Discussion on: Who Are You?

I can't recommend any particular KYC companies, having used none and there being so many. I asked in a #platformcoop community a few months back if there was any user-owned / cooperative KYC service (social.coop/@nicol/107327919889480376) but got no suggestions.

It feels most KYC is targetted around financial services, and quite a few seem to have some overlap with big data / advertising business models. I'd welcome recommendations on who's 'good' too! Do know if services like Tunecore and Songtradr do it internally or with a third party?

It strikes me that there are other models for KYC-type services that can improve trust:

• vouching. I think establishing trust by association was a goal with the W3C's FOAF (friend-of-a-friend) trust model and it's still interesting in this space.
• insurance. I was interested to learn during our research (our project hinges on verification of rights ownership too) that the Chain of Title process in film sales (e.g. wherby HBO verifies that Producer X owns film Y and all its subsidiary assets like music & artwork ahead of buying it) is often based not on the buyer checking all the paperwork, but instead just checking that Producer X is insured by a reputable insurer who guarantees that they pass Chain of Title checks. The buyer knows the insurer will have done enough checks to be happy, and that there's no financial risk to them if there is a copyright dispute.
• domain verification. this is the system we are using during our project's beta (along with a manual onboarding process). ie a user can verify they control a domain name, which can then form part of an offline KYC process to establish there is a legal entity responsible for an account - and if it's the official website for the artist, as linked to in third parties services, that gives some confidence (it would be a real long con to fake!).
• verifiable credentials. The W3C's Verifiable Credentials model is the most interesting thing I've seen in this space as it would empower many different kinds of third parties to verify many different kinds of data claims a user might make. The electoral roll could verify my address; a passport office my passport number; a Producer's Guild, my ownership of IP, or at least my membership of the organisation and commitment to act lawfully.
  • the Open Content Certification Protocol, is a proposed protocol using the idea of Verified Credentials that's related to the ISCC project to verify ownership thru verified parties. The white paper goes into verifiable credentials and decentralised identifiers, and I largely concludes that all you need is proof of legal entity ownership with an LEI (Legal Entity Identifier) - who can then be the target of any lawsuits.

Sorry - I've not really answered your question! - but I'm interested in this too, and curious to learn of other approaches.