Built for Pan Canada + EU interoperability

The Identity Port

Not another digital ID. The portability rails beneath all of them.

1ID is the neutral Identity OS that routes verified credentials between issuers, counters and borders. Interoperable, embeddable, tokenizable, immutable, tamperproof, roamable, monetizable and cross border agnostic, without a single byte of PII on the wire.

Interoperable
Portable
Embeddable
Tokenizable
Immutable
Tamperproof
Roamable
Monetizable
Cross border agnostic

Run the live handoff demo Read the Canada Post brief

1ID

The Identity Port

LIVE

Universal credential

CA · EU CITIZEN

IAL3 VERIFIEDPCTFeIDAS 2.0ZERO KNOWLEDGE

Issued on the 1ID rails

6,198
physical counters anchored: 0bytes
PII carried in a handoff: 120s
single use code TTL: 2frameworks
PCTF + eIDAS 2.0

The Bottleneck

Building another digital ID is easy. Making it portable is the actual challenge.

Canada’s digital identity ecosystem is fragmented into walled gardens. Verify once at an institution and that verified data cannot flow anywhere else without point to point API integrations, or forcing the citizen to repeat KYC, again.

Today: Walled Gardens

Canada Post Identity+

siloed app wallet

Provincial registries

province locked

Banks & credit unions

KYC repeated per institution

EU EUDI wallets

incompatible profile

Point to point integrations. N×N problem.

With 1ID: The Port

One port. Every counter.

Aggregated, never scraped
proofs orchestrated across ecosystems
One consent surface
expiring, revocable, granular
Progressive assurance
step up only when a service demands it
Zero PII handoffs
answers cross the counter, not documents

The Identity OS

One neutral layer between every issuer and every verifier.

1ID hoards no identity documents. It routes them.

Issuers

Canada Post Identity+

Provincial registries

Banks & CRA

EU EUDI wallets

The rails

1ID Trust Fabric

Consent engine
ZK proof service
Handoff routing
Credential tokenization
Settlement & metering

Verifiers

Banks

Retail counters

Border kiosks

Employers

Verifiers integrate once with the rails, not N times with every issuer. Issuers reach every verifier without building a single portal.

The Node Mesh

What does making every 1ID user a node offer?

It turns identity infrastructure from a place you visit into a network you carry. Every 1ID wallet is a self sovereign node that holds verified credentials, signs proofs on device and relays trust to any counter, kiosk or border on the rails. The mesh is live on this page: issue a roaming passport further down and watch the ledger seal it.

Trust Fabric

Counter · Toronto

Kiosk · Amsterdam

Border · Rotterdam

Post · Vancouver

Trust that travels with you

Your verified identity lives in your node, not in a silo. Roaming passports carry it from a counter in Toronto to a kiosk in Amsterdam, sealed, expiring and single use.

A network that compounds

Every new citizen adds routing capacity instead of load. The mesh grows stronger, faster and more useful with each node that joins the rails.

Nothing worth breaching

There is no central vault of identity documents to steal. Proofs are computed on the device and only answers ever cross the wire.

Reach without branches

Every phone, counter and kiosk becomes service infrastructure. Institutions reach citizens everywhere without building a single portal.

Uptime by design

Handoffs relay across peer nodes, so consent and proofs keep flowing even when one hub or counter is offline.

Value that flows back

Nodes earn rail fees for anchoring, relaying and verifying proofs. On the TWØ47 money layer, remittances settle in minutes and the nodes that carried them share the fees.

What every node does

Hold

Credentials live encrypted in your node, never in a silo. You carry the vault.

Prove

Zero knowledge answers computed on device. No name, no number, no PII on the wire.

Relay

Handoffs hop peer to peer across the mesh until the counter accepts them, then the ledger seals the hop.

Earn

Rail fees flow back to the nodes that anchor, relay and verify. Your identity works, and so do you.

Every wallet

a self sovereign node

Every counter

a port of entry on the mesh

Every proof

relayed, never stored

Every hop

sealed into the ledger

Product Showcase

One identity. Three surfaces.

Screenshots from the 1ID product family: the installable wallet PWA every citizen carries, the personal dashboard for grants and roaming, and the rail console operators run on. The live demo further below runs the exact same rails.

9:41

1ID Wallet

Portable identity

Ava Tremblay

IAL3

Pan Canada + EU roaming

Device node · relaying0 PII

Connected credentials

Canada Post Identity+

Document scan · vouched in person

IAL3

CRA

Tax residency · Canada

IAL2

Telus Mobile

SIM match · age band

IAL2

Generate handoff code

120 s TTL · single use · zero PII

1ID Wallet PWA

Installable on iOS, Android and desktop. Available for download below.

app.1id.ca/dashboard

Welcome back

Ava Tremblay

IAL3 assuranceEU corridor active

Assurance

Highest level, vouched in person

Node status

Relaying proofs

This device anchors consent

PII exposed

0 bytes

Across every handoff, ever

Connected accounts

Canada Post Identity+IAL3

CRAIAL2

Ontario Ministry of TransportIAL2

Telus MobileIAL2

Active grants

RBC Onboarding Kiosk

age over 18 · zk · expires in 6 days

EU Border Desk · NL

residency · zk · expires in 6 days

Provincial Registry

licence class · direct · expires in 6 days

User dashboard

Assurance at a glance, connected accounts, active grants and the citizen node, relaying proofs from the device itself.

admin.1id.ca/console

1ID Rail Console

Operator view · SUREBANQA

Sandbox test gatewayProduction ready

1,284

Handoffs today

3,912

Proofs delivered

PII bytes on wire

6,198

Counters online

Intact

Chain

Counter network

TorontoVancouverAmsterdamRotterdam

Corridor traffic flows through the hub, proofs never rest anywhere.

Ledger stream · newest first

#8CREDENTIAL_EXPIRED8bb22e44

#7CONSENT_GRANTEDddbc4beb

#6HANDOFF_CREATED7f553001

#5CREDENTIAL_ISSUED2ac5f8e7

sha256 chained · tamper evident · verify any time

Admin rail console

Operators see handoff volume, proof counts, counter network health and the live ledger stream, with the Canada Post gateway environment one glance away.

360° Strategic Analysis

Identity Provider vs. Identity OS.

Canada Post Identity+ is an excellent node in the network. 1ID connects the nodes. The two are not competitors, they are stack layers.

Dimension	Canada Post Identity+ & traditional wallets	1ID Architecture
Portability mechanism	Relies on standard OIDC/SAML integrations. A relying party must specifically integrate with Canada Post’s API to accept the ID.	Universal Handoff. A short lived code bridges any counter, kiosk or verifier that speaks the Pan Canadian presentation profile, not rigid point to point APIs.
Data flow	Data remains locked within the wallet ecosystem until explicitly requested by an integrated partner.	Aggregated, never scraped. Citizens orchestrate verifiable proofs across ecosystems, highly portable without losing security.
Verification depth	Binary (Verified / Not Verified) based on the initial document scan.	Progressive verification. Low barrier to entry; assurance steps up only when a service demands it.
Consent model	Location and contact data linked to the identity profile on issuer servers.	Zero knowledge transmission. Expiring, revocable, granular consent per handoff.
Network position	One node, an excellent one.	The routing layer that makes every node valuable.

Universal Handoff

Six digits. Zero PII. 120 seconds.

The code is a pointer, not a payload. It carries no personal information, only a standing request the citizen must explicitly approve.

Universal Handoff Code

4 8 3 9 2 0

Expires in 120 s · single use

6 digits
human speakable across any counter
120 s TTL
expires whether used or not
Single use
consumed on first presentation
Pointer only
binds verifier + purpose, carries no PII

Embeddable by design

Any counter, kiosk, POS or web funnel speaks the rails with one snippet. The verifier never stores identity data, only proofs.

<script src="https://rail.1id.ca/embed.js"
  data-1id-verifier="rbc-onboarding"
  data-1id-claims="age_over_18:zk,residency:zk"
  data-1id-handoff="counter"></script>

Works in any iframe
Kiosk ready
PWA wallet

The verifier never touches a document: it receives an answer, signed and sealed.

Immutable · tamperproof

Every consent seals the chain.

Enrollments, issuances, handoffs, consents, denials, expiries and revocations are appended to a sha256 hash chain. Mutation of a single character breaks the chain, visibly.

Unverified

#	Event	Actor	Summary	Hash	Sealed
Sealing…

Cross Border Agnostic

A credential verified in Toronto presents in Amsterdam.

1ID is corridor agnostic: alignment with the Pan Canadian Trust Framework at home and eIDAS 2.0 abroad. Proofs cross borders. Data does not.

Canada

Pan Canadian Trust Framework

DIACC PCTF aligned assurance levels
Canada Post as physical trust anchor, 6,198 counters
Pan Canadian presentation profile
French & English consent surfaces

European Union

eIDAS 2.0

EUDI wallet mutual recognition
LoA mapping: substantial ≈ IAL2, high ≈ IAL3
PVID cross recognition
GDPR aligned, data minimized proofs

Assurance mapping

PCTF assurance	eIDAS LoA	Presentation profile
IAL2	Substantial	PCTF ZK capable profile
IAL3	High	PCTF + EUDI PVID bridge

Zero PII handoff means border kiosks receive answers, not documents. Nothing is stored at the counter.

Watch roaming work live

Capability 07 · Roaming, Production Ready

A passport that crosses borders at the speed of a handshake.

This panel runs on the live API, not a mock. Issue a roaming passport, present it at a counter in the other corridor, watch the TTL burn down and the audit trail seal itself. Revocation is honored everywhere, instantly.

What production means here

HMAC sealed payloads: every read recomputes the seal, any mutation is detected instantly
TTL bound nonces: each passport lives 8 minutes and is single use
Ledger sealed: issue, verify and revoke moments land on the consent ledger
Zero PII: a derived passport reference travels, never a document
Hardened endpoints: rate limits, strict validation and defensive errors
Global revocation: honored in every corridor the moment it happens

Zero PII by construction

The passport reference is a one way hash of a nonce and a server secret. It proves the passport is real, it can never be reversed into a person, and it expires.

Roaming passport console

Live API

Home corridorVisiting corridor

European Union · automatic

Purpose of the visit

roaming passports issued

verified at foreign counters

average time to verify

moments sealed on the ledger

Trust Anchor Integration

Canada Post is wired into the rails.

The physical trust anchor now runs on live credentials. Test and production applications connect 1ID to the Canada Post REST gateway, so every IAL3 vouching can be routed to a real counter near the citizen.

Credential vault

server side only

Two application credential pairs issued by the Canada Post developer program. Keys are masked in the browser and never leave the server unmasked.

Reading the vault...

Secrets live in server environment storage. The browser receives masked values and nothing else, not even on error.

Gateway health

Probe the Canada Post REST gateway with the stored credentials. The test sends one lightweight request and reports exactly what the gateway said back.

6,198

counters

environments

secrets in browser

Counter locator

The physical trust anchor, live. Enter a postal code to pull real Canada Post counters from the Find a Post Office service. These are the desks where a citizen completes in person IAL3 vouching before the rails carry their proofs anywhere.

Postal code

Show up to

API surface on this gateway

soa-gw.canadapost.ca

The stored credentials open the full Canada Post REST family, not just the counter lookup. The surface below is cross checked against the independent API Evangelist profile of the Canada Post developer platform.

Find a Post Officewired live above
Ratingsame credentials
Trackingsame credentials
AddressCompleteaddress validation
Pickupcounter logistics

Canada Post developer portal Independent surface map by API Evangelist

Monetizable Rails

Every handoff meters. Every step up settles.

The rails monetize usage, not identity data. Verifiers pay per proof; issuers earn on issuance; 1ID keeps the fabric running.

Rail fee

$0.03/ handoff

Metered per completed Universal Handoff, settled instantly.

Issuance & step up

$0.25/ credential

Issuers share revenue on every verified issuance.

Verifier subscription

$499/ month

Embeddable widget, priority routing, SLA backed corridors.

Tokenization settlement

0.4 bps/ circulation

On tokenized credential circulation across ecosystems.

Revenue Calculator

Monthly handoffs250,000

Connected verifiers60

Issuers on rails8

Projected annual rail revenue

$609.3K CAD

Illustrative only. Corridor pilot pricing may vary.

Game Changing Purposes

What other game changing purposes can 1ID serve?

The Universal Handoff is a generic trust primitive. Anchor it once, in person, at a counter, and it compounds across every industry that runs on trust. Launch any purpose straight into the live demo, the rails keep count.

Pan Canada

Banking the unbanked

One in person vouching at a post counter becomes a reusable KYC anchor. Newcomers, students and rural Canadians open accounts without repeating the paperwork.

· handoffs

Corridor

Remittances in minutes

Pre verified senders and receivers let MSBs move diaspora money across the corridor with compliance built into the rails, not bolted on.

· handoffs

Corridor

Prescriptions that travel

Patient identity and medication proofs roam between provinces and EU member states, extending the vaccine certificate precedent to whole health records.

· handoffs

Pan Canada

Age gates without oversharing

Prove over 18 for cannabis, alcohol or gaming with a zero knowledge answer. No name, no birthdate, no photo ever leaves the phone.

· handoffs

Corridor

Right to work in a tap

Gig platforms, staffing agencies and nomad employers verify work authorization instantly for workers already anchored on the rails.

· handoffs

Diplomas employers can trust

Tamper evident academic credentials verify in seconds and align with Europass and the EU digital credential wallet.

· handoffs

Borderless

Identity that survives displacement

For refugees and displaced people, roaming credentials endure when paper documents do not, so aid reaches people instead of paperwork.

· handoffs

The Frontier

AI agents with accountability

The frontier: prove an AI agent is authorized to act for you through revocable, auditable delegation. 1ID becomes the root of trust for agentic commerce.

· handoffs

1 protocol

carries every purpose above

9 capabilities

from interoperability to monetization

2 continents

Pan Canada and the EU, one fabric

0 PII

on the wire, in every single purpose

TWØ47 · The Money Layer

Verified identity needs rails that can move the money.

These are the platforms TWØ47 puts under the identity layer. Circle and Arc carry value across borders in seconds. Payments.ca carries it across Canada in real time. Together they power the purposes in the gallery above, each one anchored by a 1ID passport.

Circle

developers.circle.com

Stablecoin infrastructure for wallets and payouts

Programmable Wallets: a USDC account for anyone with a phone, no bank account required
Gas Station: fees are sponsored, the user never pays to move their money
Payouts and the Circle Payments Network: local fiat out to banks and mobile wallets worldwide
Transaction Screening: compliance checks woven into every movement

Powers

Banking the unbankedRemittances in minutesIdentity that survives displacementAI agents with accountability

Arc

docs.arc.io

Circle's Layer 1 blockchain, purpose built for stablecoin finance

USDC is the native gas: no second token to buy, hold or explain
Sub second finality: value settles in the time a handshake takes
EVM compatible with institutional validators, built for regulated finance
Opt in privacy: amounts can stay between the parties

Powers

Remittances in minutesInstant payrollMerchant settlement

Payments.ca

developer.payments.ca

Canada's domestic rails, from instant to batch

The Real Time Rail (RTR): instant CAD payments with ISO 20022 messaging
Lynx: the high value settlement backbone for institutions
EFT: batch credits and debits that keep MSB settlement cheap
API products on a developer portal, approved per application

Powers

Remittances in minutesRight to work in a tapBanking the unbanked

Identity in the app, money in three hops.

The remittance use case, end to end: Bridge KYC or KYB once in the PWA, then funding, settlement and payout on a single stack that TWØ47 orchestrates.

Days to seconds

settlement time

A fraction of 1%

vs a global average near 6%

01
Verify
KYC and KYB run inside the PWA through the Bridge API. Done once, for life, before the first dollar moves. No counter needed.
02
Fund
Canadian dollars enter the TWØ47 wallet through the Real Time Rail or EFT. Domestic, instant, regulated.
03
Settle
Value crosses the corridor as USDC on Arc: sub second finality, gas sponsored, screening applied.
04
Payout
The Circle Payments Network pays out local fiat to the receiver. One remittance, no correspondent chain.

Three TWØ47 applications, one credential fabric.

Each application holds its own Consumer Key and Secret. The keys below are masked by the server: the browser never sees a full credential.

Payments Canada portal handshake

The exchange below is real: each test runs the OAuth 2.0 client credentials grant against the access token generation endpoint with the stored Consumer Key and Secret. A pair answers with a token only once it is approved for an API product on the portal. Until then the gateway rejection is shown word for word.

TWØ47 · The Money Ecosystem

Nine products, one money layer, no bank account required.

TWØ47 is the whole stack under the identity layer, built for the unbanked, the underbanked and the underserved. Identity is handled inside the PWA, KYC and KYB through the Bridge API, done once for life. Then verified money moves: a wallet funded over the Real Time Rail, crossing corridors as USDC, paying out to banks, mobile wallets or, with the optional handoff, as physical cash at any Canada Post counter.

The issuance desk

The USDC 125,000 issuance account, monetized five ways.

Issuing your own stablecoin backed by and collateralized in USDB requires an issuance account holding USDC 125,000 or more. The desk holds the account once and monetizes the program for every coin issued on it.

Run a desk year.

Any mix of client coins, reserve, volume and holders, measured against the 5% risk free benchmark on the committed USDC 125,000.

Client coins on the desk

branded coins issued for issuers

Average reserve per coin

USDC backing each coin

Mint + redeem volume / year

combined two sided volume

Active holders

across all client coins

Rewards rate assumption

bps a year, variable, 400 = 4%

Own coin reserve

1ID's own coin, USDC

The orchestrator, running on this page.

Open a transfer and watch the three hops seal one at a time. Choose bank payout through the Circle Payments Network, or cash pickup and a single use voucher for a Canada Post counter.

CorridorYou send CADReceiver namePayout

Enter an amount of 5.00 or more to price the corridor.

Demo runs ride the demo citizen wallet. Every hop is ledger sealed.

Hop monitor

Run a transfer and each hop lands here as it seals: fund, settle, payout.

The Embeddable API.

Money movement is a product surface. Scoped Bearer keys, four endpoints, every call logged and rate limited. Keys are minted in the Developer console, the raw key is shown once, the server stores only its hash.

quotes.readtransfers.writetransfers.readwallets.read

curl -X POST /api/two47/v1/transfers \
  -H "Authorization: Bearer tw047_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "corridor": "CA-IN",
    "amountMinor": 25000,
    "payout": "CPN",
    "receiverName": "Meera Iyer"
  }'

One call, three sealed hops, the response carries the reference and every hop.

The Pitch to Canada Post

From siloed app to national trust anchor.

The narrative is symbiosis, not competition: Canada Post owns something 1ID would never rebuild, and 1ID owns the software rails Canada Post needs to scale beyond its own app.

Canada Post: the physical trust anchor

6,198 counters performing high assurance, in person IAL3 vouching for seniors, newcomers and rural citizens who cannot verify digitally. Unmatched coast to coast reach.

1ID: the digital portability rails

Once verified at the counter or in the app, the credential leaves the silo: PCTF aligned routing across private sector, provincial services and Web3. CP verified becomes universally accepted.

The flip

Identity+ stops being one wallet among many and becomes the foundational trust anchor powering the Canadian digital economy, with 1ID metering every portable proof.

Canada Post keeps

Brand trust
Counter network
IAL3 authority
Regulatory standing

1ID brings

Routing fabric
Zero knowledge consent
Embeddable verifiers
Cross border corridors
Settlement

Next step: a 90 day counter pilot.

12 counters, 3 verifier categories, 1 corridor. Measured against handoff success rate, KYC repetition eliminated and consent events sealed on the ledger.

Back the pilot See the live demo

Get the PWA

Install 1ID. Carry the rails.

The wallet is a progressive web app: no app store gate, no waiting for review. Install it straight from the browser and your device becomes a self sovereign node on the identity port.

Free · under a megabyte · updates silently in place

Offline ready shell
Pan Canada + EU roaming
120 s handoffs from any counter
One install, every screen

iPhone and iPad

1.Open 1ID in Safari
2.Tap the Share button
3.Choose Add to Home Screen

Android

1.Open 1ID in Chrome
2.Tap Install on the banner
3.Or use the menu, then Install app

Desktop

1.Open 1ID in Chrome or Edge
2.Click the install icon in the address bar
3.The wallet opens in its own window

Scan to install

Point your phone camera here, then add 1ID to your home screen.

https://1id.ca

The installable shell serves the same zero PII rails you see on this page.

Not another digital ID. The portability rails beneath all of them.

Building another digital ID is easy. Making it portable is the actual challenge.

Today: Walled Gardens

With 1ID: The Port

One neutral layer between every issuer and every verifier.

1ID Trust Fabric

What does making every 1ID user a node offer?

Trust that travels with you

A network that compounds

Nothing worth breaching

Reach without branches

Uptime by design

Value that flows back

Hold

Prove

Relay

Earn

One identity. Three surfaces.

Identity Provider vs. Identity OS.

The Universal Handoff, end to end.

Six digits. Zero PII. 120 seconds.

Embeddable by design

Every consent seals the chain.

A credential verified in Toronto presents in Amsterdam.

Canada

European Union

A passport that crosses borders at the speed of a handshake.

What production means here

Roaming passport console

Canada Post is wired into the rails.

Credential vault

Gateway health

Counter locator

API surface on this gateway

Every handoff meters. Every step up settles.

Rail fee

Issuance & step up

Verifier subscription

Tokenization settlement

What other game changing purposes can 1ID serve?

Banking the unbanked

Remittances in minutes

Prescriptions that travel

Age gates without oversharing

Right to work in a tap

Diplomas employers can trust

Identity that survives displacement

AI agents with accountability

Verified identity needs rails that can move the money.

Circle

Arc

Payments.ca

Identity in the app, money in three hops.

Three TWØ47 applications, one credential fabric.

Payments Canada portal handshake

Nine products, one money layer, no bank account required.

The USDC 125,000 issuance account, monetized five ways.

The orchestrator, running on this page.

The Embeddable API.

From siloed app to national trust anchor.

Canada Post: the physical trust anchor

1ID: the digital portability rails

The flip

Canada Post keeps

1ID brings

Next step: a 90 day counter pilot.

Install 1ID. Carry the rails.