Skip to content

Enterprise and platform

Tell us the requirement first.

Enterprise, platform, OEM, insurer and procurement arrangements are scoped with us against a real requirement, and TrustOps owns the purchase that follows. We do not build a bespoke fork of an identity system without a real, identified need behind it — a private variant is a permanent obligation, and one built speculatively decays until it is worse than nothing.

So this page is not a pitch. It is the list of things worth knowing before either of us spends time, and the address to send them to.

Who this is for

Four positions where the identity question changes shape.

Not because the record is different at scale — it is not — but because the reason you need it, and the systems it has to reach, are.

Platforms

You host or orchestrate agents that other organisations operate. The identity question is not yours alone — it is one you have to answer on behalf of every tenant, and the answer has to be readable by their counterparties, not only inside your platform.

Insurers and underwriters

You are being asked to price exposure created by software that acts. A persistent identifier with a named operator behind it is a fact you can attach a file to. What that fact is worth in your model is your decision.

Procurement and vendor risk

You assess suppliers who now ship agents inside their products. The useful question is not whether a supplier claims something, but whether what they claim is published somewhere you can re-check without asking them again.

OEMs and embedders

You embed an agent in a product you sell onward. The agent has an operator, and at some point a customer or a regulator will ask who that is. Deciding it deliberately is easier than discovering it under pressure.

The Requirement Profile

Eight things to prepare before you write to us.

Send these and you will usually get a real answer in one reply instead of a discovery call. Approximate numbers are fine — the shape of the estate matters more than its exact size.

Check what TrustOps already offers before you read any further.

If your estate fits what can be configured directly, an arrangement is the wrong instrument and we will tell you so. Prices and what can be bought today come from TrustOps, which owns every purchase, entitlement and renewal.

The eight fields of an enterprise Requirement Profile, what to tell us in each, and why each one changes the answer
FieldWhat to tell usWhy it changes the answer
Estate sizeHow many logical agents you operate, how many of them you actively manage in production today, and the direction of travel over the next twelve months. Versions, replicas, regions and deployments of one agent are still one agent.Capacity is AEC — Active Entity Capacity, pooled across the organisation. Bindings, versions, replicas, endpoints and deployments never consume AEC and never become a second Passport. If what TrustOps already offers covers your estate there is nothing to negotiate, and that is the answer you should get.
Identity familiesAgent only, or Agent plus MCP, Plugin, API, SDK, IoT, or Service and Workload.Each family is a separate subject with its own FREE Passport, while AEC is one pool across them. An estate that is small in one family and large in another is a different conversation from one that is uniformly large.
Monitoring cadenceHow often published identity state must be re-evaluated, which changes must raise something, and who or what has to receive it.Free identities get current state on demand, when someone actually asks. Scheduled evaluation and change notification are separate capabilities with a different shape, and the cadence you need decides which of them, if either, fits.
Evidence volume and retentionThe rough volume of identity events you expect, how long the record of them must remain retrievable, and in what form you have to hand it to someone else.Retention and export are the two requirements that most often come from your own obligations rather than from ours, so we need yours rather than a general answer.
IntegrationsWhere an identity has to appear: a vendor or supplier register, a CMDB, a policy engine, an API gateway, a catalogue, a marketplace listing. And which way the data has to flow.Reading a public record needs nothing from us — it is unauthenticated and open. Writing into your systems, or receiving from them, is the part that has to be designed.
SLAThe availability and response expectations you are contractually required to meet, and whether you have to pass them through to your own customers.We publish no service-level number on this site, because we would be inventing it. Tell us the one you are held to and we will answer against that rather than around it.
Data handlingResidency constraints, sub-processing constraints, anything that may not leave a jurisdiction, and whether anything you would send us is personal data.ECZ-ID records are public by design, which removes most of this question and sharpens what is left. The part that matters is the material that is not the public record.
Procurement routeVendor onboarding, the security questionnaire you use, the contract vehicle, purchase order and invoicing arrangements, and who signs.This is usually the longest part of the timeline and the easiest to start early. Telling us the route at the beginning is the single biggest thing you can do to shorten it.

“Email the profile” opens an email with those eight headings already in the body. There is no form on this site, no lead-capture step, and nothing in front of the address.

How an enquiry actually goes

Four steps, and one of them is us telling you to buy nothing.

  1. You send the profile

    Plain email. No form, no qualification call in front of it, and no obligation created by asking.

  2. We say whether you need us

    Most estates are already covered by what TrustOps offers directly. When that is true it is the whole answer, and it takes one reply rather than a proposal.

  3. We scope against your profile

    What already exists, what would have to be built, what is planned and not yet released, and what we are not going to build at all.

  4. Only then, terms

    Capacity, monitoring cadence, deployment, data handling and procurement, written against the requirement rather than a standard sheet. TrustOps then owns the purchase, the entitlement and the renewal.

What you will not find quoted on this page

No price: TrustOps shows every price, at the moment it can be honoured. And no service-level number, no named support tier, no certification, no audit, no customer list and no case study. None of those exist to quote, and a page that invented them would be asking you to rely on exactly the kind of unverifiable claim this whole property argues against. Deeper technical reference lives on the Developer Gateway.

Developer Gateway(opens in a new tab — developers.ecocitizenz.com)

What we usually discuss

What enterprise conversations usually cover.

Once the requirement is on the table, these are the products that most often come into it. Each has its own page here, and shows its live state from TrustOps, which owns its price and purchase.

Flagship · Agent authority evidence

ECZ-ID Agent Authority & Enterprise Assurance Kit

Turn agent authority, operator and delegation evidence into a buyer-ready assurance record.

  • Agent vendors answering enterprise security and procurement reviews.
  • Enterprise AI teams putting internal agents in front of risk, audit or a customer.
  • Security and procurement reviewers who need one consistent record to assess.

Boundary: Authority is delegated by the operator inside its own systems. The Kit documents that delegation; ECZ-ID never grants, enforces or revokes it.

Most relevant for Agent · Business solution

DCI — Digital Counterparty Infrastructure

An agent is increasingly the digital surface a counterparty meets first: it calls their API, talks to their agent, files into their workflow or turns up in their logs. DCI gives that counterparty one path from the agent in front of them to the organisation behind it, and to the evidence you publish — for people and for software, without a questionnaire and without asking you.

Boundary: DCI is identity and evidence infrastructure; it is not a counterparty risk score or approval.

Paid · Open

From £199 per month

Workflow bundles — when the review spans the whole stack

  • Stack

    ECZ-ID Agentic Stack Assurance Bundle

    A cross-product bundle for agent systems where the agent and the MCP servers it calls must be reviewed together.

    Boundary: Bundling evidence does not merge the identities of the underlying entities.

    Paid · Open

    From £549 one-off

    See details
  • Platform

    ECZ-ID AI Platform Assurance Bundle

    A broader bundle for AI platforms that combine agents, the MCP servers they call and the APIs they act through.

    Boundary: A platform pack does not collapse distinct entities into one identity.

    Paid · Open

    From £749 one-off

    See details
  • Portfolio

    ECZ-ID Digital Entity Trust Suite

    The broadest digital-product suite, for organisations that need repeatable assurance across multiple ECZ-ID entity families.

    Boundary: The suite organises assurance work; it is not a certification or a universal trust score.

    Paid · Open

    From £1,699 one-off

    See details

When the context calls for them

  • Regulated finance

    DORA ICT-vendor evidence

    Prepare reusable ICT-vendor evidence for customers operating under DORA.

    Boundary: ECZ-ID supports evidence preparation and review; it does not certify DORA compliance.

    Paid · Open

    From £319.96 per month

    See details
  • Software supply chain

    SBOM & software-composition evidence

    Turn software composition and provenance into evidence a buyer can actually review.

    Boundary: An SBOM describes composition and evidence; it is not a declaration that software is secure.

    Paid · Open

    From £269.96 per month

    See details
  • At scale

    AEC — Active Entity Capacity

    One AEC is one actively managed production entity with live bindings and current state. It is pooled across the organisation, and it is where a growing production estate usually starts the conversation.

    Boundary: AEC is capacity, not verification, certification or trust status.

    Paid · OpenBy arrangement · Enquiry

    From £9.99 per month

    See details

Prices and what can be bought today come from TrustOps, which owns every purchase, entitlement and renewal. An enterprise arrangement is scoped with us; the purchase, the entitlement and the renewal still run through TrustOps.

Not on the table

Six things no arrangement changes.

These are the parts a negotiation cannot move, and they are the reason an ECZ-ID means the same thing whoever is reading it.

Identity stays free

Identity is free. A Passport is never metered, and issuing one consults no entitlement.

The identifier is fixed

Your ECZ-ID does not change. No arrangement, capacity, contract term or configuration rewrites an identifier, a record or a resolver URL.

Nothing bought verifies an agent

A VERIFIED or ASSURED Parent does not verify the agent. The parent organisation's identity is verified. The machine is not. An agent linked to a VERIFIED Parent is described exactly that way — linked to a VERIFIED Parent — never as a verified agent.

Public reads stay public

Public Resolver reads and public machine-readable records are never metered, never authenticated and never counted against any allowance.

AEC is capacity, never identity

AEC is capacity for actively managed entities. It is not a second Passport, it never changes an ECZ-ID, and running out never deletes, detaches or unpublishes anything.

Identifying is not controlling

Identifying an agent is not controlling it. ECZ-ID does not authorise, restrict, supervise, pause or stop what an agent does — its operator and the party relying on it stay responsible for that.

An ECZ-ID does not make an agent safe, certified, approved or compliant, and holding one does not make you compliant with anything. That sentence does not soften at any size, and we will not write a variant of it for a private arrangement.

Send the requirement, not the request for a call.

One email, eight headings, and a real answer — including the answer that you already have what you need.