Features

Three layers, one identity, and consent at every gate

Each layer builds on the one before it. You can use the first on its own — most employers start there.

V1

Employment identity

Who works, or worked, for whom — confirmed by both sides and kept current over time.

  • Two-sided confirmation: a record is verified only when the worker and the employer both say so
  • A freshness heartbeat that measures confidence in a record, and can never close one
  • Closed employment is kept, with its reason, rather than deleted
  • One permanent identity per person, whatever roles they hold over a working life
V2

Employment expenditure

One number, one period: what an employer says it spent on its workforce.

  • Always labelled as the employer’s own declaration, never as a verified figure
  • Declaring is optional — a period with no declaration is a choice, not a failure
  • Superseded declarations are retained alongside their replacement
  • Reconciliation against recorded headcount, with ordinary explanations offered first
V3

Professional trust

Consent-gated verification and a reputation earned from counterparties.

  • Scoped consent with an expiry, revocable at any moment by the person
  • An explainable trust profile: every factor shown with its evidence, confidence on its own axis
  • Two-way feedback with a right of response, and disputes that freeze judgement
  • A disclosure ledger showing the person who looked, when, and under which consent

Across the platform

Consent as the gate

Nothing detailed is disclosed without a specific, scoped, expiring approval — and declining looks identical to not existing.

An API for hiring systems

Scoped machine credentials for your ATS, bound by the same consent. Contact details are never available to an integration.

Workforce insights

Composition, tenure, record quality and declaration coverage over your own records — with small groups suppressed rather than published.

A tamper-evident trail

Every consequential action is chained under a server-side key, so an altered history is detectable rather than merely unlikely.

Virtual WorkID

Share a short-lived alias with a prospective employer instead of your permanent identifier. Revocable instantly.

Works on the phone people own

Installable, offline-tolerant, and legible on a cheap handset in daylight — through to a television across a room.