AnVerified: prove the fact, not the person
One verification at the source that knows the truth — student, servant, worker, resident — reused everywhere it is needed as a signed yes/no. The no-join-key doctrine, made sellable.
Verify once · Apply everywhereEvery institution needs a fact about you. None of them need you.
“Are you a student?” should be answerable by a registrar’s signature, not by your transcript, your IC or your life. AnVerified turns institutional facts into expiring, revocable, pairwise-pseudonymous tokens — the spine every Antrex solution group already stands on.
- Yes/no, never who
- Pairwise pseudonyms
- Revocable and expiring
{
"credential_id": "avf_9f2c…", // rotating, pairwise-per-relying-party
"claim": "enrolled_student",
"status": "true",
"confidence": "verified_at_source", // registrar SSO attestation
"scope": "i-saves:flash_students_nov",
"expires": "next_enrolment_check",
"name": null, "ic": null, "history": null
}Four families of attested fact
Each issued at the source that knows it, each consumable as a yes/no, none of them movable between relying parties.
Enrolled student · staff · civil servant
Issued once at the source that actually knows — registrar, ministry HR, campus SSO — and re-checked silently each year. i-Saves passes, AnTeraju Kampus records and AnKantin lunch accounts all hang off this one credential.
Employed · income band · gig-active
Employment and income facts attested from the ledger or payroll rail as range-claims, never payslips. PERKESO-scheme eligibility, AnKedai financing referral and takaful underwriting read the band, not the person.
Resident of a place · member of a group
Council, community and estate membership attested by AnKampung's gatehouse graph or a majlis roster — the credential that makes civic feeds consent-local and hazard alerts addressable without an address book.
Eligible for a benefit · aid · zakat class
Scheme eligibility resolved to a token at the point of need — aid distribution, segment pricing, waiver queues — with the qualifying detail staying in the issuing authority's vault.
Sold to whoever must verify a human
The per-ministry doctrine applies here too: every tenant isolated, no cross-institution join exists — not as policy, as protocol.
Banks & takaful operators
Onboarding and affordability checks against attested, source-verified claims — shorter forms, fewer disputes, PDPA-clean.
Ministries & agencies
Scheme eligibility at the point of need (aid, waivers, quotas) per ministry — each tenant isolated, no cross-agency join exists to buy.
Universities & employers
Enrolment and employment attestation once, reused everywhere the person is entitled — the spine of the AnTeraju Kampus and AnKerja stories.
Marketplaces & property
AnBilik tenancy trust, AnKedai counterparty checks, hire-rent deposits — verified posture, not scraped reputation.
The doctrine, quoted from where it was born
Masrif’s two-ledger architecture already promises that the deen ledger and the dana ledger share no join key. AnVerified takes that private design and publishes it as a public protocol: the partition is the product. An identity service that can’t join you across services isn’t safer because of a contract — it’s safer because the mathematics has no handle.
Questions, answered
No — it sits downstream of them. Government identity documents prove legal identity; AnVerified turns institutional facts (enrolled, employed, eligible, resident) into privacy-preserving, machine-checkable claims. Where a national rail exists, we integrate as a relying party; we never duplicate the registry.
The protocol, the model math and the market precedent each have their own page.
Ready to build something intelligent?
Let's engineer your next product — from idea to launch.