Credential persistence
Canonical credential/lifecycle persistence status from the public runtime evidence rail.
CoreX Trust Center
Evidence over claims.
Review current operational state, standards alignment, legal/data-governance material and the boundaries CoreX deliberately keeps visible. This page projects existing evidence; it does not manufacture certification, legal or provider authority.
Current trust evidence
What is operating now?
Runtime facts stay separate from certification, contractual commitments and future activation.
Historical integrity
Current-state and historical-proof separation remains active.
Human identity
Provider-neutral browser identity resolved through canonical CoreX bindings.
Service identity
OIDC service identity is active inside CoreX; external provider trust bindings remain independently evidenced.
Standards & certification
Alignment is not certification.
No verified certification record is registered. CoreX publishes target/reference posture without claiming an external certificate that has not been verified.
ISO-IEC-27001:2022
Information security management systems
Position: certification target
ISO-IEC-27701:2025
Privacy information management systems
Position: target alignment
ISO-IEC-42001:2023
Artificial intelligence management systems
Position: target alignment
ISO-22301:2019
Business continuity management systems
Position: target alignment
ISO-IEC-20000-1:2018
IT service management systems
Position: reference
ISO-IEC-15408
Common Criteria security evaluation framework
Position: reference
ISO-IEC-24760
Identity management framework
Position: reference
W3C-VC-2.0
Verifiable Credentials Data Model 2.0
Position: target alignment
OPENID4VCI-1.0
OpenID for Verifiable Credential Issuance
Position: target alignment
OPENID4VP-1.0
OpenID for Verifiable Presentations
Position: target alignment
Operational assurance
Open evidence stays visible.
Service objectives
Targets become customer/contract authority only after their owning approval process.
Operational measurement
Canonical measurement evidence remains explicit about whether an approved backend is bound.
Deployment topology & locality
Residency, sovereignty and disaster-recovery claims are limited to approved evidence.
Performance evidence
Measured runtime evidence remains separate from modeled scale envelopes and historical claims.
Legal & procurement
Versioned material in one place.
These links point to the existing legal/status owners; the Trust Center does not copy them into another authority store.
Master DPA
Versioned public-safe evidence or governance material.
Privacy & processing notice
Versioned public-safe evidence or governance material.
Subprocessor register
Versioned public-safe evidence or governance material.
Platform status
Versioned public-safe evidence or governance material.
Performance & scale
Versioned public-safe evidence or governance material.
Capability map
Versioned public-safe evidence or governance material.
Disclosure boundary
What this Trust Center does not claim
No certification claim is made unless a verified certification record exists. Management-approved legal documents do not imply external counsel review is complete. Service objectives, measurement providers and deployment-locality claims remain limited to their live approved state. Public trust evidence excludes secrets, private identifiers and internal authority credentials.