Marketplace & access
The marketplace is where consumers find products, request access, and get a decision through one governed path. Every entitlement traces to a recorded request, an approval, and a stated purpose. When your second line asks who can see customer data and why, the answer is already on file.
One request path covers every product. The consumer states a purpose, and approval routes to the owner under maker-checker.
Entitlements are enforced where the product is consumed, with scope and expiry attached to the grant.
Every grant, denial, and revocation seals on the hash-chained ledger with who decided and on what grounds.
Purpose and legal basis are captured at grant time, which is where GDPR and data-use reviews start.
Recertification lists derive from live entitlements, so access reviews cover what is actually granted.
Requests touching restricted data pick up the extra approval steps your policy requires, automatically.
Request
A consumer finds the product, states the purpose, and submits through one decision door.
Decide
The owner approves or declines under maker-checker; an agent can propose the decision, and a human makes it.
Enforce
The entitlement takes effect at the point of consumption, carrying its scope and expiry.
Seal
The full trail of request, decision, grant, and revocation lands on the ledger for recertification and exam.
“Who can see this product today, and who approved each of them?”
Every grant seals on the hash-chained ledger with who decided and on what grounds, and recertification lists derive from live entitlements. You answer from the record, with the approver and the rationale already attached.
“What purpose did this team state when they asked for customer data?”
Purpose and legal basis are captured at grant time, so the stated purpose sits on file alongside the request and the approval. That record is where GDPR and data-use reviews start.
“Do our access reviews cover the entitlements that are actually in force?”
Yes. Recertification lists derive from live entitlements, so every review covers what is actually granted, with scope and expiry attached to each grant.
Start with proof, not a promise.
There are three ways in, and each one earns the next. You approve the exit criteria before we spend any more of your time or budget.
A 60-minute working session
Bring one report that is expensive to prove. We walk the mechanism against it. Nothing is required from your side.
A two-week guided sandbox
Your team works hands-on against a synthetic sample bank. It requires zero access to your systems and zero procurement.
A six-week proof on your systems
We use read-only metadata across five systems and one priority report, scored against criteria both sides sign first. The decision it produces is yours.