Secure sharing of health credentials and data privacy compliance.

By using verifiable credentials, Indicio is able to issue credentials to medical works and patient mobile devices that allow them to cryptographically prove their identity for access to healthcare systems, as well as securely store and share their medical history.

Healthcare provider benefits

• Increase security with phishing-proof verifiable credentials: unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Fight fraud and reduce databreachs by removing reliance on centralized databases for sensitive information.

• Easily manage access, assign roles, and simplify data sharing across your organization.

• Provide a better experience for your patients with faster administrative tasks like document collection and their health records stored securely on their mobile device.

• Protect your systems and staff from deepfakes and fraud with mutual authentication, establishing two way verification process online before sharing sensitive information.

• Access healthcare benefits faster with less time spent on identity and document verification and more time spent addressing your needs.

• Easily share your medical records with new doctors, medical insurances, or new providers with one tap.

• Reduce identity theft and impersonation attempts with a secure digital identification that cannot be copied by bad actors.

Indicio simplifies customer account access and allows you to reuse costly KYC information

Indicio uses verifiable credentials to issue decentralized digital identities directly to customers' mobile devices, enabling them to cryptographically prove their identity for account access with a simple tap. These credentials also allow for the secure storage of Know Your Customer (KYC) information in a tamper-proof and verifiable manner, making it trustworthy and reusable across your organization, and with partner organizations.

For financial institutions

• Increase security with phishing-proof verifiable credentials; unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Protect yourself from deepfakes and stop fraud with mutual authentication that allows both parties to verify each other’s credentials before exchanging sensitive information.

• Increase efficiency, eliminate the need for password resets, and prevent customers from being locked out due to user error.

• Keep all KYC information in one convenient, immutable place, allowing you to reuse information collected from customers easily across your organization.

• Provide a better customer experience by removing passwords and tedious multi-factor authentication, allowing customers fast and secure access to accounts.

• All account access information is stored securely on customers’ phones, removing the need to remember passwords or security questions.

• Store all your KYC documentation in one place and avoid needing to track down physical documents and paperwork.

• Simple, secure, and easy-to-use interface offers fast account setup, easy information retrieval, and reduces the chance of user error.

• Record all details needed for customer onboarding and risk assessment KYC credential schemas.

• Source of KYC and integrity of the data is verified through cryptography and digital signatures.

• Credentials can be coded to expire.

• Reduce fraud Use verifiable credentials for frictionless, mutual authentication before any data is shared. A bank is able to cryptographically authenticate that it is interacting with a real account holder, and the account holder is able to authenticate that he or she is interacting with their bank.

• Reuse KYC information Credentials can be configured to store the information required for more complex financial transactions and a KYC credential is a way for a bank or its partners to reuse and share this information. If a third party trusts the original bank’s KYC process, they can trust the veracity of the KYC credential.

• Provide more secure customer access The customer can securely access their account without a username or password.

In the context of decentralized identity and verifiable credentials, an "agent" refers to the software that acts on behalf of a person or organization or device to manage the issuance, holding, and verifying of digital verifiable credentials in secure and trusted interactions.

Indicio automates the rules for your decentralized ecosystem for quick and simple administration.

Every decentralized identity system requires established rules for its users. This includes specifying who within the system is permitted to issue credentials and what credentials are necessary for particular actions. DEGov offers an easy method for system operators to modify these rules and implement system-wide updates.

Organization benefits

• Increased efficiency in creating and governing your decentralized identity solution.

• Offline functionality. Most systems require checking in with a governance authority before acting; Indicio’s system allows for caching the latest rules and enables actions when you don’t have a constant connection.

• Efficiently manage the entire decentralized identity solution and push system-wide changes with automation.

• Reduce liability for both the organization and users of the solution with built in rule-setting and automation. Indicio’s solution is engineered to ensure there is no chance of someone accessing something they shouldn't be able to.

Set up the rules quickly and easily without requiring technical expertise using Indicio’s simple and intuitive interface.

• Offline functionality ensures that you can use your decentralized identity whether you have a connection to the internet or not.

• Fast interaction times with the decentralized identity system through automation.

• Easily set up systems to accept a variety of credentials and allow the user to get more functionality out of credentials they already have.

Indicio Proven offers all the following software options!

Please complete the form below and within 24 hours you will be provided a unique link to gain access to Indicio's API documentation and guided tutorials.

As the world continues to adapt the use of digital identity and credentials, Indicio takes great care to ensure we continue to remain on top of global interoptibility. Below is a current look at how Proven is global. This will continue to grow, expand, and include many more across the world.

Endpoints for issuing and retrieving credentials

Indicio Proven is built to make decentralized identity simple, secure, and practical. Whether you're a business leader, developer, or solution architect, our getting started resources give you the tools to move fast and build with confidence.

Dependable & Consistent

Our expertly managed network provides you with a reliable and consistent environment to develop mission-critical products and services. Boasting an impressive track record of 100% uptime across the networks over the past four years, you can count on our dedicated network professionals.

Expert support

Indicio’s team of industry professionals have years of experience working with decentralized identity and delivering solutions that are in use around the world. They can help you migrate an existing project or start a new one and ensure you have everything you need to succeed.

Global Coverage

With strategically positioned nodes Indicio provides an unparalleled decentralized network that both meets and elevates your ambitions with steadfast reliability. Unlock even greater advantages by becoming a Node Operator.

Scalable Solutions

Elevate your business with networks designed to grow alongside you, seamlessly accommodating the needs of organizations and solutions of all sizes and sectors. Take advantage of our TestNet and DemoNet at no cost

Privacy Protection

By embracing decentralized networks, you significantly reduce the risks tied to storing personal data in vulnerable siloed environments or third-party databases. This approach fortifies your data protection and streamlines your ability to stay compliant with the ever-evolving landscape of data privacy regulations.

Multiple Networks

Indicio runs three public networks, the MainNet for hosting your solutions, the DemoNet for demoing solutions, and the TestNet for building your solutions. We also provide private networks for internal development. The TestNet and DemoNet are free to use and, if you’re a Node Operator, include free support.

Indicio adds functionality to your employee ID

By using verifiable credentials, Indicio is able to issue credentials to employee mobile devices that allow them to cryptographically prove their identity for access management to both physical buildings and the digital files and programs employees need to work.

For Employers

• Increase efficiency, eliminate the need for password resets, and prevent employees from being locked out due to user error.

• Increase security with phishing-proof verifiable credentials: unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Easily revocable – No requirement to change access rights, passwords, or collect keys when an employee leaves.

• Keep all employee information in one convenient place, including documents created, contracts signed, and more.

• Protect yourself from deepfakes and establish a more secure verification process online before sharing sensitive information.

• All access information is stored securely on the employee's mobile device, removing the need to carry keys, physical ID cards, or remember passwords.

• Easily store all your employment information in one place, and eliminate the hassle of tracking down physical documents and paperwork.

• Simple, secure, and easy to use interface removes tedious multi-factor authentication

Indicio takes great pride to ensure that all areas of Proven are up to date with global standards. Here you can see what these standards are that our product includes.

• Proven Credential Formats

• Proven Protocols

in education allow students to share their data with verifying parties — such as places of employment or universities — without the need to check in with the original source of that information, namely the school or college where they did their coursework or received their diploma.

• Immediate proof of degrees and accreditation

• Prove specific skills with microcredentials

The Indicio TestNet is a free to use community resource built on the open-source technology of Hyperledger , and . It provides a neutral, independent, and reliable decentralized network for the exchange of verifiable credentials.

Combine the TestNet with optional support from our team of experienced engineers, and you’ll have everything you need to start building on a network you can depend on!

To begin using the TestNet, follow these steps:

1. Create a public DID (decentralized identifier). This can be done with the , with the , an app of your choice, or by .

The following sections are an engineering focused API guide to Indicio Proven.

The Indicio proven API is secured using an API key, which must be included in the request header as x-api-key.

To add the API key, click the "Authorize" button and enter your API key.

#DID Methods

The DID method specifies how DIDs and DID documents are created, resolved, updated, and deactivated. We recommend and use DID methods that allow for communication endpoints even if the use case doesn’t require them. Their presence will make innovation easier in the future. We also, generally, recommend and use DID methods that provide high durability through writing to a distributed ledger. Proven supports multiple DID methods, which promotes interoperability with multiple DID-based solutions.

• did:sov

• did:key

Life online would be impossible without interoperability. Without TCP/IP (Transmission Control Protocol/Internet Protocol), a shared set of standards and rules allowing computers to communicate with each other, there would be no internet. Without HTML—Hypertext Markup Language— there would be no World Wide Web. And, as you read this— almost certainly in HTML on the WWW through TCP/IP—a new set of protocols are being built and adopted which aim to create interoperability around new technologies for digital Identity, data sharing, verification, and trust.

What does it mean to have a digital identity? The inter- net and the web evolved with effective ways to identify computers and websites but less so the people using them. Arguably, email addresses became the first way to establish human identity. They are the key building block for creating and accessing user accounts, often as login credentials, in tandem with passwords.

Whether as an email address leased from an email pro- vider, or as a user account brokered by an email account, these digital identities are not owned by us. They can be revoked. Because they are easy to create, they often require additional personal information to be verifiable. All this real-world and virtual data is stored by the “identity leasing agencies”—the myriad companies and services we use online through email and user accounts. This includes the metadata we generate by being online, which is aggre- gated, packaged, and sold on to other parties for undisclosed purposes, but which frequently include marketing and advertising. We must give prior consent to our data being used in this way in order to lease our digital identities. While all of this is presented as either mostly benign or mildly annoying, and unavoidable—a trade-off for the plenitude of goods and efficiencies online—the system isdesigned to fail. Emails are easy to find or guess. Passwords, if easy to remember, are easy to hack. People are easily “phished”into giving up personally-identifying information that can be used to replicate their identity online. Identity fraud is endemic to this system. Data breaches are frequent and expensive, a combination of the cost of lost data, the cost of being fined for losing the data, the cost of meeting increasingly stringent data privacy mandates, the cost of implementing better security, and the reputational cost of lost trust from losing all your customer data. In this system of centralized databases, each identity can be a single point of failure for the entire system. Federated identity, once thought of as a solution, replicates the under- lying problem with higher stakes: if something goes wrong, you lose access to everything tied to your digital identity. New, decentralized identity technologies mean that we can completely overhaul this system. We can establish digital uniqueness independent of any third party. We can generate the kind of verification that enables trust without storing personal information on third-party databases.

Verifiable credentials provide the authentication needed to establish trust in each other and in the data we need to share. They mitigate the compliance burden; they make digital life simpler. Imagine being able to log into any site or service by scanning a QR code. Imagine a world where you can forget your passwords...forever. With the bureaucracy of verification removed and the barrier to trust lifted, the transformation of the digital economy through trusted digital ecosystems can begin. But only if verifiable credentials are interoperable.

All systems are the result of design and technical choices. In designing for interoperability, the following technical aspects of a decentralized identity system must align. Note that some elements in this list (DID methods, some credential formats, etc.) require dependent infrastructure such as a ledger or web-hosted assets. Each element of dependent infrastructure in an interaction must be accessible and acceptable to each party. The scope of interoperability will likely change over time:

Convergence in one area can effectively eliminate its potential for incompatibility, while new technology may introduce new areas of incompatibility. Consider this list as a snapshot in time, subject to adjustment as circumstances require.

1. DID methods

The fully interoperable stack must be able to resolve the DIDs used by all involved parties. With the number of DID methods available, this is no small feat. The Universal Resolver can solve some of this problem, but only with careful management to avoid relying on the trust of an externally managed system. To trust the results of any given Universal Resolver resolution, one must trust that the code operates properly. To trust the results of a Universal Resolver run by another party, you must trust the other party to have both sufficient security to prevent outside manipulation and to not manipulate the results themselves. This trust is possible but it is not automatic.

1. Content encryption key types

Information between parties is usually encrypted; there- fore, each party must use compatible encryption keys and a compatible encryption scheme to allow decryption by the other party. Encryption at this level is used to encrypt protocol messaging and credential communication back and forth between parties.

1. Communication protocols

The methods of communication used between issuers, holders, and verifiers must be common between the parties in any given interaction. Different protocols can be used in each exchange as appropriate, but the combination of protocols must form a continuous chain of communication extending to all parties. Examples of these protocols are CHAPI, OpenID Connect, and DIDComm.

1. Credential format and signature types

The credential format used must be acceptable to all parties. Credential formats include JSON-LD (as depicted in the W3C Verifiable Credential Data Model specification), and JSON-based formats including JWT and AnonCreds. Credentials must also use signature types acceptable to all parties. Signature types include CL-signatures, BBS+, and Linked Data Signatures. Credential revocation methods must also be understood and testable by all parties.

1. Credential access / storage (wallet)

This may or may not be an issue, depending on how credentials are transferred from one party to another. If transferred directly to and from storage and not via another protocol, the data access needs to be compatible.

1. Credential protocols and coordination formats

The parties involved in exchanging credentials must communicate with each other about the credential. This includes communicating about the type and content of the credential before it is transferred. Even with identical credential formats, these protocols must be compatible to enable a transaction. Examples of these protocols and formats are the Aries Issue Credential and Present Proof protocols, The W3C Verifiable Presentation Request Specification, and the DIF Credential Manifest and Presentation Exchange formats.

1. Compatible governance / trust

With digital credentials, the issue of trust is critical but often ignored. Which issuer is the verifier willing to trust? This answer is solved through governance, machine-readable governance, and trust registries.

• Aries Interop Profile (AIP) 1.0: This is a leading interoperability standard that is used to ensure a wide range of interoperability between verifiable credential ecosystems. This standard makes it possible for the software components of different ecosystems to “talk” to each other in a way they understand and exchange information.

• AIP 2.0 Significant coverage

• OID4VCI

Easily control access to important information and areas with verifiable credentials

By using verifiable credentials, Indicio is able to issue credentials to user’s mobile devices that allow them to cryptographically prove their identity for access management to both physical buildings and the digital files and programs, such as those employees require to work.

Indicio Proven Auth Overview

Proven Auth is an OpenID Connect identity provider, similar to Google, Azure Active Directory, Auth0, Keycloak, etc. What makes Proven Auth unique is that rather than relying on a centralized database of users, Proven Auth uses digital credentials to authenticate its users. These credentials are signed by any Issuer that Proven Auth has been configured to trust. In short, Proven Auth is a credential verifier that can speak OpenID Connect to act as an Identity Provider.

What is OpenID Connect?

OpenID Connect (OIDC) is an identity layer built on top of the OAuth 2.0 protocol. It enables authentication in a standardized way and facilitates secure interaction between different systems. OIDC is widely used for Single Sign-On (SSO) solutions, where users can authenticate once and access multiple systems seamlessly.

Chances are you’ve used OpenID Connect before, whether you realized it or not. When you see a button on the login form of a website that says “Login with XYZ,” there’s a good chance that login is accomplished using the OpenID Connect protocol.

How does OIDC Work?

OpenID Connect works by letting one system – called the Identity Provider (IdP) – handle authentication for other systems that trust it. These other systems are referred to as the Relying Party (RP). Here’s what happens in practice: When you try to log into an application, instead of asking for your username and password directly, the app sends you to the Identity Provider. The IdP is responsible for verifying your identity, which might involve entering a password, using a security code, or confirming via an app.

Once the IdP confirms who you are, it sends a token back to the application. This token contains information about you, such as your name or email address, and proves to the application that you’ve been authenticated. The application checks the token, and if it’s valid, it lets you in.

The advantage is that the IdP can handle authentication for multiple applications. After logging in once, you won’t need to log in again as long as all the applications trust the same IdP. This is what makes Single Sign-On possible.

Proven Auth acts as a bridge between “traditional” web services and Digital Credential enabled systems. To traditional web services, Proven Auth is just another OpenID Connect Identity Provider, making it trivial to integrate into an existing website through the plethora of OIDC plugins and libraries available for virtually every web framework.

When the RP asks Proven Auth to authenticate a user through standard OIDC requests, Proven Auth creates a Presentation Request and makes it available to the End-User, or in Digital Credential terminology, the Wallet or Credential Holder. The Holder then presents the requested credential to Proven Auth where the credential is verified and then transformed into an ID Token to be returned to the RP.

• Increase efficiency, eliminate the need for password resets, and prevent users from being locked out due to user error.

• Increase security with phishing-proof verifiable credentials: unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Easily revocable – No requirement to change access rights, passwords, or collect keys when an employee leaves.

• All access information is stored securely on the employee's mobile device, removing the need to carry keys, physical ID cards, or remember passwords.

• Know that your personal information is secure because there is no centralized database of logins and passwords.

• Simple, secure, and easy to use interface removes tedious multi-factor authentication.

Remove reliance on centralized databases

The ability to hold personal identity or other data in this decentralized way removes the need for centralized databases of customer personal data or login information, reducing liability and the risk of data breaches.

Features

• Share data and identity with trusted connections.

• Collect credentials to store locally and share by consent.

• Secure, peer-to-peer messaging.

• Intuitive interface built for accessibility and convenience.

• Customizable branding and functionality (paid upgrades).

• - our ready to download digital wallet (in Apple and Android app stores).

• - a ready-to-use SDK to power your own wallet!

Indicio Proven ® Highlights

• Secure credential issuance and data verification

  • Enterprises, Governments, and organizations of all sizes can use Indicio Proven to issue and verify tamper-proof credentials in a secure and privacy-preserving way.

• Standards-driven interoperability

  • Proven provides unmatched interoperability by supporting multiple standards, including AnonCreds, W3C Verifiable Credentials, DIDComm, and emerging standards like SD-JWT and OpenID for Verifiable Credentials (OID4VC).

• Global standards

  • Organizations can design credentials tailored to their needs, leveraging the specific strengths of various formats. Proven complies with global data protection standards including eIDAS, EUDI, and industry specific technology standards. Including W3C Verifiable Credentials, Open Badges 3.0 from 1EdTech, and IATA One ID and ICAO DTC for travel.

• Customizable deployment

  • Proven is designed for flexibility, offering both a SaaS platform model or allowing deployment via APIs in various environments, including on-premise, cloud-based, or hybrid setups.

• Plug-and-play integration

  • Indicio Proven works seamlessly with the Indicio Network and other decentralized identity ecosystems. It offers pre-built integrations for developers to easily add decentralized identity to their applications. With easy integration into your existing technologies, Indicio Proven can be configured and operational in days, not months.

• Privacy by design

  • Indicio Proven ensures that data and identity information are shared exclusively between trusted Issuers, Holders, and Verifiers within your ecosystem. Unlike other solutions claiming to use verifiable credentials, Indicio never collects, holds, manages, or accesses your data - delivering true decentralization.

• Secure credential management

  • Indicio Proven enables full lifecycle management of credentials, including issuance, revocation, and expiration. Organizations can define policies for credential management, ensuring compliance with industry standards and internal requirements for credential authenticity and validity.

• Customizable governance

  • Users can configure and manage their own trust frameworks, including selecting roots of trust, defining credential schemas, and customizing credential verification logic. This flexibility supports a wide range of use cases, such as identity verification, secure access management, and compliance monitoring.

• Multi-tenant support

  • Indicio’s infrastructure is built for global scale and to handle high volumes of credential issuance and verification–fast. A single Indicio Proven instance can support multiple clients (tenants) in a single environment. Each organization can then securely manage its own decentralized identity (DID) configurations, verifiable credentials, and trust frameworks without interfering with other tenants, ensuring privacy and data isolation.

• Customization and configuration

  • Indicio Proven can be configured by each customer to match specific business needs, such as selecting roots of trust, defining credential schemas, and managing the lifecycle of digital identities and verifiable credentials. This flexibility enables various use cases, from KYC processes to digital access management.

• APIs for external integration

  • Easily integrate Proven into your existing systems with secure, standards-based APIs for credential issuance and verification.

• UI for issuance and verification

  • Issue and verify verifiable credentials through a simple, user-friendly interface—no technical setup required.

• Customer chat using basic message

  • Communicate directly with your customers through secure, in-app messaging powered by decentralized identity.

• Award-Winning technology

  • Indicio Proven stands as the most advanced platform for decentralized identity powered by verifiable credentials and has been recognized by Gartner, KuppingerCole, and Constellation Research, among others, for our customer deployments

Endpoints for fetching governance files

Endpoints for managing contexts

As AI agents begin to take on sensitive tasks—from travel planning to healthcare coordination—we need to verify who they are, confirm who they represent, and ensure they access our data and act only with our permission. ProvenAI brings a trusted identity layer to AI by using standards-based verifiable credentials and privacy-preserving protocols to establish cryptographic trust.

ProvenAI addresses a fast-emerging need across sectors like travel, finance, education, where AI is already being deployed. It is ideal for customer-facing AI systems, like chatbots that book travel, process loan applications, or assist with student services—where trust, authentication, and compliance are non-negotiable.

• Prove the AI agent is legitimate AI agents hold and present verifiable credentials to prove their identity and permissions when interacting with services or users.

Indicio’s solution is unmatched in the market, offering a truly decentralized approach that eliminates the need for a centralized trust registry. It implements the DIF Credential Trust Establishment specification, setting a new standard for governance automation in verifiable credential ecosystems. This innovative approach empowers ecosystems to grow efficiently, securely, and without reliance on centralized third-party services, ensuring a frictionless flow of trusted information.

Indicio uses machine-readable governance to simplify and automate ecosystem rules. Machine-readable governance encodes human-made governance decisions and rules into a machine-readable format, enabling automated implementation. These rules often include trust lists of approved credential issuers and verifiers, streamlining ecosystem management. This is calle

• DEGov: A standard for Machine-Readable Governance from the Decentralized Identity Foundation (DIF) standard, integrates traditional governance (e.g., system control) with technical policies, rules, and procedures specific to verifiable credential ecosystems. Its data format is compatible with ToIP Trust Registries, ensuring broad interoperability.

Governance Editor & Interpreter

Indicio’s governance solution provides an unparalleled framework for managing decentralized ecosystems with two key components:

1. Governance Editor: A user-friendly interface designed to simplify and accelerate the creation of governance files, making it easy to encode governance rules in machine-readable formats.

2. Governance Interpreter: Enables agents to interpret governance files and assess whether actions—such as issuing or verifying a credential—comply with the established governance rules in a decentralized ecosystem.

By streamlining the creation and enforcement of governance rules, Indicio empowers organizations to implement robust governance quickly and efficiently. No other company offers a comparable solution, positioning Indicio as the emerging standard for governance in the decentralized identity space.

Governance Wizard: An enhancement to DEGov in Indicio Proven with a user-friendly interface enabling seamless creation and updates of governance files.

Key Benefits

• Simplified Implementation: Governance rules are easily linked to ecosystem actions, such as issuing and verifying credentials, fostering ecosystem growth.

• Real-Time Updates: Rapid changes can be propagated across the ecosystem or jurisdiction, eliminating delays caused by third-party updates.

• Error-Free Coordination: Rules and permissions can be choreographed efficiently and accurately, reducing the potential for miscommunication or errors.

Easier, faster, more secure authentication

Indicio Proven Auth allows you to quickly configure single sign-on (SSO) with policy-driven authorization so that your customers or end users can login with portable digital identities instead of usernames and passwords. It allows you to easily implement policies that define access rules dynamically. No more one-size-fits-all permissions. No more access silos.

With Proven Auth, you can use dynamic access rules that respond instantly when a verifiable credential is presented. Instead of granting broad permissions, you can enforce fine-grained policies that determine exactly what each person should access based on their role, credentials, and other verified attributes.

1. Issue verifiable credentials using Indico Proven to employees, customers, partners, or have your contractors issue them to their employees that contains information that would affect their access. This could include things like their role, location, years of experience, certifications or other relevant information.

2. Integrate Proven Auth with policy engines like Amazon Verified Permissions or Abacus and write policies based on your business’ needs.

3. Grant access based on their verified attributes so instead of using static, pre-configured access roles, the world of tools and systems people can access is set up for them in minutes, without needing to log into anything.

When logging into an application, Proven Auth checks to see if the credential issuer is valid and provides the destination system with the necessary data about who you are and what you should have access to. Proven Auth doesn’t need to have seen your credential before to do this.

• Comes with Keycloak for identity access management but is easily configurable to use other software.

• Combine popular protocols (e.g. OIDC, SAML) with widely-used policy engines (such as Amazon Verifiable Permissions or Abacus) for role- or user-based authorization decisions based on the attributes of a verifiable credential.

• Unlike conventional identity provision, Proven Auth enables systems to allow access based on credentials they have never seen before provided they trust the source (e.g., government-issued ID).

• Replaces weak passwords and weak second-factor authentication for better security.

• No tracking by centralized third-party identity providers.

• No worries if a federated identity provider goes dark.

• Reduces the steps for authentication in a zero-trust architecture model.

1. The issuer assembles all the necessary identity information to prove who a user is.

2. The information is stored inside a verifiable credential and issued to the end user’s mobile device.

3. Personally identifiable information is deleted from the issuer’s systems, removing liability and lessening risk of breach

Endpoints for email verification

A privacy-preserving credential format that enables selective disclosure, allowing users to share only the information needed without revealing everything on a credential.

A governance model—based on a DIF standard—that defines machine-readable rules and policies for credential ecosystems, allowing systems to self-update without third-party arbitration; supported by Indicio Proven's “Governance Wizard.”

An ICAO-standardized digital representation of a traveler’s passport that can be securely stored and presented via a mobile device.

An application that stores, manages, and presents verifiable credentials securely, typically installed on a mobile device.

A secure messaging protocol that allows identity agents (wallets, issuers, verifiers, mediators) to communicate directly and privately using DIDs.

A decentralized database maintained by a network of nodes, ensuring transparency, immutability, and shared control over data.

A complete verifiable credential solution for identity and data

Indicio Proven is the world’s most advanced solution for decentralized identity using verifiable credentials and Open Badges 3.0.

It is designed to provide the widest possible range of options to build, deploy, scale, and manage verifiable credential ecosystems.

It is built to be interoperable and compatible with current and emerging global protocols and standards for decentralized identity. This includes the European Union’s new standards for digital identity (eIDAS) and digital wallets (EUDI).

It is easy to implement — a platformless solution that can work with your existing systems — and it is configurable in days rather than months.

It is easy to scale from simple use cases to managing national and global identity verification.

Biometrics were supposed to solve the problem of passwords. But if a password is stolen, it can be reset. If biometrics are stolen or faked using generative AI, they become an existential threat: You can’t reset someone’s face.

With Indicio Proven, biometric data can be bound to a verifiable credential so that verifiers do not have to store the biometric data to authenticate it.

This also protects against generative AI deepfakes.

• Capture a person’s biometrics in a template during identity assurance and issue the template as a verifiable credential.

A complete verifiable credential solution for identity and data

Seamless, streamlined, and secure identity verification

Indicio Proven is the world’s most advanced platform for decentralized identity using verifiable credentials and Open Badges 3.0.

It is designed to provide the widest possible range of options to build, deploy, scale, and manage verifiable credential ecosystems.

It is built to be interoperable and compatible with current and emerging global protocols and standards for decentralized identity, including the European Union’s new standards for digital identity (eIDAS) and digital wallets (EUDI).

It’s easy to implement — a platform that can work with your existing systems, and it is configurable in days rather than months.

And it’s easy to scale from simple use cases to managing national and global identity verification.

Verifiable credentials are a powerful new way to authenticate identity and data. As Gartner Research notes in its 2024 Market Report for Decentralized Identity, they represent “magnitudes of improvement in terms of efficiency, cost and assurance.”

Indicio Proven allows you to build in a way that works best for you, with flexible deployment options, including on premises, in Amazon Web Services, Azure, Google Marketplace, Oracle, or a provider of your choice.

The software needed to create, issue, and verify credentials.

The software to download, store, and use credentials on mobile devices.

Flexible template for creating credentials.

Make use of a robust and stable distributed ledger, professionally managed by Indicio, choose the provider that works best for you, or have us build your own distributed ledger network.

• Verifiable credentials can hold all kinds of valuable information in a way that any attempt to alter that information breaks the credential.

• Instant, cryptographic proof of who issued a credential, and that the person presenting it is the rightful owner — an identity fraud killer.

• You are always able to verify who you share data with before sharing it — and they you.

Indicio has years of experience developing and implementing verifiable credential solutions for global enterprises and governments. Here are just a few examples.

Indicio is the leading developer of award-winning decentralized identity solutions for the air transport sector, and Indicio Proven® provides multiple ways to deploy verifiable credentials for seamless, secure, identity authentication with privacy-preserving features.

For complex information flows where security is critical, Indicio developed and deployed the world’s first Digital Travel Credential based on the International Civil Aviation Organization (ICAO) standards.

This “government-grade” digital identity enables passengers to convert their passports into authenticated digital credentials that can be used for pre-authorization for travel and seamless border crossing. Our DTC technology is being implemented by airlines and governments around the world, and is being extended to include immigration visas, airport lounge access, hotel check-in, and customer loyalty programs.

Indicio Proven provides comprehensive verifiable credential solutions for rapid, remote onboarding, seamless account access and reusable (with expiration) Know-Your-Customer (KYC) checks.

By issuing a biometric template as a verifiable credential, institutions have a powerful way to verify liveness without having to store biometric data — and they can implement simple, instant workflows to defeat AI-generated identity fraud.

Our customers are using Indicio Proven to create simple solutions to complex information problems, replacing manual processes, reducing error and friction, and developing markets through portable trust. Here are a few examples.

Digital agriculture leverages the ubiquity of mobile devices to share critical data. Indicio created an entire ecosystem for farmers in New Zealand to share emissions and compliance data tied to geospatial location with key stakeholders in the agricultural value chain. The project, run by Trust Alliance New Zealand, has won a 2024 SuperNova Award from Constellation Research for Digital Safety, Governance, Privacy, and Cybersecurity.

USA Kansas is using Indicio Proven’s Open Badges 3.0 option to manage training and certification for teachers across the state.

The combination of secure, verifiable digital identity, secure, bi-directional communication, and decentralized governance enable a host of critical features for managing AI agents, chatbots, digital twins, drones, and smart cities. Whether it’s decentralized command and control of drone flight paths, permissioning verifiable AI agents to access your data, or personalized, secure chatbot interaction, Indicio Proven provides powerful, elegant solutions to the emerging authentication and communication challenges around new technologies.

Indicio offers the following communication protocols & technology

Your enterprise-grade network for delivering fast, powerful decentralized identity solutions.

What is a decentralized network?

Using a decentralized network provides a layer of cryptographic trust and a source of truth for your solutions. Through cryptography and metadata you can always be sure on who issued a credential and that the information has not been tampered with. No personal data is ever written to the ledger.

Decentralized networks remove the need for personal data to be stored in siloed databases. In doing this, they provide a simple way to comply with data privacy law and remove the risk from data being stored in third-party databases.

The Indicio MainNet provides a home for your solutions no matter your use case, industry, or organization type. Our architects and engineers have years of experience and are standing by to help you build and deploy your solution on our world renowned network.

Indicio has three public networks you can use for your solutions the MainNet, DemoNet, and TestNet. We also provide private networks for internal testing or development – reach out to ask us more about a private network.

Why use Indicio’s network

Stable

Our professionally managed network ensures you have a dependable, stable place to build mission critical products and services. Over the last four years we have had 100% uptime across all three networks.

Robust

Indicio has nodes across five continents, providing a robust decentralized network you can rely on. Learn more about hosting a node and joining the Indicio Network Consortium.

No personal data is ever written to a distributed network. The end user holds and has full control over their data, including who they share it with and how it is shared. Decentralized networks replace storing personal data in risky siloed or third-party databases. They provide a simple way for you to comply with evolving data privacy laws.

Become a Transaction Endoser to start writing to the MainNet today. Complete the

Authenticate with base API key

Indicio proven includes all of these trust establishment options!

• World’s first successful implementation of ICAO’s DPC Type 1 specifications in a verifiable credential.

• World’s first successful implementation of IATA’s One ID in a digital wallet for travel.

• World’s first successful combination of a DPC Type 1 and OneID for international travel.

Seamless authentication with government-grade digital identity including authenticated biometrics enables digital transformation across the travel ribbon to remove friction, error from manual data entry, and delay from manual security touchpoints — all without airlines and airports having to securely manage their passengers’ personal data.

Indicio’s verifiable credentials allow you to store data inside a secure credential and share it with anyone who has the verifier software without the need for integrations between systems and databases.

• Increase efficiency and eliminate the need for expensive and complex integrations between disparate systems.

• Enable secure login and access through personalized digital identities stored securely on the user’s mobile device.

Endpoints for creating and managing invitations

By using verifiable credentials, Indicio offers you a way to issue secure, decentralized digital identities to your citizens that allow them to cryptographically prove their identity for fast and trusted access to government benefits and systems they need.

• Increase security with phishing-proof verifiable credentials; unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Fight fraud and reduce data breaches by removing reliance on centralized databases for sensitive identity information.

Endpoints for managing Decentralized Identifiers (DIDs)

The technical specification or structure that defines how credential data is encoded, presented, and exchanged. Credential formats ensure that the data within a verifiable credential can be securely issued, shared, and verified across different systems. Key aspects of a credential format include how the data is digitally signed, the cryptographic techniques used, and how privacy-preserving features like selective disclosure or zero-knowledge proofs are implemented.

Indicio provides robust support for a variety of credential formats, enabling organizations to choose the format that best aligns with their use case and interoperability requirements including:

• JSON-LD (Linked Data): A format that integrates with semantic web technologies, allowing credentials to include rich metadata and context for better interoperability.

Indicio simplifies proving achievements and skills without relying on a third-party provider

By using verifiable credentials, Indicio is able to issue proof of achievements and new skills as Open Badges 3.0, allowing users to securely hold these badges on their mobile devices and share them at their discretion without relying on a third-party hosting platform or provider.

For Educational Institutions

• Provide a more convenient and automated information sharing process for faculty and students.

• Remove the need to manually look up student grades when other universities or businesses need to verify them.

• Remove reliance on third-party providers to store and share student achievement data.

• Fight fraud and phishing attempts with tamper-proof and uncopiable badges.

• Simplify sharing and authentication and eliminate waiting time with locally stored student records.

• Easily store all your achievement information in one place, removing the need to track down physical documents and paperwork.

• Diplomas and student information remain verifiable even if the educational institution experiences technical outages or becomes unreachable.

Overview: Open Badges were launched in 2011 by the Mozilla Foundation with support from the MacArthur Foundation as an open specification and infrastructure for creating and sharing digital records of skills and achievements.

• With this infrastructure, the badges could only be issued to a certified Open Badges platform and could not be sent directly to recipients. Badges hosted on a website could also be changed without showing any record of the change.

• , created by the global educational nonprofit, , solved these challenges by updating the specification to align with the .

• Now, a badge can be issued directly to a recipient’s digital wallet application on a mobile device. And, as a badge is digitally signed, it cannot be altered or tampered with once it has been created.

• Portability: They are no longer tied to an Open Badge Platform. An Open Badge recipient holds their credentials in their digital wallet.

• Immutability: They are now digitally signed in a way that prevents alteration after issuance.

• Resilience:They are not tied to a platform or API that could fail or go out of business.

As 1EdTech notes: The verifiable credential format enables “limitless claims,” enhanced security and privacy through cryptographic verifiability, and meets “market needs for trustworthy machine-ready data to power connected ecosystems in education and [the] workforce.”

• Verifiable credentials can hold all kinds of valuable information in a way that any attempt to alter that information breaks the credential.

• Instant, cryptographic proof of who issued a credential, and that the person presenting it is the rightful owner — an identity fraud killer.

• You are always able to verify who you share data with before sharing it — and they you.

• Following 1EdTech’s 3.0 standard, Indicio Proven now enables Open Badges as verifiable credentials.

• This means that Open Badges can be directly issued to a digital wallet, overcoming a key limitation of previous Open Badge implementations.

• Open Badges are now immutable, portable, private, and secure.

• The ability to issue micro credentials

• The ability to create profiles

• Bulk issuance and messaging

• DIDComm is available as an option, allowing personalized interaction

The global leader in verifiable digital identity solutions, trusted by enterprises and governments worldwide to streamline operations, eliminate errors, and prevent fraud.

Indicio’s Proven APIs offer a simple, effective way to integrate the ability to issue, hold, share, and verify decentralized Verifiable Credentials for proving identity information directly into your existing systems. Built on open-source technology, Indicio’s solutions are interoperable with W3C standards, EUDI, SD-JWTs, AnonCreds, DIDComm, and more, ensuring that your systems will work around the globe.​Functionality includes:

• Completely decentralized — eliminate your reliance on centralized databases for sensitive user identity information

• Hosting options — Build on premises, in the cloud, or managed by Indicio, our team offers maximum flexibility

• Pre-set use cases and schemas — Build your own custom solution or choose from one of Indicio’s templates to get started fast

• Automated Governance — quickly create the rules for your system and implement them system wide with a few clicks

• Offline identity verification — Use your credentials where and when you need them, even if you or the verifier can’t connect to the internet

If you want to learn more about Indicio or discuss the information contained please complete the following form to schedule time with a member of our team.

​​​​​​​

The documents contained on these pages are intellectual property of Indicio and are not to be duplicated or shared. By requesting access to these pages you agreed tho these terms and conditions.

By using verifiable credentials, Indicio is able to issue secure decentralized digital identities to your users that allow them to cryptographically prove their identity for more streamlined border crossing.

• Bring more efficiency to border crossing with cryptographically verified credentials that can be shared with one tap — instead of paper documents that are more easily lost.

• Fight fraud with tamper-proof credentials that are biometrically tied to an individual and, unlike paper documents, cannot be lost, copied, or stolen.

Europe’s new frameworks for trusted digital identities, eIDAS 2.0 and the European Digital Identity Wallet (EUDI), are laying the groundwork for faster, more privacy-preserving digital identity verification. Indicio Proven simplifies and accelerates the implementation of your digital identity solutions to meet these new specifications (most implementations within 12-48 hours).

• Create secure, cross-border digital identities that meet the demands of both private and public sectors.

• Eliminate unnecessary data sharing and provide Europeans with full control over their data while accessing online services.

Endpoints for managing connections

Indicio Proven helps businesses easily implement reliable and scalable decentralized identity solutions. With a plug-and-play suite of tools and services, it streamlines operations, reduces manual processes, and accelerates deployment while ensuring modern, secure data verification. Indicio Proven provides everything needed to create, issue, verify, and manage verifiable credentials using W3C decentralized identifiers (DIDs).

It’s easy to scale from simple use cases to managing national and global identity verification. Indicio Proven allows you to build in a way that works best for you, with flexible deployment options, including on premises, in Amazon Web Services, Azure, Google Marketplace, Oracle, or a provider of your choice.

Indicio is a global leader in digital identity, authenticated biometrics, and verifiable credential technology with scalable solutions that organizations can easily and rapidly deploy for increased efficiency, better user experience, and reduced cost. Our award-winning enterprise solution, Indicio Proven®, offers the widest range of interoperable decentralized identity options for global deployments, from single sign-on to seamless border crossing, as well as compatibility with the European Union’s digital identity and wallet standards and leading open-source specifications. Learn more about how Indicio is using this technology to successfully transform education, finance, government, health, travel and tourism, and supply chains at indicio.tech.

Founded in 2020, on the belief in privacy and security by design, Indicio supports the open source and interoperability goals of the decentralized identity community. Indicio is committed to advancing decentralized identity as a public good that enables people to control their identities online and share their data by consent. Identity should be simple, inclusive, and work for everyone.

Indicio enhances Zero Trust architecture by providing a more robust identity layer

By using verifiable credentials, Indicio is able to issue secure decentralized digital identities to your users that allow them to cryptographically prove their identity for fast, trusted access to systems and applications they need inside your Zero Trust environment.

Organization benefits

• Increase security with phishing-proof verifiable credentials: unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Fight fraud and reduce data breaches by removing the reliance on centralized databases for sensitive identity information.

• Easily manage access and assign roles across your organization.

• Provide a better experience for your users with fast and secure access to the information they need.

• Protect your systems and staff from deepfakes and fraud with mutual authentication, establishing a two-way online verification process before sharing sensitive information.

• Access the applications you need with less time spent on identity and document verification.

• Reduce identity theft and impersonation attempts with secure digital identification that cannot be copied by bad actors.

• Eliminate time-consuming multi-factor authentication.

DIDComm — short for Decentralized Identifier Communication — provides a method for creating a direct, secure line of communication between the owners of Decentralized Identifiers (DIDs). But DIDComm is more than just a mechanism for an individual message, it’s a framework for safe, structured interactions built on decentralization technology.

DIDComm creates an encrypted communications channel for issuing, presenting, and verifying a verifiable credential. It provides maximal security for these processes by allowing each party to mutually authenticate each other before sharing information. It allows for rich, consent-based communication that facilitates the creations of trusted relationships between passengers and airlines and other partners. This is the foundation for a new level of customer personalization that no other exchange protocol provides

In this framework each holder of a DID agrees to accept a connection and enables communication along that channel, whether it be through a website, email, mobile push notifications, QR codes, or a text message. These connections benefit from the built-in features of DIDComm technology, including message encryption, mutual authentication, and message routing.

While some interactions happen entirely within DIDComm protocol messages, such as identity verification and connection creation, DIDComm protocols can also be used to facilitate interactions within other protocols. For example, a video conference call or a phone call could be coordinated using DIDComm protocols to make use of the trust provided by the DIDComm relationship.

A key use for DIDComm is in the communication of verifiable credentials. In the annotated stack diagram from Trust Over IP (below) we can see the role that DIDComm could play in its architectural design.

A Mobile Driver’s License (mDLs) is a digital specification for a physical driver’s license. Given that driver’s licenses are widely used for identification, it's likely that a digital version would enjoy similar ubiquity online. Here, we look at what exactly they are (are they verifiable credentials?) their benefits, and why they are not currently widely available.

It all starts with the International Organization for Standardization (ISO) 18013 series. In a nutshell, this document creates a common standard for international recognition of a digital driver’s license.

The standard lays out the scope as follows:

• You must use a machine to obtain the mDL.

• The mDL must be tied to the mDL holder.

• You must be able to authenticate the origin of the mDL data.

• You must be able to verify the integrity of the mDL data.

Critically, there are two things the standard does not cover:

1. How the holder’s consent to share their data is obtained.

2. Any requirements on how the mDL data is stored.

So now we know what the mDL is: it is a driver’s license that can be stored on your mobile device and is tied to you. It can be proven to be as accurate as a physical card because we can prove that it was issued by a proper authority — such as the department of motor vehicles — and prove that the integrity of the data has not been compromised.

But an mDL is not the same as a verifiable credential because the mDL data can technically be stored in a siloed database. However, a verifiable credential, which allows a person to hold their data, could absolutely fit this standard and be used to easily issue mDLs, as they meet all the other requirements laid out above.

The benefit to using mDLs is similar to the benefits of using verifiable credentials. They are simple to verify and use, convenient, and often more secure than a physical document.

There are guides written on . This is because each state has their own methods for trying to make their driver’s licenses difficult to counterfeit. An mDL offers a much simpler way to verify the identity of a person or their age for eligibility to purchase goods: all you need to do is scan the QR code and the software will tell you. You don’t need a flashlight, or to look for holograms.

Most people also now have a mobile device that is always with them. Carrying a digital version of your driver’s license allows you to not worry about accidentally leaving your ID somewhere or needing to fish through a bag to find it, it is always at your fingertips.

Lastly, the security features of these mDLs, especially if they are created through verifiable credentials, are hard to match. If the mDL is a verifiable credential, it is essentially immune to forgery because the software can cryptographically verify the origin of the data, and there is an additional layer of security from the data being stored on the holder’s mobile device instead of a centralized database, removing the risk from data breaches.

One of the reasons why these credentials have not yet been widely adopted is that regulations have not kept up with the technology.

In the US, the REAL ID act of 2005 wasn’t updated to include permission for digital and mobile drivers licenses. But the federal government leaves the issuing of driver’s licenses to each state, meaning that the state governments also have to vote on implementation; as of August 2024, only legislation to start issuing mDLs.

If they are being issued by your state they are not currently a replacement for your license, but an additional way to represent it, meaning that you will likely still have a physical license somewhere. This could be another reason that many haven’t adopted them, they see it as an add-on that is unnecessary.

It's important to remember that this technology is still new. Many people might not understand or trust it yet, but as the world shifts to be more digital, it will be a big part of how we prove our identity moving forward.

If you are part of an organization looking into mDL technology, or a better way to prove your identity online, Indicio can help! .

This tutorial goes through a series of steps to exercise a few of the key features of the Proven API and help you begin to construct your own workflows.

Indicio is compliant with all of the following credential formats!

Digital identity for citizen services, reducing fraud.

• Replace your passwords with credentials Unlike passwords, credentials cannot be lost, stolen, or copied, and don’t require your employees to remember them.

• Access management Both physical and digital access management can be done through credentials for enhanced security — and unlike access cards, credentials cannot be lost, stolen, or copied.

Indicio Proven can be deployed on premise, in cloud, or as SaaS. Server APIs to control the agent to connect, issue credentials, verify credentials, or securely message.

Indicio Proven eliminates the need for direct integrations or third-party data management, streamlining data sharing, and ensuring compliance with data protection regulations. Credential schemas are fully configurable, supporting the issuance of a wide range of data types. The software can be deployed on-premises, in a private cloud, or with any major cloud provider.

Proven is offered as either a fully-hosted solution for quick setup, eliminating the need for complex configuration and maintenance or can be self-hosted.

• Proven Enterprise (SaaS): Indicio Proven Enterprise offers efficient integration of scalable and secure decentralized identity management into existing systems and workflows. It allows organizations to easily issue, verify, and manage verifiable credentials while maintaining privacy and compliance with global standards. With multi-tenant support and flexible configuration options, it provides a comprehensive platform for businesses to adopt and extend decentralized identity solutions.

This software enables mobile devices to securely and reliably connect with credential issuers and verifiers using DIDComm. This component is not required for OID4VC-only interactions. Since mobile devices lack fixed IP addresses, our Cloud Scale Mediator Agent ensures seamless management of tens of thousands of simultaneous active users.

Keys are stored following industry best practices, and all messages are encrypted both in transit and at rest. The mediator cannot access the contents of messages exchanged between clients.

It automatically scales with traffic demand and has been rigorously tested to handle exceptionally high volumes.

Indicio Proven includes a cloud-scale mediator to support customer application at scale.

Schemas define credential attribute names and attribute types. Indicio Proven uses standards based credential schemas, such as ICAO-DTC, mDL, etc. or custom schemas. This acts as a sort of blueprint of what the verified credential will contain. The scheme outlines the basics of what data is required to truely identify the person being presented via VC.

For example: the scheme will require Name, DOB, Issue date of the ID used to make the credential

Any information that can be conveyed through a credential schema is now verifiable, along with the source of that information. Trust lists for issuers and complex information flows and approvals are managed by machine-readable governance files directly sent to the agent software of each participant in the credential ecosystem.

You can learn more about credential schemes and see examples on the

Indicio uses Hyperledger Indy, private or public networks, or other ledgers when requested. Support for ledgerless operation is also offered. Use of a ledger provides the availability, durability, and redundancy necessary to support a robust identity ecosystem.

While we support alternative non-ledger-based solutions (see DID:WEBVH below), we highly recommend the robust Hyperledger Indy identity ledger.

• Hyperledger Indy Networks: Hyperledger Indy is the leading open-source code for distributed ledgers. A distributed ledger provides a way to find credential issuers (through public DIDs) and perform the cryptography necessary to verify credentials. Using a distributed ledger provides a high level of cryptographic trust, information security, and network resilience.

Indicio Proven is also compatible with

• Sovrin Ledgers

• CANdy

• Lissi

• Ethereum

• (Non-Ledger) KERI

• Indicio Network: Indicio’s public-permissioned ledgers are built on Hyperledger Indy to provide a versatile platform for designing, testing, demonstrating, launching, and supporting decentralized identity solutions. With nodes spanning five continents and a global consortium of over 20 members, our team brings unparalleled expertise in managing Indy networks.

Value:

• Enterprise-grade: They are professionally-supported to deliver mission-critical deployments.

• Energy efficient: Ledgers for identity do not require proof-of-work and are low energy in operation (a write to the ledger is equivalent to a web search in energy consumption) with guaranteed 99.97% uptime.

• Network monitoring: Indicio has developed a range of network support tools to monitor network performance.

Our Enterprise-grade distributed ledger network is based on Hyperledger Indy and is composed of four professionally-managed networks:

• Indicio TestNet: A platform for proof-of-concept for development and testing, supported by Indicio’s engineering team.

• Indicio DemoNet: A platform to showcase demonstrations.

• Indicio MainNet: A platform to run enterprise-grade, mission-critical identity products and services with full, professional support.

DID:WEBVH stands for DID:WEB with Verifiable History. It is an evolution of the DID:WEB method, designed to address some of its limitations by incorporating a verifiable history component, enhancing trust, and ensuring the integrity of decentralized identity systems. The DID:WEB method enables organizations to create decentralized identifiers (DIDs) that are resolvable using standard web infrastructure. These identifiers are hosted on web servers and can be accessed via HTTP(S), making them straightforward to implement and compatible with existing internet technologies.

Indicio supports DID:WEBVH as part of its commitment to offering flexible and interoperable decentralized identity solutions. By integrating DID:WEBVH, Indicio allows organizations to benefit from:

• Plug-and-play root-of-trust options.

• Enhanced security and transparency for DID management.

• Compatibility with both centralized and decentralized ecosystems.

1. Immutable Records: All changes to the DID Document are logged and cryptographically secured, preventing unauthorized alterations.

2. Enhanced Trust: By providing a verifiable history, DID:WEBVH mitigates reliance on central web servers and enhances the trustworthiness of DID:WEB implementations.

3. Interoperability: It retains compatibility with existing web technologies while adding layers of decentralized trust.

Transforming Account Recovery for Banks with Verifiable Credentials

Indicio Proven provides comprehensive verifiable credential solutions for rapid, remote onboarding, seamless account access and reusable (with expiration) Know-Your-Customer (KYC) checks.

By issuing a biometric template as a verifiable credential, institutions have a powerful way to verify liveness without having to store biometric data — and they can implement simple, instant workflows to defeat AI-generated identity fraud

Account recovery made easy

Indicio Proven offers an innovative, decentralized identity solution that transforms account recovery by leveraging verifiable credentials within a digital wallet. This solution enables secure, frictionless identity for quick account recovery while reducing operational costs and improving compliance readiness.

How It Works

1. Issue a Recovery Credential:

Upon account creation, the bank issues a recovery verifiable credential (VC) to the customer. This credential is stored in the customer’s digital wallet within their banking app. The credential is cryptographically secure, private, and tamper-proof.

1. Self-Service Recovery Process:

If a customer needs to recover their account, they simply present their VC via their secure digital wallet. The bank verifies the credential providing instant and reliable credential validation, no knowledge-based authentication (KBA) or passwords required.

1. Enhanced Security Measures:

Biometrics can be bound with the verifiable credential for added security, ensuring compliance with banking regulations.

• Interoperable: Compatible with major digital wallet providers and existing banking systems.

• Scalable: Handles large-scale deployments across multiple branches and regions.

• Customizable: Tailored technology selections to fit specific regulatory and operational needs.

Account recovery is a critical process for financial institutions, yet it often causes frustration for customers and operational inefficiencies for banks. Traditional recovery methods rely heavily on outdated mechanisms such as knowledge-based authentication (KBA) and manual identity verification, which introduce challenges:

• Compliance Strain: Regulatory requirements around data privacy and security intensify the need for robust and auditable solutions.

• Customer Friction: Long wait times and multiple verification steps create frustration, reducing customer satisfaction and loyalty.

• Security Risks: KBA and other traditional methods are vulnerable to fraud, phishing, and social engineering attacks.

Streamlined Customer Experience:

Eliminates lengthy manual verification steps, enabling near-instant account recovery. Reduces frustration and improves customer satisfaction. Enhanced Security:

Cryptographic verification significantly reduces the risk of fraud and phishing attacks. Decentralized identity ensures that sensitive customer data is not stored in a centralized database, minimizing the risk of breaches. Cost Savings:

Automating the recovery process reduces operational overhead, allowing staff to focus on higher-value tasks. Regulatory Compliance:

Indicio Proven’s decentralized identity framework aligns with privacy laws such as GDPR and CCPA, ensuring secure and auditable processes.

About Indicio Proven ®

A complete end-to-end solution, Proven is designed to provide the widest possible range of options to build, deploy, scale, and manage verifiable credential ecosystems, and is interoperable and compatible with current and emerging global protocols and standards for decentralized identity, including the European Union’s new standards for digital identity (eIDAS) and digital wallets (EUDI).

It’s easy to implement and scale, from simple use cases to managing national and global identity verification, and unlike many digital credential solutions that claim to be decentralized, with Indicio technology, you are always in full control of your data.

Benefits

• Verifiable credentials can hold all kinds of valuable information in a tamper-proof way, as any attempt to alter that information breaks the credential.

• Instant, cryptographic proof of who issued a credential, and that the person presenting it is the rightful owner — an identity fraud killer.

• Mutual authentication allows you to always able to verify who you are sharing data with before sharing it — and they you.

• Data is shareable across disparate systems without direct integration.

• Data is immediately actionable — if you trust the source of the credential, you can trust the data.

• Data is more secure — no need for third parties to store the data in centralized databases to manage authentication.

• Takes the hassle out of data privacy compliance — a person is in control of their data and can share it by consent.

• Protect biometric systems and data from AI deepfakes.

• Indicio Proven is the most advanced solution for decentralized identity using verifiable credentials and Open Badges 3.0. It gives you maximum speed and flexibility to build, launch, scale, and manage verifiable credential ecosystems.

• It’s built for interoperability. Indicio Proven works with existing and emerging global standards, including EU eIDAS and EUDI digital wallets.

• It’s fast to implement. Integrate Proven with your current systems and can be configured in days—not months.

Issuer & Verifier Agents The software needed to create, issue, and verify credentials.

Mobile App & Mediator The software to download, store, and use credentials on mobile devices.

Verifiable Credential Schema Flexible template for creating credentials.

Verifiable Data Registry or Network Make use of a robust and stable distributed ledger, professionally managed by Indicio, choose the provider or registry technology that works best for you, or have us build your own network.

Technical support & training Indicio Proven includes personalized onboarding, comprehensive documentation, and expert-led training to ensure your team is set up for success at every stage.

Learn how easy it is to get started, use, and generate value using Indicio Proven!​

A powerful, portable, privacy-preserving data management solution that saves farmers time, money, and tedium

With Indicio Proven® Digital Farming, authenticated data can be shared instantly and reused endlessly

Farming is data-intensive work and each hour spent on data management is a measurable economic cost to farmers. Indicio Proven developed an award-winning solution to this problem using verifiable credentials and decentralized identity.

With a verifiable credential, a farmer can hold and manage authoritative farm data from their phone, share it seamlessly with other stakeholders in the agricultural value chain — suppliers, government agencies, financial services, and vendors — all while maintaining data privacy and protection.

With this easy-to-implement solution, data doesn’t need to be stored by third parties in order to be authenticated. Thanks to cryptography, the data shared from a credential cannot be tampered with — and the credential origin is always provable.

This means that data can be reused over and over again with the absolute certainty that those who need to see it can verify it as authentic. It gives farmers the power to be their own data platforms, while radically simplifying their data management burden.

• Connect authoritative data across different areas and systems.

• Capture data once in tamper-proof records that can be easily shared and reused.

• Fully own your farm data with permissioned, secure sharing to other parties.

• Farms and farmers hold their own data — not third parties.

• Simplifies access to global markets

• Proven success in New Zealand.

Verifiable credentials can be configured to store all kinds of data for seamless, secure sharing:

• Biodiversity data

• Crop data

• Environmental data

• Farm management apps, sensors, drones

Indicio created an entire ecosystem for farmers in New Zealand to share emissions and compliance data tied to geospatial location with key stakeholders in the agricultural value chain. The project, run by Trust Alliance New Zealand, has won a 2024 SuperNova Award from Constellation Research for Digital Safety, Governance, Privacy, and Cybersecurity.

“Being able to quickly share data about their goods or emissions to these key relying parties provided a huge benefit to the farmers, saving them time, creating better connections between them and their customers, and reducing the amount of effort they have to spend filling out the same forms multiple times” - Sharon Lyon-Mabbet Project Manager at TANZ.

About Indicio Proven ®

A complete end-to-end solution, Proven is designed to provide the widest possible range of options to build, deploy, scale, and manage verifiable credential ecosystems, and is interoperable and compatible with current and emerging global protocols and standards for decentralized identity, including the European Union’s new standards for digital identity (eIDAS) and digital wallets (EUDI).

It’s easy to implement and scale, from simple use cases to managing national and global identity verification, and unlike many digital credential solutions that claim to be decentralized, with Indicio technology, you are always in full control of your data.

Benefits

• Verifiable credentials can hold all kinds of valuable information in a tamper-proof way, as any attempt to alter that information breaks the credential.

• Instant, cryptographic proof of who issued a credential, and that the person presenting it is the rightful owner — an identity fraud killer.

• Mutual authentication allows you to always able to verify who you are sharing data with before sharing it — and they you.

• Data is shareable across disparate systems without direct integration.

• Data is immediately actionable — if you trust the source of the credential, you can trust the data.

• Data is more secure — no need for third parties to store the data in centralized databases to manage authentication.

• Takes the hassle out of data privacy compliance — a person is in control of their data and can share it by consent.

• Protect biometric systems and data from AI deepfakes.

• Indicio Proven is the most advanced solution for decentralized identity using verifiable credentials and Open Badges 3.0. It gives you maximum speed and flexibility to build, launch, scale, and manage verifiable credential ecosystems.

• It’s built for interoperability. Indicio Proven works with existing and emerging global standards, including EU eIDAS and EUDI digital wallets.

• It’s fast to implement. Integrate Proven with your current systems and can be configured in days—not months.

Issuer & Verifier Agents The software needed to create, issue, and verify credentials.

Mobile App & Mediator The software to download, store, and use credentials on mobile devices.

Verifiable Credential Schema Flexible template for creating credentials.

Verifiable Data Registry or Network Make use of a robust and stable distributed ledger, professionally managed by Indicio, choose the provider or registry technology that works best for you, or have us build your own network.

Technical support & training Indicio Proven includes personalized onboarding, comprehensive documentation, and expert-led training to ensure your team is set up for success at every stage.

Learn how easy it is to get started, use, and generate value using Indicio Proven!

Indicio simplifies access to government services and streamlines permits and licensing

Using verifiable credentials, Indicio is able to issue credentials to citizen mobile devices that allow them to cryptographically prove their identity for access to government services, as well as securely store government-issued permits and licenses.

Government benefits

• Increase efficiency by providing a passwordless, one-tap verification to give citizens access to government services.

• Increase security with phishing-proof verifiable credentials: unlike passwords or physical keys, these credentials cannot be lost, stolen, or copied.

• Fight fraud and reduce data breaches by removing reliance on centralized databases for sensitive information.

• Issue and verify tamper-proof citizen documentation, such as permits, licenses, and contracts, in seconds with one scan.

• Protect your systems and citizens from deepfakes with mutual authentication, establishing a two-way online verification process before sharing sensitive information.

• Access government benefits faster and spend less time on document verification and more time addressing your needs.

• Remove the need to remember passwords or provide multiple documents for accessing government services.

• Reduce identity theft and impersonation attempts with a secure digital identification that cannot be copied by bad actors.

1. Issuer

The issuer is an entity that creates and provides verifiable credentials to holders.

Responsibilities:

• Credential Creation: Issues credentials that are cryptographically signed to ensure authenticity.

• Data Source: Acts as the trusted source of information contained in the credentials.

• Examples: Government agencies issuing digital IDs, universities issuing diplomas, or banks issuing creditworthiness statements.

The holder is the individual or entity that owns and controls the verifiable credential.

Responsibilities:

• Credential Storage: Stores credentials securely, often in a digital wallet.

• Consent and Sharing: Shares credentials selectively with verifiers when needed.

• Examples: A student holding a digital diploma or a traveler holding a digital passport.

The verifier is an entity that validates the authenticity and integrity of a verifiable credential.

Responsibilities:

• Verification Requests: Requests credentials from the holder for authentication or authorization.

• Credential Validation: Uses cryptographic proofs to ensure the credential is issued by a trusted issuer and has not been tampered with.

• Examples: Employers verifying a candidate’s diploma or an airport validating a digital passport.

The governance rules define the rules and standards for how verifiable credentials are issued, held, and verified.

Responsibilities:

• Establishes trusted relationships among issuers, holders, and verifiers.

• Specifies technical and policy requirements for interoperability and compliance.

• Examples: Emerging European identity regulations, eIDAS and EUDI for digital wallets.

A mediator plays a crucial role in enabling seamless, secure communication and interaction between mobile digital wallets and other entities (issuers, verifiers, and other wallets) in decentralized identity ecosystems. A mediator does in relation to mobile digital wallets:

Responsibilities:

• Facilitates Secure Connections: Mobile wallets often need to establish secure, private channels for exchanging verifiable credentials and other data. This is especially useful for wallets on devices that are not always online or directly addressable (e.g., behind a firewall or NAT).

• Routes Message: Mobile wallets may not be constantly connected to the internet, making direct communication with other parties (issuers, verifiers, or holders) challenging. The mediator acts as an intermediary to store and forward messages. It ensures that messages sent to the wallet are reliably delivered when the wallet becomes available.

• Supports Credential Exchange: Mediators play a role in helping mobile wallets request and receive credentials from issuers and present credentials to verifiers, often through secure and automated communication channels.

A registry or ledger may be used to publish public information, such as issuer credentials or revocation lists.

Responsibilities:

• Stores metadata (not user information or credentials) like public keys or credential schemas.

• Verifiers use it to confirm the trustworthiness of an issuer or the revocation status of a credential.

  • Examples: Blockchain networks like Hyperledger Indy or the .

• Issuers provide credentials to holders.

• Holders share credentials with verifiers.

• Verifiers validate the credentials using public keys or registries.

• All interactions occur under a governance framework to ensure security and trust.

Indicio Proven includes all these features!

• 1 Ed Tech 3.0 Specification.

• Internet Engineering Task Force specifications.

Indicio’s powerful digital wallet — Holdr+

An easy-to-use, secure digital identity wallet for verifiable credentials

Holdr+ ®

With Holdr+, Indicio has your digital wallet needs covered.

• Holdr+ allows someone using a mobile device to receive, hold, and present verifiable credentials and to create and establish secure, mutually authenticated communication between parties.

  • Supports governance file establishing who trusted issuers of credentials are.

  • Supports a variety of credential types and protocols including OID4VCI, OID4VP, AnonCreds, SD-JWTs, JSON-LD, and Open Badges 3.0.

  • Compliant with W3C Verifiable Credential Standards and the only wallet compatible with the DIF Credential Trust Establishment specification.

• Indicio’s fully deployed mobile digital wallet application is available to download in the app stores today!

• Download on or .

A “must have” capability

Gartner Research describes a digital wallet as a “must-have” capability in its 2024 Market Report on Decentralized Identity, predicting that “by 2026, at least 500 million smartphone users will be regularly making verifiable claims using a digital identity wallet built on distributed ledger technology.

More than just a digital wallet

The plus in Holdr+ means you’ve got more than just a digital wallet: you’ve got a way to turn a mobile devices into a secure data platform that’s able to deploy the functionality of an API while delivering much better security.

The combination of secure messaging and verifiable credentials turns your customer into their own digital platform. With Holdr+, your customer becomes their own digital platform.

• Your customer controls their data.

• They are able to communicate securely with your business and partner organizations.

• Personalization by consent enables a new level of customer experience through instant data sharing.

Secure authentication

With Holdr+, you can use DIDComm for secure, instant messaging, where each party is able to cryptographically authenticate the other before sharing critical data.

Bring your own biometrics

With Holdr+, you can combine a biometric template with a liveness check when identity assurance and security are critical. This is also a simple and highly effective way to mitigate the threat of AI-generated deepfakes.

Your own internal network specially designed for your needs.

What is a private network?

A private network refers to a network that requires permission to use. These “permissioned” networks allow companies or organizations with shared and specific interests and goals to provide verifiable information to their customers or stakeholders. You could, for example, use a private network for managing a supply chain, a government may want to control a private network for a particular purpose, or someone could spin up a private network to conduct specific testing.

Private networks gain power through using interoperable agents. This means that credentials created for use on one private network could have the option to also be verified on other networks, whether public or private. This creates a “network-of-networks effect,” and ensures long-term business flexibility.

Learn More about networks

Why go private?

Make your network for your own use. Governments, scientists, financial institutions, enterprise services, and specialized groups and services need to have control over where the network is hosted, which organizations are part of their network, who can write to the ledger, and how the network is governed. With our customizable Private Network Services, you can have this control.

Get To Market Fast

We’ll get your network up and running in days. We understand the importance of being agile in today’s market and we’ve assembled an industry-leading team of engineers who will set up your network quickly and efficiently. We have your service support and advice—every step of the way.

With a private network, you can start building and testing your Trusted Data Ecosystem before deploying them in public. You get to understand the the innovative from the inside. Set up the governance that meets your and your customers’ needs.

You want your network to be private; trust us, you also need it to be interoperable. on Hyperledger Indy, the most widely used interoperable platform for decentralized identity. We give you the added functionality and business flexibility that a stand-alone network can’t provide.

Your enterprise-grade network for demonstrating reliable, powerful decentralized identity solutions.

The Indicio DemoNet uses the open-source technology of Hyperledger Indy, Aries and Ursa to provide a stable network platform for demonstrating your decentralized identity solution.

Combined with access to our team of experienced engineers, you’ll have the hands-on support you need to showcase your innovation.

Start writing to the DemoNet today!

It’s easy to start using the Indicio DemoNet, just follow these steps:

Create a public DID (decentralized identifier). This can be done with the indy-cli, with the Aries Toolbox, or by following these instructions.

After you create your public DID complete this form. Select “DemoNet” from the dropdown to get your DID written to the Network.

LEARN MORE

Indicio Proven™ provides the tools to establish a Trusted Digital Ecosystem (TDE). You can immediately issue, verify, and manage credentials. While the options are almost limitless, this tutorial will lead you through a simple workflow that illustrates some of Proven’s core capabilities.

In order to interact with Proven, please download and install the free Holdr+ wallet from either the or the .

1. Swipe past the first two images and click Get Started on the third image as shown below.

: All the code you need in one place to implement decentralized identity

The Indicio Proven Mobile SDK removes a critical blocker to deploying verifiable credential solutions — the lack of a single source for all the code needed to build customized apps with interoperable digital wallets.

Whether Android or iOS, the Proven Mobile SDK enables your developers to easily add wallet and verifiable credential functionality to your applications without having to learn new programming languages or practices or having to develop complicated, multi-app workflows.

• Multiple libraries:

Indicio Proven is the world’s most advanced platform for decentralized identity using verifiable credentials and Open Badges 3.0.

It is designed to provide the widest possible range of options to build, deploy, scale, and manage verifiable credential ecosystems.

It is built to be interoperable and compatible with current and emerging global protocols and standards for decentralized identity, including the European Union’s new standards for digital identity (eIDAS) and digital wallets (EUDI).

It’s easy to implement — a platform that can work with your existing systems, and it is configurable in days rather than months.

And it’s easy to scale from simple use cases to managing national and global identity verification.

Verifiable credentials are a powerful new way to authenticate identity and data. As Gartner Research notes in its 2024 Market Report for Decentralized Identity, they represent “magnitudes of improvement in terms of efficiency, cost and assurance.”

Indicio is compliant with all of the following standards & legislation!

The Indicio Academy is a structured learning hub that equips teams with the knowledge to confidently use and integrate Indicio Proven into real-world applications. It combines expert instruction with practical exercises to ensure both technical and non-technical users can deploy verifiable credential solutions effectively.

Whether you're new to decentralized identity or ready to scale your credential-based solutions, the Indicio Academy provides the knowledge, tools, and hands-on experience you need to succeed with Indicio Proven.

What you'll learn

Our curriculum is designed to meet you where you are—from first-time implementers to experienced developers.

Modules include:

• Foundations of Decentralized Identity Understand key concepts, standards, and ecosystem roles.

• Using Indicio Proven Learn how to issue, verify, and manage verifiable credentials through Proven’s intuitive UI and APIs.

• Integration and Deployment Explore best practices for integrating Proven into your business processes and digital systems.

• Advanced Topics Dive into technical topics like DIDComm, credential schemas, trust registries, and interoperability.

• IT Leaders and Solution Architects.

• Product Managers and Innovation Teams.

• Developers and Integrators.

• Government and Enterprise Stakeholders.

Ready to learn more? Contact your account manager or email us to enroll.

Proven Webhook Documentation

Overview