ID Exchange Logo

ID Exchange

VENDOR CASE STUDY

Strengths

  1. Users (or parents, in the case of minors) retain encrypted control over both identity and consent data. Age-related actions generate consent receipts stored locally, not centrally—aligning with AATT’s emphasis on minimal privacy impact and secure practices.

  2. The “Under 16 – Opt Out” workflow includes parental authority verified through liveness checks and identity confirmation, ensuring legitimate consent and reducing misuse. That aligns with AATT’s need for robust, honest age assurance capabilities.

  3. Their wallet-based system can integrate into various services. Storing consent and opt-out actions in encrypted form, plus supporting regulatory compliance (e.g., Australian privacy laws), aligns with AATT’s principle of flexible and scalable technology adoption.

  4. Consent and age-request actions are auditable via digital receipts stored in the individual’s wallet. This generates accountability—a key in AATT frameworks which favour clear, accountable records even as data exposure is minimised.

Summary of Results

A use-case example they highlight is “Under 16 – Opt Out” where parents or guardians can, with verified identity and liveness checks, request deletion or de-identification of a child’s online account. These requests are stored as digital consent receipts within the user’s encrypted wallet—ensuring control, traceability and compliance with privacy regulations (e.g., under Australian legislation).

Privacy Policy

In addition to the structured Practice Statements, the Trial also reviewed publicly available Privacy Policies for all participating providers. This formed a key part of the Trial’s ethical due diligence and helped assess how well declared practices aligned with actual documentation and observed system behaviour.

Practice Statement

Practice Statements are formal documents submitted by participating providers, outlining how their systems function and how they claim to meet specific expectations under international and domestic standards. They offer providers an opportunity to articulate their system’s design in their own words — similar to a ‘statement of practice’ or ‘system disclosure’ used in certification and compliance contexts.

Interview

As part of the Trial’s commitment to transparency and accuracy, the team prepared a written summary of each vendor interview, capturing key points regarding system design, functionality and implementation claims. These summaries were shared with participants for review, allowing them to check, verify and suggest corrections where necessary.

Test Report

Individual Vendor Test Reports were developed for each participating provider. These reports formally document the results of the functional, usability and security evaluations carried out during the Trial and are intended to support public understanding, regulatory scrutiny and future conformity assessment or certification processes.
Funded by
Project by
SUBSCRIBE TO GET UPDATES
We will publish regular newsletters with updates on our progress, and links to published documentation.
© 2026
 Age Assurance Technology Trial
Created with Heartburst