All provisioning, pricing, and package configuration happens through TrustOps. Start onboarding today.