The questions people ask first.

The Agent Passport is FREE — £0, no card, permanent, not a trial — and so is your organisation's DECLARED Business Passport. All seven Passport families are FREE.

You pay only for what you add on top: independent checks of your organisation (Parent VERIFIED or ASSURED), operating capacity (AEC), current-state monitoring, evidence and receipts, authority services, digital products and professional services. TrustOps sells, fulfils and renews every one, and each product page shows its live state and price from TrustOps' catalogue.

Every product page shows each of its plans as ENTITLEMENT · ACQUISITION — for example Paid · Open, or Paid · Temporarily unavailable — read from TrustOps' public catalogue when this site was built.

Paid plans that can be started today include: ECZ-ID Agent Authority & Enterprise Assurance Kit, ECZ-ID Agentic Stack Assurance Bundle, ECZ-ID AI Platform Assurance Bundle, ECZ-ID Digital Entity Trust Suite, ECZ-ID Machine Identity Assurance Bundle, DCI — Digital Counterparty Infrastructure, DORA ICT-vendor evidence, SBOM & software-composition evidence, AEC — Active Entity Capacity, PulseGuard, LedgerCore, ECZ-ID Graph Intelligence, ECZ-ID Watch, ECZ-ID Intent, ECZ-ID Intent Control, ECZ-ID Intent + Intent Control, KYA Authority, ECZ-ID Receipts and Agent professional services.

Some products also have plans by arrangement, such as Enterprise plans. TrustOps confirms the state and the price when you act.

Every Passport is linked to one organisation, its Parent — your ECZ-ID Business Passport. A child Passport identifies one subject your organisation operates: an Agent Passport identifies one logical AI agent; versions, deployments and replicas of it are not separate Passports.

A DECLARED Parent is free and is created or reused the first time you get any Passport. VERIFIED and ASSURED independently check the organisation. A VERIFIED or ASSURED Parent does not verify the agent. The parent organisation's identity is verified. The machine is not.

A Business Passport badge links to the organisation's live Resolver record, where anyone can re-check its current public state. The badge image itself reflects that live state when it loads; the record is the authority.

The badge is a route to current ECZ-ID proof. It is not by itself a guarantee of safety, quality, compliance, domain ownership/control or approval.

Getting your own starts free: one sign-in creates or reuses your organisation's DECLARED ECZ-ID, and its Resolver page, badge and QR are free. Starting with a free Agent Passport creates your Business Passport too. 7 free machine Passport families are available.

ECZ-ID Intent defines the authorised objective, constraints and validity of what a Passport may do. Only an owner or administrator authorises an Intent, and nobody authorises their own request.

ECZ-ID Intent Control evaluates a proposed action against authority, the Intent, policy and optional counterparty context, and returns a decision. Decisions are EVALUATED, never ENFORCED: your systems decide what happens next.

You can take either, or both in one plan (ECZ-ID Intent + Intent Control). Payment authorises nothing. Today Intent is Paid · Open and Intent Control is Paid · Open.

LedgerCore is the evidence layer for identity and lifecycle events: what was recorded about an identity, and when. Evidence is kept as local records; ledger anchoring is not live yet.

ECZ-ID Receipts is your organisation's Receipts Vault allowance: how many of the receipts your products create are retained each month, and how long they stay searchable. Native receipts stay free with the product that creates them, and verifying a receipt is free.

Neither makes a recorded statement true, neither carries a compliance or public-proof guarantee, and public retrieval of a receipt is not open yet.

Resolve it on the public Resolver — the human page, or the machine-readable JSON — with no account and no key. Read what the record says now: the operator on the record, its current state, its declared bindings, and what it does not establish.

Re-check before reliance. State can change between the moment a badge is drawn and the moment an agent acts. No public ECZ-ID Passport found is not a safety finding. It means this identifier resolves to no published record — nothing more. Most software has no ECZ-ID yet.

Beside your framework, OAuth and IAM. ECZ-ID stays outside the execution path. It does not broker your agent's calls, hold its credentials, or sit between it and the systems it uses. You publish the agent's declaration on your own agent host, and the framework pages here show where that fits for OpenAI Agents, Microsoft Agent Framework, Google ADK, AWS Strands and LangGraph.

Schemas, fields and integration are defined on the Developer Gateway; this site explains in plain English and links there rather than restating them.

In your ECZ-ID console on TrustOps — "Sign in / Dashboard" in the menu. It is behind a sign-in; once signed in, your organisation, the Passports it holds and what you have added — products, bindings, evidence, Watch, Receipts, Graph and Intent Control — are managed there.

Yes. KYA Authority Starter, Growth and Scale are Paid · Open in TrustOps' catalogue, monthly or annual prepaid; each plan's price and its own TrustOps action are on the KYA Authority page.

KYA Authority Enterprise is By arrangement · Enquiry: a private offer negotiated to your operating scale.

KYA Authority is never a certification, and buying it never changes an ECZ-ID. The FREE Agent Passport, and the Know-Your-Agent explanation on the Agent Authority & Enterprise Assurance Kit page, are available today.

Follow up to three ECZ-IDs on this device and see what changed, with no account and no email. Free Watch is Free · Open.

Paid Watch tiers are Paid · Open. With Watch Pro, important public changes reach you by email; Watch Team adds a shared portfolio, routing and digests; Watch Operations is portfolio triage at scale. The Watch page shows each plan's price and its own TrustOps action.

What Watch shows is a change signal, not a verdict. Go back to the live Resolver record before you decide anything.

Identifying an agent is not controlling it. ECZ-ID does not authorise, restrict, supervise, pause or stop what an agent does — its operator and the party relying on it stay responsible for that.

Authority is delegated by the operator, inside the operator's own systems — OAuth, IAM, MCP and API configuration. ECZ-ID can publish what the operator declares about that delegation; it never grants, enforces or revokes it.

No. The seven FREE Passport families — Agent, MCP, API, Plugin, Service & Workload, SDK and IoT — are the free starting points, not the only ECZ-ID types. Core defines the identifier form and its type codes, and the Developer Gateway documents them.