Apply to the registry
Submission Guide
The Data Trust Registry is preparing to take applications for services to be reviewed and included
in the registry. We’re collaborating with DTI partners specifically
on data transfers in the consumer areas of AI conversation, music playlists, and photos and photo
albums.
Trusting both parties to share a user’s data should require evidence that a user’s privacy is protected by
policy and technical measures, and that user safety is protected by limits on harmful content. Evidence
can be provided by documentation, statements, credentials or other means. The required level of evidence
depends on what kind of data transfers your service is offering to be involved in (e.g. access to photos
requires a higher level of trust proof than sending of playlist data). An application may involve
providing SOC2 audits or ISO27001 Reports (which will be kept confidential – see our own
Terms of Use and Privacy Policy),
business registration information, privacy policies, or registration with other entities such as
national Data Protection agencies.
If your company has a service that can be a sender or receiver of these kinds of data transfers,
please select the trust level that suits your current business needs to get started.
Note
Registry Entry levels can change as your business needs evolve.
PRIVATE
- Develop your service with the ability to test that transfer with other verified participants
without the "public" announcements of joining the registry
- Gain time to develop assets supporting a more robust application
- Agree to the Data Trust Registry Terms and Condition
TRUSTED
- Provide LEI, DUNS number or other organizational identity
- Establish country of Jurisdiction
- Attest to Data Security Practices and End User Authentication
TRUSTED
- Includes all prior requirements
- Evidence of regular data security audits (ie SOC2, Level II)
- Demonstrated a history of Protective Practices and Compliance in the company's Jurisdiction(s)
- Establishes consumer-friendly practices such as transparency, acquiring consent,
and holding vendors/partners to a high trust standard