Submission Guide

The Data Trust Registry is preparing to take applications for services to be reviewed and included in the registry. We’re collaborating with DTI partners specifically on data transfers in the consumer areas of AI conversation, music playlists, and photos and photo albums.

Trusting both parties to share a user’s data should require evidence that a user’s privacy is protected by policy and technical measures, and that user safety is protected by limits on harmful content. Evidence can be provided by documentation, statements, credentials or other means. The required level of evidence depends on what kind of data transfers your service is offering to be involved in (e.g. access to photos requires a higher level of trust proof than sending of playlist data). An application may involve providing SOC2 audits or ISO27001 Reports (which will be kept confidential – see our own Terms and Conditions and Privacy Policy), business registration information, privacy policies, or registration with other entities such as national Data Protection agencies.

If your company has a service that can be a sender or receiver of these kinds of data transfers, we will shortly be able to take your application via our information forms and documentation upload pages, with the ability to track application status and view completed applications. In the meantime, we can start the process manually. To get started or ask questions about this process, please contact applications@TBD.EXAMPLE.org and our reviewers will get back to you.

Documentations

Right to Data Portability

User Data Portability Threat Model

DTI Data Portability Compendium