Proof and Enigma launched Business Certificates, encrypted credentials that connect verified business identities to the people and digital systems authorized to act on their behalf.
Enigma provides known business (KYB) data that is used to verify the identity of a business, verify whether it is active and in good standing, and identify its owners and other key persons. The company says it continually updates these records with government filings, state registries, federal records, sanctions watch lists, and beneficial ownership information.
Proof contributes that identity and authentication infrastructure. It verifies the individuals representing the business and issues business certificates that connect the business, its representatives, and authorized acts. The same model extends to AI agents that operate under authority granted by companies.
Certificates are not only stored as onboarding records, but are associated with specific actions. This can be attached to wire instructions, vendor bank account change requests, contracts, invoices, press releases, management statements, or instructions sent by the AI agent.
The receiving organization can then verify that the action originating from the business was approved by an authenticated representative.
The evidence proves the person’s identity; Enigma connects individuals and businesses
In the process of verifying individuals representing businesses, Proof uses its identity verification and authorization infrastructure. Proof supports NIST Identity Assurance Level 2 (IAL2)-compliant validation that proves an applicant is associated with a real-world identity.
Business representatives will be asked to provide personal information and government-issued identification, such as a driver’s license or passport. Proof analyzes the credentials and asks the person to take a live facial image.
A biometric comparison then verifies whether the person taking the selfie matches the submitted ID photo. According to Proof, the IAL2 process uses credential analysis and real-time biometric selfie checks. If someone cannot be automatically verified, they will be routed to a trusted human judge for live verification.
This process establishes who the individual is. However, that in itself does not prove that the person represents a particular company or has permission to perform the requested action.
After the personal identity of the representative is established through attestation, that person must be linked to relevant business records.
Enigma’s graph models itself in terms of the role that connects people to corporations. These may include governance roles such as owner, founder, and board member, as well as job titles such as chief executive officer, vice president, and manager.
Enigma says governance roles typically come from company registration, while functional roles can come from employee contact data and other records. Therefore, this system helps ensure that the person verified by Proof is listed on your business records.
A person’s relationship with a company does not necessarily establish authority to perform any actions on behalf of that company. For example, a head of communications may be allowed to approve press releases, but not change a supplier’s bank account.
Business certificates provide an additional layer of authorization by indicating that the identified representative is authorized to perform the specific action being presented.
Extend business authorization to AI agents
The same identity and authentication issues become even more complex when the entity performing the action is an AI agent acting on behalf of the enterprise.
AI agents could potentially negotiate with suppliers, submit purchase orders, change account information, and initiate payments without agents controlling each step. The receiving company needs to know who is behind the agent and whether the requested action is within the authority granted to the agent.
Proof’s x401 protocol allows websites and APIs to request and verify identity and authentication credentials during agent interactions.
“Business Certificates give any agency a way to verify not only that a company passed the check months ago, but that the right people are now authorized to act on their behalf, whether it’s the person initiating the communication or the AI agent executing the contract,” said Pat Kinsel, Chief Executive Officer of Proof.
The Proof and Enigma partnership brings together three tiers of trust that were previously often handled separately. That is, proof of the identity of the actor, verification of the business they claim to represent, and proof that the person or digital system has permission to perform the requested action.
Article topics
Biometrics | Digital Corporate ID | Digital ID | Financial Services | KYB | Evidence
