Affinidi

Vendor Brief — Verifiable Credentials & Consent Management Platform

Executive Summary

Affinidi Pte is a Singapore-based digital identity technology company with CEO Glenn Gore at the helm and backed by Temasek, focused on decentralised identity and trusted data exchange. Built on self-sovereign identity principles and global open standards, Affinidi enables individuals to securely manage, share and verify verifiable credentials through digital wallets. Beyond credential portability, Affinidi delivers Verifiable Trust Infrastructure (VTI) and Verifiable Trust Containers (VTC)—enabling the orchestration, packaging, and exchange of trusted data, credentials, and policies across organisational boundaries. This allows governments and enterprises to move from one-time verification to continuous, reusable, and policy-driven trust, supporting seamless onboarding, workforce mobility, and cross-agency collaboration while reducing verification costs and strengthening privacy and security. See https://www.affinidi.com

Founded 2020
Headquarters Singapore
CEO Glenn Gore
Backing Temasek Holdings
Core Standard W3C Verifiable Credentials
Region Focus Asia Pacific

Leadership

Glenn Gore
GG

Glenn Gore — Chief Executive Officer

Glenn Gore brings over two decades of enterprise technology leadership to Affinidi. As the former Chief Technology Officer for Amazon Web Services (AWS) in Asia Pacific, Glenn led AWS's technical strategy across the region — overseeing cloud architecture, enterprise adoption, and emerging technology programmes.

At Affinidi, Glenn is driving the vision of a "Holistic Identity" — a future where individuals own, control, and benefit from their personal data, rather than corporations. His enterprise background gives Affinidi credibility with large financial institutions and government agencies considering identity infrastructure at scale.

Former AWS APAC CTO Enterprise Architecture Cloud Infrastructure Digital Identity

Product Suite

Affinidi offers a comprehensive suite of developer tools and enterprise products built on open identity standards.

Affinidi Login

Passwordless, privacy-preserving authentication using Verifiable Credentials. Replaces traditional username/password flows with cryptographically verified identity.

OpenID Connect Passwordless

Affinidi Vault

A personal data vault giving users sovereign control over their identity data. Users decide what to share, with whom, and for how long.

Data Sovereignty User-Controlled

Consent Manager

Granular consent management enabling organisations to request, record, and honour user consent in compliance with global privacy regulations.

GDPR CDR Aligned

Developer Portal

Full SDK and API suite enabling rapid integration of Verifiable Credentials into existing applications — with sandbox environments for testing.

REST API SDK

Credential Issuance

Enterprise-grade tooling for organisations to issue W3C-compliant Verifiable Credentials — from KYC verification to professional qualifications.

W3C VC Enterprise

Credential Verification

Real-time verification of Verifiable Credentials — checking cryptographic signatures and revocation status without contacting the original issuer.

Decentralised Real-Time

Verifiable Trust Infrastructure — Recent Advancements

Affinidi is building its trust stack in the open as a Linux Foundation Decentralised Trust lab. The Verifiable Trust Infrastructure (VTI) and the Affinidi Trust Development Kit (TDK) are Apache-2.0 licensed and developed in public, giving the PoC a transparent, standards-first foundation rather than a proprietary black box. The highlights below summarise progress from recent OpenVTC build reports.

VTI — Trust Infrastructure

The open backbone that lets organisations hold their own identity keys and run self-governing communities — now with a full wallet (issue, store, present), audit trail over every sensitive action, and consent gates on inbound messaging.

Open Source LF Decentralised Trust

VTC — Trust Communities

Members-only groups where each member carries a tamper-proof membership credential. The invite → hold → present → join loop now runs end-to-end with single-use challenges, revocation checks, and a point-and-click rules pipeline — a direct analogue to cross-agency onboarding.

BBS Selective Disclosure Replay-Safe

VTA — Trust Agents

First-person identity agents — a browser plug-in and a native iOS agent for authentication and credential management — backed by multi-device support, passkeys, and step-up approval for risky actions.

Passkeys Multi-Device

Affinidi TDK (Rust)

A layered Rust workspace covering crypto, DID resolution (250k+ resolutions/sec cached), credentials, OID4VC protocols, and DIDComm v2 messaging — the developer kit that integration teams build against.

Apache-2.0 OID4VCI / OID4VP

Standards Conformance

A perfect 63/63 pass on the W3C Verifiable Credentials conformance suite, plus support for multiple credential formats — SD-JWT VC and ISO/IEC 18013-5 mobile documents (mDoc) — alongside the W3C VC Data Model 1.1 and 2.0.

W3C VC 1.1 / 2.0 SD-JWT VC · mDoc

Interoperable Trust Fabric

Portable did:webvh identifiers, sender-authenticated DIDComm and Trust Spanning Protocol (TSP) messaging, Trust Registry integration, and EU Trusted List support (ETSI TS 119 612) — keeping the stack interoperable across jurisdictions.

did:webvh · DIDComm Trust Registries

Source: open repositories under github.com/OpenVTC and the Affinidi TDK, with progress tracked in the public OpenVTC weekly build reports.

Relevance to This PoC

Affinidi's platform maps directly to the key requirements identified in this proof of concept.

Verifiable Credential Issuance

Affinidi's credential issuance tooling supports the identity setup stage — enabling accredited issuers to issue W3C-compliant credentials to user wallets.

Consent Management

The Consent Manager product directly integrates with OptLock and the HR based PoC's consent request and management requirements — offering the user a granular, auditable consent record.

Selective Disclosure

Affinidi supports selective disclosure of credential attributes — ensuring only the minimum necessary data is shared with relying parties.

APAC Regulatory Awareness

With Temasek backing and Singapore headquarters, Affinidi has strong awareness of Asia Pacific regulatory environments including Australia's Digital Identity Act 2024.

Enterprise Scalability

Glenn Gore's AWS background ensures the platform is architected for enterprise scale — critical for deployment across large financial institutions.

⚠️

Consideration: Data Residency

As a Singapore-headquartered company, data residency and sovereignty requirements for Australian deployments will need to be confirmed and contractually addressed.

Compare With Inrupt

Collaboration is key
See how ID Exchange has assembled world leading technology stacks to present an advanced and seamless PoC approach for the Department of Finance HR Onboarding solution.