After issuance
Issuance is the start of the record, not the end of the job.
A Passport nobody points at is a record nobody reads. This is what the first week with one actually looks like — and none of it needs anything beyond the free identity until your estate asks for more.
Let anyone check it
Publish the record, then share it. Anyone can then open the same page you can, or read the same record as JSON, with no account and no key. The badge, the QR code and the share link come with the free Passport.
The same record answers a machine at
https://api.ecocitizenz.com/api/p/{ecz_id}.json— no account, no key, and nothing metered about reading it.Publishing the record is your decision. Nothing becomes public until you consent, and you can withdraw publication later.
Pattern you implementQuoting the identifier where people already look — a documentation page, a product page, a signature — is yours to do. We publish the record; where you point at it is your decision.
The Resolver is public, read-only proof of what is currently declared and verified, with the time it was read. A record is not a verdict, and the record itself says so and asks to be re-checked. Re-check before reliance.
Connect the places it already exists
Your connected device almost certainly already appears in public somewhere. Record those places against the one identity, so the same thing stops being a different thing in each of them. Each binding records where it was learned. Where a live proof method fits, complete it, so the record shows the binding as verified, with when it was last verified.
- a manufacturer product page
- published device documentation
- a public model or catalogue entry
Illustrative. This is the shape a record of this kind can take, not a live estate — a new Passport starts with no bindings and no relationships, and shows only what its operator chooses to publish.
IoT Fleet Capacity: The devices you actively manage are counted in IoT Fleet Capacity, which is separate from AEC: IoT never consumes AEC, and AEC never counts IoT.
Firmware versions, MAC and IP addresses, and the gateways and hubs a device registers with are not separate Passports.
See what it is connected to
Your organisation, this identity and everything bound to it now read as one picture — beside the other identities it legitimately sits next to, each with its own operator.
A relationship is not permission.
Work out what genuinely needs an identity of its own
Some of what surrounds your connected device is another representation of the same thing. Some of it is a different subject, with a different operator and a lifecycle of its own. Only the second kind is a second Passport.
When something deserves a Passport of its own
One IoT Passport is one physical device, or one device identity module, operated by your organisation. A fleet is many Passports.
A second Passport is for a second logical subject — something with its own operator and its own lifecycle. It is never another representation of this one.
Firmware versions, MAC and IP addresses, and the gateways and hubs a device registers with are not separate Passports.
None of what is listed above is a second Passport, and none of it consumes AEC. The public places this one already appears are recorded as bindings on it instead.
Related Passports are suggested, never issued for you. Each is its own free identity, taken with its own deliberate click.
The neighbouring Passports open to you today are the API, Service & Workload and Agent Passports.
Manage everything you hold in one place
One signed-in console holds the identities your organisation holds, what they are bound to and what their records currently say. It is also where your organisation's current configuration lives.
Add more only when the estate gives you a reason
A free Passport exists and resolves whether or not you use any AEC. Nothing below is already running, none of it is needed to keep what you hold, and declining it never changes an identity you have.
None of this is switched on by default. A free Passport includes evaluation you ask for, not monitoring that runs on a schedule, and anything ongoing starts only when you choose it in TrustOps.
I need to manage more entities in production.
IoT Fleet Capacity
The devices you actively manage are counted in IoT Fleet Capacity, which is separate from AEC: IoT never consumes AEC, and AEC never counts IoT.
A free Passport exists and resolves whether or not you use any AEC.
I need the organisation behind these identities independently checked, not just declared.
Parent VERIFIED and ASSURED
Independent verification of the organisation behind your Passports. VERIFIED suits production use; ASSURED is the higher-assurance posture for larger or more sensitive estates. Paying opens ECZ-ID's checks, and the record shows the tier only after they pass — payment alone changes nothing on it.
Boundary: It verifies your organisation. It never verifies the subject of any child Passport, and it never changes an ECZ-ID.
Included free: Your organisation's ECZ-ID Business Passport — Declared — FREE is the Parent every Passport starts from, created for you if your organisation has none.
I need device relationships managed across whole fleets, through their whole life.
IoT Fleet Identity & Lifecycle
Identity and lifecycle for the device relationships across your fleets.
Boundary: It manages identity relationships — not telemetry, firmware updates or device management — and it never publishes a device's raw identifiers.
Prices and what can be bought today come from TrustOps, which owns every purchase, entitlement and renewal.
Where next
Keep going with ECZ-ID IoT.
- ProductsEvery IoT product and service, each with its own page.Open
- The free IoT PassportWhat it establishes, what it never says, and how it is issued.Open
- Verify an ECZ-IDRead a live record on the public Resolver — no account, no key.Open
- Build and integrateIoT & Connected Systems on the Developer Gateway.Open (opens in a new tab — developers.ecocitizenz.com)