A shop can confirm you are old enough without ever seeing your passport. The thinking dates from 1991. Concordium put it in an app you already carry, and a wave of new age-check laws arrived to meet it.
Two pieces ago a shopping basket froze on a case of wine because the agent filling it could not tell the shop one thing it needed to know. The last piece let the order complete and followed the five cents it cost, taking one thing on trust: the shop confirmed the buyer was old enough without anyone showing it a passport.
Regulators require that check, and the UK's Online Safety Act backs it with fines of up to 10% of a company's worldwide revenue, or £18 million if that is more, enforced by Ofcom. But every platform that checks a document becomes a platform that stores one, and stored documents get breached. Done the old way, the check builds the thing you can later get sued over, and an agent can only inherit accountability from an account that had some to begin with.
Take the agent out and stand there yourself: the shop has one question for you, whether you are old enough, and it can sell you the wine without knowing anything else. You answered that question once already, months ago, and not to the shop. You verified your identity once with an identity provider, with a passport and a liveness check. What you keep is a credential that answers specific questions, such as whether you are over eighteen, live in this country, or hold a particular nationality.
How a Proof Says Yes and Nothing Else
The thing doing the work is a zero-knowledge proof: it convinces someone a statement is true while telling them nothing beyond that.
Underneath is a commitment, best pictured as a sealed envelope. When your identity was verified, your date of birth went into the envelope and the envelope went on the chain. Nobody can change what is inside, and nobody but you can open it. What you can do is prove an answer is consistent with the sealed value without the envelope ever being opened. That is Pedersen's commitment scheme, presented in 1991.
The questions come in two shapes, a comparison (is the sealed date more than eighteen years ago) or a membership (is the sealed country one of these twenty-seven), and neither returns a value. Both return a yes, and nobody can work backwards from a yes to the thing that produced it. The shop learns you are over eighteen. It does not learn your birthday, how far over you are, or which document said so.
What a proof cannot do is prove the sealed value was ever true. If a false date of birth goes into the envelope, the maths will confirm you are over eighteen for the rest of your life. A proof is exactly as trustworthy as whoever filled the envelope.
Plenty of systems use zero-knowledge proofs. What differs is who you trust to fill the envelope, and each choice gives something up.
| Question | Anonymous ZK identity | Platform-held identity | ConcordiumProvider-attested |
|---|---|---|---|
| Who fills the envelope | The user, or an unregulated issuer | The platform running the check | A regulated, independent identity provider |
| Who can ever see the document | Nobody, so there is no recourse either | The platform, and anyone who breaches it | The provider that checked it, and nobody else |
| Can a court unwind it | No, by design | Yes, by whoever holds the database | Only by court order, two of three Privacy Guardians and the provider |
| Where the credential lives | In a wallet you had to enrol | In the platform's account system | In every account; none exists without one |
| Proof system | Varies, often SNARKs with a trusted setup | None needed, the platform holds the record | Sigma protocols and Bulletproofs, no trusted setup |
| Since | Varies | Always | June 2021 |
The People Who Put the Value in the Envelope
Three companies do the checking, and Concordium is not one of them. Notabene, Digital Trust Solutions and Global FinReg are independent businesses, each operating under an established regulatory framework, that look at your document, satisfy themselves it is yours, and seal the result.
They agree to this because they already run the check. They run identity checks all day for banks and brokers, and every check is thrown away once it has served its purpose. Sealing the outcome so it can be reused without being copied gives a cost they already carry a second life. Between them they cover individuals and businesses worldwide.
Concordium does not do this itself because it would destroy the thing being sold. A chain that both issued the credentials and recorded the transactions would hold both halves of the link, and every claim about nobody connecting you to your activity would collapse into a promise not to look. The separation is the product.
After the Check, Nobody Sees Your Passport
Once the provider has sealed the result, neither the shop nor Concordium ever sees the document; the one copy sits with the provider. Nobody holds enough on their own to connect you to your account, because the knowledge is split deliberately. Putting a name to one takes court orders in two jurisdictions, agreement from two of the three Privacy Guardians (independent law firms, each holding one piece of the key), and finally the provider that checked your passport. Three parties, in that order, and no shortcut.
That answers the first piece's objection that a trust layer owned by one company makes every agent a tenant: Concordium facilitates the check, and cannot unwind it, any more than the shop can. An agent acting for you inherits exactly this credential, and exactly these limits. The link between name and account is reachable through due process and through nothing else.
Built in 2021, Needed in 2025
The rule under all of this is simple: no verified identity, no account. It has been true since mainnet went live on 9 June 2021, years before any law asked for it, and for most of that time it was a property of the chain that nobody outside the chain needed.
What those years bought was a chain worth building on. Across four protocol upgrades in under two and a half years, including a new consensus, ConcordiumBFT, the team made it cheaper for the apps built on it, safer to upgrade and simpler to run, so that when a market finally asked for the check, the chain underneath was ready. None of it was visible to a shop or a shopper.
Global FinReg, on the bench since August 2024, is also why a verified party can be a company: it currently verifies the company behind a Concordium account against its Legal Entity Identifier. A company has no hands. It acts through the people it employs, and it is about to act through the agents it deploys.
And Then a Market Showed Up
What age assurance laws demand is close to an exact description of what had sat unused on the chain since 2021, and 2025 is the year they sent people to it: the UK rules above came into force, the EU's Digital Services Act pushed the same way, and in the US, where some two dozen states had passed their own, the Supreme Court upheld Texas's age-check law that June.
In June 2025 Concordium put a zero-knowledge proof of age on the market, sold today as Verify and Access, with geofencing alongside it, and in August the Concordium ID app shipped with Coin98 integrated from day one, putting a verified account in front of millions of users; the age check itself was the stated next step. Back at the basket, that is the whole interaction: your phone asks whether you are happy to prove you are over eighteen, you tap yes, and the shop has its answer.
What You Can Check
You can check that a verified person or business stands behind an account, and the one attribute they chose to prove. You cannot see their other activity or their document, and nothing in the proof lets you recognise them somewhere else.
Where the CCD Sits
Verifying the proof is free. The transaction that carries it costs a euro cent, priced in euro-referenced terms rather than by auction, so a business onboarding tens of thousands of customers can price it in advance. Where that cent goes, and who holds the token so the customer does not have to, is the previous piece.
What Still Takes Two Steps
The shop has its answer and never saw the passport. What it cannot yet do is both at once: proving and paying are separate actions on separate screens, and every seam between them is somewhere a customer walks away. Closing that gap is the next piece, and it is where this credential stops being only a person's and becomes something an agent can inherit, carrying the Verified by Concordium badge on its owner's behalf.
Frequently Asked Questions
Does Concordium see my passport?
No. Your document is checked once by an independent identity provider operating under a regulatory framework, which keeps the record. Concordium's chain holds a sealed commitment to the result, not the document, and cannot open it.
What does a business learn when I prove my age with Concordium ID?
One answer to one question: yes, this person is over eighteen. It learns nothing about your date of birth or which document was used, and nothing in the proof lets a second business recognise you as the same person.
Can my identity ever be linked to my account?
Only through due process. Court orders go to independent Privacy Guardians, two of three must agree before the identifier can be rebuilt, and only the provider that checked your document can match it to a name.
How can you verify age without uploading ID?
You upload it once, to an independent identity provider, not to the site. The provider checks the document and seals the result to your Concordium account. From then on a site asks one question, whether you are over eighteen, and gets a yes or no from a proof; the document never travels again.