PACT

Legal

Compliance & standards

Dataspace · default · Last updated 2026-11-11 · Draft pending legal review

PG-29 D-SERVICE-OWNER/D-CUSTODY pending · Platform = processor of dataspace data; dataspace operator = controller; design proposed, legal sign-off pending.

1. Standards PACT is built on

PACT implements the European data-space building blocks for participant identity and for the exchange of offers and agreements. That means credentials, agreements and audit records are portable and verifiable by third parties rather than sitting in a proprietary format.

2. Identity and trust

Each participant is represented by an organisation identity validated against public business registries, and by an agent identity that signs the messages it sends. Revocation is supported, so a compromised identity can be withdrawn without rebuilding the ecosystem.

3. Agreements and records

Conditions are written into the agreement before access is granted. Each release of access is recorded, signed and retained, giving both sides the same evidence of what happened, when and under which terms.

4. Readiness and evidence

Conformance results and the current readiness position are documented and dated, and are shared with customers under evaluation — including any item that is still in progress or depends on an external party. We do not publish a claim without the record that supports it.

5. Requesting the detailed pack

Security questionnaires, conformance reports and the full compliance evidence are available to customers and evaluators on request through this form.

This page is a working draft prepared for review. It is not legal advice and must be validated by counsel before it governs any customer relationship. Questions: contact Alambic Labs.