Cross-border trade rests on a simple but unresolved question: how can a buyer, a bank, a customs authority, or an AI agent know that a company on the other side of the world is exactly who it claims to be?
Today, that question is answered by commercial databases holding stale copies, by manual due diligence costing hundreds of dollars and several days, or by PDF reports no machine can mathematically verify. The result is friction, exclusion, and a persistent trust deficit in global commerce.
The UN Global Digital Compact calls for inclusive, open, and trustworthy digital public infrastructure. GCR answers that call. Rather than aggregating or reselling corporate data, GCR operates as a verification layer on top of official corporate registries. When a verification request is made, GCR connects directly to the authoritative government registry, normalizes the response through deterministic code, and returns a cryptographically signed, time-stamped proof — confirming that at a precise moment, the official source attested to a specific corporate status.
Because GCR stores no corporate data, it is compliance by design: no cross-border data transfer liabilities, no data localization conflicts, no deletion requests, no risk of stale or manipulated records. Its outputs follow W3C Verifiable Credentials v2.0 and ISO/IEC 6523, making them machine-readable for ERPs, customs systems, trade portals, and AI agents alike.
GCR is not a corporate registry, and it does not rate credibility. It proves it — cryptographically, from the official source. In doing so, it extends the same trust model that DNS brought to routing and SSL/TLS brought to the web, to the identity layer of global trade. It is open, neutral, and designed as a public good — a foundation on which inclusive, verifiable, and frictionless global commerce can be built.
1. Policy Context
Inclusive and trustworthy cross-border trade depends on the ability to verify, in real time, the true status of a corporate entity. National corporate registries have been digitized, yet their formats, languages, and status codes remain fragmented across jurisdictions. Existing commercial verification solutions are costly, opaque, and susceptible to geopolitical bias — leaving MSMEs in emerging markets disproportionately excluded from global supply chains.
The UN Global Digital Compact, the WTO MSME Agenda, and the G20 Digital Economy Framework all converge on a common objective: building inclusive, open, and trustworthy digital public infrastructure that leaves no one behind.
2. Core Proposition
GCR is an open digital public infrastructure (DPI) that operates as a neutral verification layer on top of official national corporate registries. It returns standardized, cryptographically verifiable corporate identity credentials without storing, reselling, or rating corporate data.
GCR does not rate credibility. It proves it — cryptographically, from the official source.
3. Alignment with Multilateral Frameworks
FrameworkAlignmentUN Global Digital CompactInclusive, open, trustworthy DPI; digital trust and credibilityWTO MSME AgendaLowering compliance barriers for MSMEs in cross-border tradeG20 Digital EconomyInteroperable, standards-based digital infrastructureUN SDGs (8, 9, 17)Decent work, industry & innovation, partnerships for the goals
4. Value to Multilateral Institutions
Inclusive Trade — Zero-cost, verifiable identity for MSMEs in emerging markets.
Trust Infrastructure — Cryptographic proofs replace forged or unverifiable documents.
Data Sovereignty Respect — Zero data retention avoids cross-border transfer and localization disputes.
Interoperability — Standards-based outputs consumable by customs, Single Window platforms, ERPs, and AI agents.
Neutrality — No ratings, no rankings, no pay-to-play, no geopolitical bias.
5. Technical Standards & Interoperability
Output: W3C Verifiable Credentials v2.0
Identifier: ISO/IEC 6523
Timestamp: Accredited Time Stamping Authorities (TSA)
Interoperable with: Customs systems, Single Window platforms, ERPs, trade portals, AI agents
6. Compliance & Privacy
Privacy & Compliance by Design
Holds no personal or corporate data
Avoids GDPR / PIPL deletion and transfer obligations
Auditable, traceable, tamper-evident
7. Recommended Path for Cooperation
Pilot Integration — Select 1–2 registries and a customs or trade use case.
Standards Co-Development — Participate in W3C VC / ISO 6523 working groups.
Public Authorization — Incorporate GCR into national or regional trade digital infrastructure.
Regional Expansion — Scale through Free Trade Zones, customs unions, and multilateral programs.
8. One-Line Summary
GCR does not own data — it verifies provenance. As an open digital public infrastructure, it makes official primary-source data instantly, affordably, and cryptographically verifiable across borders, serving inclusive and trustworthy global trade.
Frequently Asked Questions
For Partners, Regulators, and Stakeholders
Q1. What exactly is GCR?
GCR is an open digital public infrastructure that verifies corporate identity and status by connecting directly to official national registries. It returns cryptographically verifiable credentials — without storing, reselling, or rating corporate data.
Q2. If you don’t store data, what do you actually provide?
We provide verifiable proofs, not data. Each response is a cryptographically signed, time-stamped credential confirming that, at a precise moment, an official registry attested to a specific corporate status.
Q3. Why not just query official registries directly?
Because 200+ registries differ in format, language, API, and status codes. GCR provides a deterministic normalization layer that translates fragmented sources into a single international standard syntax.
Q4. How can verification be reliable if you retain no data?
Reliability comes from source signatures, trusted timestamps, and hash-based proofs — not from GCR holding data. This is precisely what makes GCR tamper-resistant and neutral.
Q5. How is GCR different from Dun & Bradstreet or other commercial databases?
Commercial databases sell cached copies and ratings, with risks of stale data, errors, pay-to-play bias, and geopolitical influence. GCR sells real-time official proofs, with no ratings, no rankings, and no bias.
Q6. Do you rate or score companies?
No. GCR does not rate credibility. It proves it — cryptographically, from the official source.
Q7. Are you an official government registry?
No. GCR is not a corporate registry. It is the verification layer on top of official registries — comparable to how DNS routes to authoritative servers, or how SSL/TLS proves identity without owning content.
Q8. What are the compliance advantages?
Zero data retention means no cross-border transfer liabilities, no data localization conflicts, and no deletion requests under GDPR or PIPL. Compliance is ensured by design, not by after-the-fact remediation.
Q9. Which technical standards do you follow?
W3C Verifiable Credentials v2.0, ISO/IEC 6523, and accredited TSA timestamps. Outputs are machine-readable by ERPs, customs systems, trade portals, and AI agents.
Q10. Why will MSMEs use GCR?
Traditional verification is unaffordable for most MSMEs. GCR provides a zero-cost, instantly verifiable “Global Registry Pass” tied directly to their home country’s official registry — enabling equal access to global supply chains.
Q11. Who governs GCR?
GCR is designed as an open, neutral, non-profit public infrastructure, governed transparently with multi-stakeholder participation.
Q12. What is the one-line case for GCR?
Cross-border trade has never lacked data — it has lacked verifiable trust in that data. GCR is that trust layer.
Global Credibility, Universal Access. © Global Credibility Registry