Products

Start free. Add only what solves a real problem.

Your Service & Workload Passport is free and permanent. Around it: the capabilities it already includes, five universal platform capabilities, the business solutions, this family’s flagship digital product, the bundles that are actually relevant here, ECZ-ID Intent, Intent Control and Receipts, Workload Identity Federation (the Service & Workload operating product) and expert help.

Prices and what can be bought today come from TrustOps, which owns every purchase, entitlement and renewal. Where a page lists tiers, their prices are read from TrustOps.

Get a FREE Service & Workload Passport

Which product is for me

Find the one that fits what you are doing.

Your Service & Workload Passport is free whatever you choose. Each row says who a product is built for, in its own words, and leads to its full page.

Each Service & Workload product and who it is built for
Start with	Built for
DCI — Digital Counterparty InfrastructureSolution	Businesses selling through digital channels where counterparties need to verify who stands behind the service. API and platform operators that want a reusable machine-readable counterparty layer. Procurement, trade and automated workflows where repeated identity checking creates friction.
DORA ICT-vendor evidenceSolution	Technology suppliers selling ICT services into EU-regulated financial entities. Teams repeatedly answering the same vendor-risk and operational-resilience questions. Providers that want a structured evidence pack rather than a loose collection of attachments.
SBOM & software-composition evidenceSolution	Software suppliers facing enterprise supply-chain review. Connected-product, SDK, plugin, API and service teams managing third-party components. Organisations that want SBOM evidence tied to an enduring product identity rather than an isolated file.
ECZ-ID Service & Workload Identity & Secretless Migration KitDigital product	Platform and cloud-security teams retiring long-lived service-to-cloud and service-to-service credentials. Service owners moving a service between clusters, regions or clouds. Organisations that must show a customer or auditor how service identity and access are governed.
ECZ-ID Machine Identity Assurance BundleBundle	Platform engineering Machine-identity programmes Connected estates
ECZ-ID Digital Entity Trust SuiteBundle	Multi-product vendors Enterprise machine-economy programmes Agencies with broad digital estates
AEC — Active Entity CapacityUniversal platform	Teams moving from a handful of ECZ-ID entities to a production estate. Organisations that want one predictable capacity model across Agent, MCP, Plugin, API, SDK and Service & Workload. Operators that need headroom without creating another identity tier.
PulseGuardUniversal platform	Teams that operate changing machine identities in production. Owners that need a current-state view across a growing estate. Reviewers who want evidence that a state was checked at a known point in time.
LedgerCoreUniversal platform	Teams that need a durable evidence trail behind identity and lifecycle decisions. Security, procurement and audit reviewers who need more than a current-state screenshot. Operators that want one evidence pattern across all seven Passport families.
ECZ-ID Graph IntelligenceUniversal platform	Teams operating estates where one entity depends on many others. Security and procurement reviewers tracing operator and dependency relationships. Platform owners that need estate-level relationship views rather than isolated records.
ECZ-ID WatchUniversal platform	Relying parties that would otherwise keep re-checking Resolver records manually. Operators, procurement teams, insurers and platforms following important ECZ-IDs. Teams that need an explainable before-and-after view when public identity state changes.
ECZ-ID ReceiptsAuthority & evidence	Teams that need the receipts their ECZ-ID products create kept beyond the moment they were made. Reviewers and auditors who ask what was recorded, and when. Organisations that want one searchable place for receipts across every family they operate.
ECZ-ID IntentAuthority & evidence	Operators who need to state what an ECZ-ID entity is authorised to do, not only who it is. Teams preparing an authorised boundary for ECZ-ID Intent Control to evaluate actions against. Reviewers who ask who authorised an entity's objective, and for how long.
ECZ-ID Intent ControlAuthority & evidence	Teams that want a proposed action checked against authority, the Intent and policy before their own systems act. Operators of services and workloads whose actions involve counterparties. Organisations that want the Intent and its runtime control in one plan.
ECZ-ID Intent + Intent ControlAuthority & evidence	Teams that want the authorised Intent and its runtime evaluation under one plan. Operators of services and workloads whose actions are checked against authority and policy before their own systems act. Organisations that would otherwise hold an ECZ-ID Intent plan and an ECZ-ID Intent Control plan side by side.
Workload Identity FederationOperating product	Platform teams operating services and workloads across several clusters or clouds. Teams that want workload identity federation run as one plan across the estate. Operators who need every free Service & Workload Passport left untouched by whatever the plan does.
Expert helpExpert help	Platform teams who want their services, workloads and the credentials each one uses mapped by people who do it regularly. Teams piloting multi-cloud or SPIFFE federation with ECZ-ID bindings. Organisations integrating ECZ-ID with the systems they already run.