How it works

A credential journey is a governed trust system.

DiligenceID connects authoritative issuers, holders, wallet experiences, verifiers and relying services across the full lifecycle.

Three-party model

Each participant has a different responsibility.

A clear credential architecture starts with authority and policy, not a QR code.

How trusted evidence movesAn issuer creates a credential, a holder controls and presents it, a verifier checks issuer integrity and current status, and a relying service makes a business decision. Status and revocation remain connected controls rather than a central store of credential data.ISSUERCreates evidenceCREDENTIALSigned claimsHOLDERControls walletPRESENTATIONPurpose-led proofVERIFIERChecks trust + stateDECISIONRelying policySTATUS / REVOCATIONOngoing issuer control checked by the verifierHow trusted evidence movesIssuer, credential, holder, presentation, verifier and decision form the main flow. Status and revocation connect credential state to verification.ISSUERCreates evidenceCREDENTIALSigned claimsHOLDERControls walletPRESENTATIONPurpose-led proofVERIFIERChecks trust + stateDECISIONRelying policySTATUS+REVOKEONGOING
The holder presents defined evidence; the verifier checks issuer, integrity and current status; the relying service owns the decision.

Service lifecycle

From design to evidence.

The exact platform and format vary by use case, but ownership must cover every stage.

Complete credential lifecycleDesign, issue, hold, present, verify, decide, monitor status, revoke or expire, and retain proportionate audit evidence. Status is an ongoing control throughout the usable credential lifecycle.01DESIGNClaims · policy · trust02ISSUEAuthoritative evidence03HOLDWallet receives04PRESENTPurpose-led request05VERIFYIntegrity · issuer · state06DECIDERelying policy07STATUSOngoing control08REVOKE / EXPIREAuthority changes09AUDITOperational evidenceComplete credential lifecycleDesign, issue, hold, present, verify, decide, monitor status, revoke or expire, and retain proportionate audit evidence. Status is an ongoing control throughout the usable credential lifecycle.01DESIGNClaims · policy · trust02ISSUEAuthoritative evidence03HOLDWallet receives04PRESENTPurpose-led request05VERIFYIntegrity · issuer · state06DECIDERelying policy07STATUSOngoing control08REVOKE / EXPIREAuthority changes09AUDITOperational evidence
Status remains an ongoing control: a verifier checks current state when evidence is presented, while expiry, revocation and audit close the operational lifecycle.

Platform operations

Readiness is part of issuance.

An issuer is not ready merely because it exists. DiligenceID exposes lifecycle, signing, trust and protocol state so operators can resolve gaps before a holder journey begins.

Issuer directory showing operational readiness across lifecycle, signing, trust and protocols
Issuer configuration

Policy before technology

Define the trust decision first.

ISSUER

Who may make the claim?

Identify the authoritative organisation, source information and operational owner for issuance and lifecycle changes. Day to day, this is an HR system, a licensing authority or a training provider signing off evidence it is genuinely positioned to attest.

HOLDER

What can they understand and control?

Make the requesting party, purpose, evidence and next step visible before presentation. The holder decides whether to present a credential from their wallet for a given request—nothing is pushed or shared automatically.

VERIFIER

What will be accepted?

Define trusted issuers, credential types, required claims, status rules and the relying service’s decision. A verifier checks the issuer's signature, the credential's current status and the specific claims requested—not the whole record.

Diligence Wallet

Hold and present supported evidence.

The Diligence Wallet is a holder experience for receiving, holding and presenting supported DiligenceID credentials.

It is separate from issuer administration. It is also distinct from Microsoft Authenticator; Microsoft Entra Verified ID scenarios must use wallet experiences supported by Microsoft’s current product configuration.

Standards and interoperability

Use open boundaries where they create real choice.

The selected credential, wallet and trust ecosystem determines the exact profile; support should be confirmed for each deployment rather than assumed from a standards label.

DATA MODELW3C Verifiable Credentials

A standards-based way to express issuer-provided claims and proofs for portable digital evidence.

ISSUANCEOpenID4VCI

An OpenID-family protocol for credential issuance journeys where supported by the selected ecosystem.

PRESENTATIONOpenID4VP

A protocol for requesting and returning verifiable presentations between holder and verifier components.

FORMATSD-JWT VC

A credential format that can support selective disclosure patterns when all participating components implement the required profile.

IDENTIFIERSDecentralised identifiers

DIDs may identify and resolve issuer authority in profiles that use them; they are not required to replace every existing identity identifier.

ARCHITECTUREReplaceable trust boundaries

Separate business trust policy from one wallet, format or vendor-specific interface where practical.

Lifecycle controls

Trust can change after issue.

STATUS

Current state matters

Verification should evaluate supported status information as part of the relying service’s policy.

EXPIRY

Evidence should not outlive its purpose

Credential validity and renewal should reflect the underlying fact, relationship or authority.

REVOCATION

Issuers retain control

A designed revocation process lets the authoritative issuer respond when eligibility, accuracy or security changes.

AUDIT

Operational evidence remains

Issuance, status and verification events support troubleshooting, assurance and accountable service operation.

Put trusted evidence to work

Design the complete credential journey.

Start with the authoritative evidence, holder experience and relying decision—then select the right credential and integration pattern.