Trust you can verifyin one click.

    QuartzPass issues verifiable credentials to organizations and the people who act for them, from the records you already keep. Publish trust lists whole networks follow. Let anyone verify — free, in one click, one scan or one API call.

    Received an invitation from an issuer or an authority? Accept it from the email — your space is free.

    Conditionally qualified innovation, Innovative Solutions Canada Testing Stream 2026 · SOC 2 Type II audited · ISO/IEC 27001 · W3C Verifiable Credentials, OpenID4VC, SD-JWT

    How trust cascades Registry issues credentials to Supplier A, Supplier B and Marie T.; Department and Bank verify them.

    Three steps. No new database.

    1. Source

      Connect what you already have.

      HR, directory, registry, procurement data, a CSV or an API.

    2. Rule

      Say who qualifies, in plain words.

      QuartzPass issues when the rule holds and revokes when it stops holding.

    3. Output

      Publish.

      A badge on a website, a pass in a wallet, a list for others to follow.

    The rule, as you would write it
    “Keep the Verified Employee credential while the person is active in Entra; revoke it the day they leave.”

    Credentials for organizations. Credentials for people. One space.

    VALID

    Organization

    Organization credentials

    Accreditation badges on a trust list: verified supplier, certified SME, licensed establishment, accredited partner. Embedded on the organization’s own website; revoked at source.

    VALID

    Person

    Individual credentials

    Passes people carry: verified employee, member in good standing, graduate, authorized signatory. Presented from a wallet, an authenticator or the corporate sign-in.

    Issue either or both. Verify both for free.

    Publish a list once. Every follower trusts everyone on it.

    An authority publishes its list of accredited organizations. Each organization gets a space and its badge the same day. Anyone who follows the list trusts all of them, without setting up trust one organization at a time — and when the authority removes one, every follower knows within minutes.

    Verifying is free. For everyone. Always.

    • On a website

      Click or scan the badge. The verification page re-checks the credential at the source on every load and shows VALID or REVOKED, with the legal name and verified domain.

    • From a person

      Send a verification request by link or QR. The holder presents from a wallet, an authenticator or their corporate sign-in. You see the verified claims and an audit entry.

    • Inside your systems

      Your IAM, IGA or procurement platform raises the request, receives the signed result by webhook and writes verified attributes back. The step completes itself.

    No account needed to verify a badge. No fee, ever, to verify anything.

    Your systems ask. QuartzPass answers. Revocation reaches everywhere.

    People

    1. 1Your IAM/IGA onboards an external user and raises a verification request
    2. 2The person presents the credential their employer issued
    3. 3Verified attributes are written back (SCIM); the signed result arrives by webhook
    4. 4Access and role are granted — and withdrawn everywhere the moment the employer revokes

    Organizations

    1. 1Your procurement or vendor system calls the API before a step completes
    2. 2QuartzPass confirms the supplier’s badge against the authority’s list
    3. 3The step closes with the verification recorded
    4. 4Your system subscribes to revocation events for that supplier

    Revocation reaches every connected system

    • QuartzID· native
    • Microsoft Entra ID
    • Okta
    • SailPoint
    • Saviynt
    • Ping
    • Procurement and vendor platforms via API

    Protocols: SCIM · SAML · OIDC · REST · webhooks

    QuartzPass issues and verifies. Your identity platform decides what it unlocks.

    Built for institutions

    W3C Verifiable Credentials on did:web identities

    OpenID for Verifiable Credentials (OID4VCI / OID4VP) and SD-JWT

    ISO/IEC 18013 mdoc in development

    SOC 2 Type II audited · ISO/IEC 27001

    Data residency in Canada, the United States or the European Union

    Bilingual, English and French, console and public pages

    SSO with your identity provider; full audit trail with source provenance for every event

    No citizen database: credentials carry organizational claims and the attributes the holder chooses to share

    Free to join. Pay only when you accredit or issue at scale.

    • Hold & verifyFree forever, by invitation
    • Issue$15/mo 90 days free
    • Accredit$4,500/yr 90 days free
    See pricing

    Have a member directory, a registry or an approved-supplier list?

    1. Your directory or registry
    2. A trust list
    3. Badges on every member’s site

    Publish it as a trust list. Every organization on it gets a free space and its badge the same day, and anyone who follows your list trusts all of them at once. Associations, chambers of commerce, professional orders, certification programs and public registries start free.

    Publish a list

    Start issuing in an afternoon. Verifying is already free.

    Connect a source, write one rule, publish. Ninety days free from your first billable credential; Founding Members keep 50% off for life.

    Security and compliance

    • SOC 2 Type IIAudited by Sensiba LLP.
    • ISO/IEC 27001Certified by Sensiba LLP, an ANAB-accredited certification body.
    • GDPRCompliant with the EU General Data Protection Regulation.
    • PIPEDAReady for Canada's Personal Information Protection and Electronic Documents Act.

    Reports available upon request