Become an iSHARE Qualified Issuer

What to have at hand

The application takes about fifteen minutes of form filling and a few sessions for the questions. You will go faster with these ready:

• Your organisation's register number: Chamber of Commerce (KvK), LEI, VAT or EORI number.
• The person who signs for your organisation, and their proof of authority if they are not in the register.
• Which credentials you will issue: Participant Credentials, Data Rights Credentials or Identity Credentials, and which iSHARE versions you support.
• Certificates you already hold: ISO/IEC 27001, an eIDAS qualified status or a GLEIF Qualified vLEI Issuer qualification. These pre-fill questions.
• Your issuing software, ready to run against the Conformance Test Tool.

Six steps, one at a time

You fill in one dossier, step by step. You can stop after any step and continue later; everything is saved. The iSHARE team reviews the dossier in the same portal, asks its questions there and decides there.

1. Tell us who you are

   Enter your legal name, your register number (KvK, LEI, VAT or EORI) and the person who signs for you.

   Takes5 minutesYou getYour organisation is verified against the register

2. Choose what you will issue

   Tick the credentials you want to issue and the iSHARE versions you support. This decides which questions apply to you.

   Takes2 minutesYou getThe list of questions that apply to you

3. Use what you already have

   Tell us if you hold ISO/IEC 27001, an eIDAS qualified status or a GLEIF QVI qualification. Questions already covered are pre-filled; you only confirm.

   Takes2 minutesYou getFewer questions to answer

4. Answer the questions

   One question at a time, with the same explanation and examples as the framework document. Answer each one and attach the document that shows it.

   TakesA few sessionsYou getA complete dossier

5. Pass the conformance test

   Run the test suite for your role and version in the Conformance Test Tool and paste the test run id into your dossier.

   TakesDepends on your softwareYou getA green check per version and access to the reference code

6. Check and submit

   See what is still open, sign the declaration and submit.

   Takes5 minutesYou getYour dossier is with iSHARE

After you submit

1. Within 5 working days iSHARE confirms that your dossier is complete or lists what is missing, in your dossier.
2. Within 30 days of a complete dossier iSHARE decides and tells you your assurance level. If something small is missing you get one free re-assessment.
3. You sign the Accession Agreement and pay the one-time accreditation fee. Both happen in the portal.
4. Within 2 working days of payment your public key and issuer details are on the Trusted Issuers Registry. You can start issuing.

After that

• Once a year you confirm what changed and refresh expired documents.
• You manage your own public profile, team and keys in the same portal.
• If you want to stop, you give 6 months notice and your customers get 90 days to move.

The questions

The questions are the 36 questions of the iSHARE Assessment Framework for Certified Parties, plus up to 14 questions on how you issue credentials: keys, status lists, schemas and the conformance test run. Data Rights Credential issuers are also asked how they verify that the Data Rightsholder actually holds the rights to the data before issuing.

Which questions apply depends on what you issue (step 2). Each question has one answer, Yes/No or Low/Substantial/High, and at least one attached document.

One-time accreditation, annual membership by size