A clear credential architecture starts with authority and policy, not a QR code.
The holder presents defined evidence; the verifier checks issuer, integrity and current status; the relying service owns the decision.
Service lifecycle
From design to evidence.
The exact platform and format vary by use case, but ownership must cover every stage.
Status remains an ongoing control: a verifier checks current state when evidence is presented, while expiry, revocation and audit close the operational lifecycle.
Platform operations
Readiness is part of issuance.
An issuer is not ready merely because it exists. DiligenceID exposes lifecycle, signing, trust and protocol state so operators can resolve gaps before a holder journey begins.
Issuer operations
Issuer configuration
Policy before technology
Define the trust decision first.
ISSUER
Who may make the claim?
Identify the authoritative organisation, source information and operational owner for issuance and lifecycle changes. Day to day, this is an HR system, a licensing authority or a training provider signing off evidence it is genuinely positioned to attest.
HOLDER
What can they understand and control?
Make the requesting party, purpose, evidence and next step visible before presentation. The holder decides whether to present a credential from their wallet for a given request—nothing is pushed or shared automatically.
VERIFIER
What will be accepted?
Define trusted issuers, credential types, required claims, status rules and the relying service’s decision. A verifier checks the issuer's signature, the credential's current status and the specific claims requested—not the whole record.
Diligence Wallet
Hold and present supported evidence.
The Diligence Wallet is a holder experience for receiving, holding and presenting supported DiligenceID credentials.
It is separate from issuer administration. It is also distinct from Microsoft Authenticator; Microsoft Entra Verified ID scenarios must use wallet experiences supported by Microsoft’s current product configuration.
Standards and interoperability
Use open boundaries where they create real choice.
The selected credential, wallet and trust ecosystem determines the exact profile; support should be confirmed for each deployment rather than assumed from a standards label.
DATA MODELW3C Verifiable Credentials
A standards-based way to express issuer-provided claims and proofs for portable digital evidence.
ISSUANCEOpenID4VCI
An OpenID-family protocol for credential issuance journeys where supported by the selected ecosystem.
PRESENTATIONOpenID4VP
A protocol for requesting and returning verifiable presentations between holder and verifier components.
FORMATSD-JWT VC
A credential format that can support selective disclosure patterns when all participating components implement the required profile.
IDENTIFIERSDecentralised identifiers
DIDs may identify and resolve issuer authority in profiles that use them; they are not required to replace every existing identity identifier.
ARCHITECTUREReplaceable trust boundaries
Separate business trust policy from one wallet, format or vendor-specific interface where practical.
Lifecycle controls
Trust can change after issue.
STATUS
Current state matters
Verification should evaluate supported status information as part of the relying service’s policy.
EXPIRY
Evidence should not outlive its purpose
Credential validity and renewal should reflect the underlying fact, relationship or authority.
REVOCATION
Issuers retain control
A designed revocation process lets the authoritative issuer respond when eligibility, accuracy or security changes.
AUDIT
Operational evidence remains
Issuance, status and verification events support troubleshooting, assurance and accountable service operation.
Put trusted evidence to work
Design the complete credential journey.
Start with the authoritative evidence, holder experience and relying decision—then select the right credential and integration pattern.