DKAM & BluckTrust infrastructure
Trust & Privacy

Legal, privacy and compliance

These pages describe how DKAM handles identity, credential and capability data, what controls are in place today, and what is on the compliance roadmap. They are maintained by the DKAM team and updated as the platform matures.

Verification Policy

DKAM supports different levels of trust: self-asserted information, organisation-confirmed information, and source-issued credentials from trusted institutions. Each level is labelled openly on the Bluck.

Verification levels

  1. Self-asserted: provided by the individual, not independently confirmed.
  2. Organisation-confirmed: confirmed by a relevant organisation, for example a current or previous employer confirming a role.
  3. Source-issued: issued directly by the source of truth, for example a university issuing a degree or a certifying body issuing a certification.

Who can verify what

  • Employment and roles: confirmed by the employer of record.
  • Degrees, diplomas and academic credentials: issued by the awarding institution.
  • Professional certifications: issued by the certifying body.
  • Affiliations: confirmed by the relevant organisation.

DKAM does not invent verification on behalf of these parties. The verifier is identified on the record.

Updates, revocation and expiry

Credentials can carry an expiry date, be revoked by the issuer, or be marked as superseded. Changes are reflected on the Bluck and logged on the audit trail.

Challenging a record

If a verified claim is wrong, the individual can raise a correction request with the verifier through DKAM. See Data Correction & Disputes.

What DKAM does not do

  • DKAM does not rank or judge individuals beyond the transparent Aura Score.
  • DKAM does not act as a credential issuer on behalf of an institution unless explicitly engaged to do so.
  • DKAM does not expose personal identity to recruiters or organisations without the individual's consent.