Products
Start free. Add only what solves a real problem.
Your API Passport is free and permanent. Around it: the capabilities it already includes, five universal platform capabilities, the business solutions, this family’s flagship digital product, the bundles that are actually relevant here, ECZ-ID Intent, Intent Control and Receipts, API Estate & Ownership (the API operating product) and expert help.
Prices and what can be bought today come from TrustOps, which owns every purchase, entitlement and renewal. Where a page lists tiers, their prices are read from TrustOps.
Which product is for me
Find the one that fits what you are doing.
Your API Passport is free whatever you choose. Each row says who a product is built for, in its own words, and leads to its full page.
| Start with | Built for |
|---|---|
| DCI — Digital Counterparty InfrastructureSolution |
|
| DORA ICT-vendor evidenceSolution |
|
| SBOM & software-composition evidenceSolution |
|
| ECZ-ID API Enterprise Security Review & Customer Assurance KitDigital product |
|
| ECZ-ID AI Platform Assurance BundleBundle |
|
| ECZ-ID Developer Distribution Assurance BundleBundle |
|
| ECZ-ID Machine Identity Assurance BundleBundle |
|
| ECZ-ID Connected Platform Assurance BundleBundle |
|
| ECZ-ID Digital Entity Trust SuiteBundle |
|
| AEC — Active Entity CapacityUniversal platform |
|
| PulseGuardUniversal platform |
|
| LedgerCoreUniversal platform |
|
| ECZ-ID Graph IntelligenceUniversal platform |
|
| ECZ-ID WatchUniversal platform |
|
| ECZ-ID ReceiptsAuthority & evidence |
|
| ECZ-ID IntentAuthority & evidence |
|
| ECZ-ID Intent ControlAuthority & evidence |
|
| ECZ-ID Intent + Intent ControlAuthority & evidence |
|
| API Estate & OwnershipOperating product |
|
| Expert helpExpert help |
|
Included free
Everything a free Passport already gives you.
- Included free · Public proofResolverThe Resolver publishes the current record behind an ECZ-ID — who operates the API, what is bound to it, its current state and the evidence that exists — to people and software alike, with no account and no key.Full page
- Included free · Share proofBadge, QR and share proofEvery free API Passport includes a live website badge, a QR code and a share link. Each one takes a person or a machine to the current Resolver record in one step.Full page
- Included free · For softwareMachine-readable identityEvery published API Passport has a machine-readable record at a stable URL. Agents, procurement tools and CI pipelines can resolve it without an account or an API key.Full page
- Included free · One identity, many placesBindingsA binding records a public place where your API already appears — your published API documentation or an OpenAPI description you host — against its one ECZ-ID. Where a live proof method reaches the place, completing the proof shows the binding as verified, with when it was last verified. Adding a binding never creates a second identity.Full page
- Included free · RelationshipsDigital Entity GraphEvery free Passport takes part in the Digital Entity Graph: the operator behind the API, the places it is bound and the ECZ-ID subjects it is published as related to.Full page
- Declared — FREE · optional Verified and AssuredECZ-ID Business PassportYour organisation on the record, as the Parent. The ECZ-ID Business Passport — Declared — FREE is created with your first family Passport; Verified and Assured strengthen the organisation, never the API.Compare the tiers
Universal platform
Scale, monitor, evidence, map and watch your API estate.
- ScaleAEC — Active Entity CapacityAEC is the operating-capacity layer for ECZ-ID. Passports stay free; AEC is what expands the number of entities you can actively manage with live bindings, state and operational services.Full page
- Current state · MonitorPulseGuardPulseGuard evaluates current observable state and helps an operator see which ECZ-ID entities need attention without turning an observation into a safety or certification claim.Full page
- Evidence · HistoryLedgerCoreLedgerCore is the evidence layer for ECZ-ID: lifecycle events and eligible receipts, kept as local records in an append-only history that helps a reviewer understand what was recorded and when. Ledger anchoring is not live yet.Full page
- Relationships · DependenciesECZ-ID Graph IntelligenceGraph Intelligence helps an organisation understand how ECZ-ID entities, operators, bindings and dependencies connect while keeping public-safe graph facts separate from private operating context.Full page
- Change · Follow · NotificationECZ-ID WatchWatch turns a one-time Resolver check into change awareness. Free Watch supports a small local follow list; paid Watch adds cloud follow lists, verified-recipient delivery, retained change history, Graph Watch for relationship roots and bounded machine access.Full page
Solutions
Solve the counterparty, regulated-supplier and supply-chain problems above your API.
- CounterpartyDCI — Digital Counterparty InfrastructureDCI combines identity, public proof and reusable evidence around the digital surface a counterparty actually encounters — such as a website, API, portal or machine service.Full page
- Regulated financeDORA ICT-vendor evidenceThe DORA solution helps an ICT provider organise identity, service, resilience and supporting evidence into a reusable review pack for financial-sector customers and their procurement or risk workflows.Full page
- Software supply chainSBOM & software-composition evidenceThe SBOM solution organises software-component, dependency and provenance evidence around the digital product being supplied, so reviewers can understand what is in scope and what changed.Full page
Flagship digital product
Turn API ownership, control and security evidence into a customer-ready pack.
Relevant workflow bundles
When the problem spans more than the API.
- Workflow bundleECZ-ID AI Platform Assurance BundleA broader bundle for AI platforms that combine agents, MCP servers and APIs.Full page
- Workflow bundleECZ-ID Developer Distribution Assurance BundleA workflow bundle for teams shipping SDKs, APIs and the packages behind them across multiple channels.Full page
- Workflow bundleECZ-ID Machine Identity Assurance BundleA bundle for organisations operating services, workloads and the APIs they expose under one machine-identity programme.Full page
- Workflow bundleECZ-ID Connected Platform Assurance BundleA cross-family bundle for connected platforms where APIs, apps and devices form one customer experience.Full page
- Portfolio suiteECZ-ID Digital Entity Trust SuiteThe broadest digital-product suite for organisations that need repeatable assurance across multiple ECZ-ID entity families.Full page
Authority & evidence
Say what a Passport may do, evaluate what it is about to do, and keep the receipts.
- Evidence · Receipts VaultECZ-ID ReceiptsECZ-ID Receipts is long-term retention for receipts: new receipts retained in your organisation's Receipts Vault each month, searchable for the plan's retention period, with point-in-time receipts within covered history and Evidence Packs. Native receipts stay free with the product that creates them, and verifying a receipt is free.Full page
- Authority · IntentECZ-ID IntentECZ-ID Intent records what a Passport may do — its objective, its constraints and how long that holds — as an Intent that only an owner or administrator of your organisation can authorise. The Passport says who; the Intent says what for.Full page
- Authority · Runtime decisionsECZ-ID Intent ControlECZ-ID Intent Control evaluates a proposed action by an ECZ-ID entity against its authority, its authorised Intent, your policy and, where you supply it, counterparty context. Decisions are EVALUATED, never ENFORCED by ECZ-ID: an enforcement point you run decides whether the action goes ahead.Full page
- Authority · Intent and runtime decisionsECZ-ID Intent + Intent ControlECZ-ID Intent + Intent Control is one plan for both services: ECZ-ID Intent, which records the authorised objective, constraints and validity of what a Passport may do, and ECZ-ID Intent Control, which evaluates a proposed action against that authority, the Intent, your policy and optional counterparty context. Decisions are EVALUATED, never ENFORCED by ECZ-ID, and payment authorises nothing.Full page
Operating product
Operate the whole estate with one operating product.
Expert help
Fixed-scope help when you would rather not do it yourself.
Estate
Where things are bought, operated and proved.
- Operate the estateDashboardThe Dashboard is the signed-in ECZ-ID console. It is where you manage your API Passports, bindings, publication, capacity and the capabilities you have added — for the whole organisation.Full page
- AcquireTrustOpsTrustOps owns acquisition, payment and entitlement for ECZ-ID. The free API Passport door, Parent upgrades, capacity and every paid capability are acquired there — and only there.Full page
Built for API programmes
Ownership across the estate, and expert help to set it up.
- For API estatesAPI Estate & OwnershipWho answers for each API across a whole estate — first-party, partner-facing and inherited — without implying control or a security posture. Tiers from TrustOps.Full page
- The subjectThe API surface, described and boundWhat one API Passport identifies, and why a base URL, a version path or an OpenAPI document is a binding rather than the API.Full page
- Enterprise and servicesExpert help for API teamsAssessment and integration engagements, named and priced as TrustOps lists them, and estate arrangements agreed directly.Full page
Where next
Keep going with ECZ-ID API.
- ProductsEvery API product and service, each with its own page.Open
- The free API PassportWhat it establishes, what it never says, and how it is issued.Open
- Verify an ECZ-IDRead a live record on the public Resolver — no account, no key.Open
- Build and integrateAPI binding on the Developer Gateway.Open (opens in a new tab — developers.ecocitizenz.com)