RAR ShareInfo
Permitted information sharing for a stated purpose; it does not confer unrestricted citizen-data access.
Continue in the ecosystem
Trusted Records ecosystem
Identity, permitted shared information and signing transactions connect to records under explicit purpose and authority.
Read detailsAPI authentication and authorization
OAuth scopes govern API access; tenant/project and records policy still govern business authorization.
Read detailsPrivacy and records data
Separate website information from owner-provided records data; establish purposes, grounds and roles.
Read detailsMobile-ID capability and service scope
Mobile-ID publishes RAR VNeID SSO/ShareInfo connectivity. Trusted Records deployment scope, authorization and contracts are not verified in the package. Exchange only permitted attributes with purpose/grounds and retention controls; SSO does not sign records.
Mobile-ID ↗Connection scope
Use official documentation and contracts to agree attributes, grounds, recipient authority, expiry and sharing evidence. No released ShareInfo schema/endpoint is present in the Trusted Records baseline.
Business journey
Establish purpose → request minimum attributes → confirm authority/grounds → receive and validate context → use within the permitted workflow.
Exceptions and revocation
Decline or missing data: keep the request incomplete and offer an appropriate route; do not infer attributes or treat silence as consent.
Minimum evidence
Retain subject references, organization/project, purpose, session/transaction, validity, decision and associated records. Do not log tokens, secrets or unnecessary shared attributes.
Continue the workflow
Two journeys, one records lifecycle
Connect paper and born-digital records through persistent identifiers, policies and evidence.
Read detailsIntegration quickstart
Exercise ingest → job tracking → registration → verification with synthetic data.
Read detailsIntegrity, provenance and evidence
Each evidence type answers a different question; hashes, timestamps and approvals are not interchangeable.
Read detailsStart with a verifiable scope.
Agree record classes, quality criteria, permissions and evidence before scaling.
Plan assessment