What is Digital Trust Foundry?

Digital Trust Foundry (DTF) is a platform for building applications that produce digitally signed, independently verifiable content. It provides the infrastructure for organizations to create, sign, and verify digital artifacts — from purchase orders and invoices to compliance attestations and audit records.

Every artifact created through DTF carries cryptographic proof of who signed it, when it was signed, and whether the signer had the organizational authority to do so.

Core Concepts

Trustables

A Trustable is any piece of digital content that has been wrapped with verifiable trust metadata. When you create a Trustable, the platform signs it using KERI-based cryptographic identifiers, producing a self-contained artifact that anyone can verify independently — without calling back to DTF or any central authority.

Enterprise Identity

DTF manages a hierarchy of signing authority within your organization. An enterprise identity is established at the tenant level, and authority is delegated down to individual officers through a verifiable chain. Each delegation is recorded as a KERI event, creating an auditable trail from the organization to every signer.

vLEI Integration

Organizations can optionally link their tenant to a verifiable Legal Entity Identifier (vLEI) issued by a GLEIF-qualified issuer. This binds the organization’s signing identity to their legal entity, enabling external parties to verify not just “someone signed this” but “an authorized officer of this specific legal entity signed this.”

Platform Architecture

DTF is a multi-tenant platform. Each organization gets an isolated tenant within a regional instance.


Instance (e.g., US1)
└── Your Tenant
    ├── Enterprise Identity (organizational AID + vLEI)
    ├── Officers (delegated signing authority)
    ├── Trustables (signed digital content)
    ├── Containers (credential management)
    ├── API Keys (programmatic access)
    └── Users (team members + permissions)

Key Services

Platform — The main application at platform.us1.digitaltrustfoundry.com. Manages Trustables, enterprise identity, credentials, user management, and API keys.
Login — Tenant-scoped authentication at \{your-tenant\}.digitaltrustfoundry.com.
KERI Agent (Keria) — Handles all cryptographic operations: key management, credential issuance, event logging, and signature verification.
Auth — Global authentication service. Source of truth for users, tenants, and JWT tokens.

Built on KERI

DTF is built on the KERI (Key Event Receipt Infrastructure) protocol. KERI provides the cryptographic foundation that makes DTF’s trust model possible:

Autonomic Identifiers (AIDs) — Self-certifying identifiers that don’t depend on any central authority
Key Event Logs (KEL) — Append-only logs that record every key operation, enabling key rotation without losing identity continuity
ACDCs — Authentic Chained Data Containers, the credential format used for Trustables and identity credentials
SAIDs — Self-Addressing Identifiers that provide tamper-evident content addressing

You don’t need to understand KERI internals to use DTF — the platform abstracts the protocol behind its APIs and UI. For those who want to go deeper, see the KERI Deep Dive section.

What Can You Build?

DTF is designed for any application where digital content needs to be independently verifiable:

Supply chain documents — Signed purchase orders, invoices, and shipping documents
Compliance attestations — Audit records and regulatory filings with provable authority
Financial instruments — Agreements and approvals signed by verified officers
System-to-system trust — Automated signing for machine-generated content using API keys

Next Steps

Get access to a tenant — see Getting Your Tenant
Walk through the platform — see Quick Start Guide
Start building with the API — see Developer Guide