Platform

Everything behind the page.

A passport is a set of obligations that outlive the product launch. Here is the machinery that carries them.

Authentag system architecture Physical layer Carriers printed code · NTAG 213 / 216 NTAG 223 DNA · 424 DNA · TT Key derivation one key per chip, derived at issue encrypted at rest master key never in the read path Production encoding serialised on your line memory write-locked before shipping Verification AES-128 CMAC challenge–response single-use, fresh on every tap monotonic counter · tamper state Passport core Identity & resolution self-issued identifier · permanent address · model / batch / item re-encoding a tag never mints a new identity Structured data industry field sets · per-unit records · six-language values applicability resolved by category and date Version archive full snapshots · content-hashed · retrievable by date archived in the same transaction as the change Access & disclosure overlapping audience sets, not tiers · field-level credential gating · proof-of-holding for purchasers withheld by default · every gated read logged Evidence & trust Asymmetric signing ECDSA P-256 over the sealed version public keys published for anyone verifiable without us Public anchoring daily Merkle root · public blockchain 32-byte fingerprints only no product data on chain Persistence second independent holder same archive, same access rules Regional isolation own database, keys and domain per region hosting follows the account holder no cross-region accounts Interfaces Consumer page six languages, no app no account, no profile Machine interface structured objects current or historical state Print & documents code artwork · audit PDF registry submission file Decentralised by design the registry holds identifiers the passport data stays with you Every box above is in the product today. What is still being deployed is named on the trust page — not implied here.
Scope

What we deliberately do not do.

We do not sell, re-use or analyse passport data held for a customer. No benchmarks, no aggregate data products, no model training. The service is storage, disclosure and evidence.

We do not declare products compliant. A signed, anchored passport proves what the information was and when. The declaration stays with the operator who places the product on the market.

What we claim, and what is open →

See it on your own product.