SBOM Enterprise

SBOM Enterprise sets up resolver-verifiable evidence for software bill-of-materials and software-liability accountability.

Who should use it: software vendor; platform; procurement reviewer; security reviewer.

Required parent tier: ECZ-ID Business Passport™ — Assured.

Enterprise-tier service. Set up and reviewed through TrustOps; not offered on the self-serve card rail.

What this does not do: it does not certify, approve or guarantee anything, does not imply Shopify, platform or regulator endorsement, does not replace your own compliance, legal, procurement or insurance review, and does not create proof before backend activation.

Proof path: setup → TrustOps / backend activation → resolver-verifiable state.

TrustOps route: set up, review and operator handoff run through TrustOps.

Resolver route: public proof is checked at the Resolver after backend activation.

Re-check before reliance: schedule a re-check before relying on any outcome for a new decision.

Where applicable, your local policy decides whether this signal is sufficient for your use case.

Payment is not proof. Resolver-verifiable state appears only after backend activation.

Useful ECZ-ID routes

Resolver proof surface: https://resolver.ecocitizenz.org
Developer documentation: https://developers.ecocitizenz.com
TrustOps setup: https://trustops.ecocitizenz.com/start
Machine-readable discovery: https://machine.ecocitizenz.org/.well-known/ecz-machine.json
Support: support@ecocitizenz.com

Boundary: This product page supports discovery, routing, setup and payment flow only. It does not certify, approve, guarantee, activate credentials, write ECZ-ID truth, or create Resolver proof. Backend/Core writes truth. TrustOps handles setup. Resolver proves. Machines re-check before reliance.