Legal
Compliance & standards
Dataspace · default · Last updated 2026-11-11 · Draft pending legal review
PG-29 D-SERVICE-OWNER/D-CUSTODY pending · Platform = processor of dataspace data; dataspace operator = controller; design proposed, legal sign-off pending.
1. Standards PACT is built on
PACT implements the European data-space building blocks for participant identity and for the exchange of offers and agreements. That means credentials, agreements and audit records are portable and verifiable by third parties rather than sitting in a proprietary format.
2. Identity and trust
Each participant is represented by an organisation identity validated against public business registries, and by an agent identity that signs the messages it sends. Revocation is supported, so a compromised identity can be withdrawn without rebuilding the ecosystem.
3. Agreements and records
Conditions are written into the agreement before access is granted. Each release of access is recorded, signed and retained, giving both sides the same evidence of what happened, when and under which terms.
4. Readiness and evidence
Conformance results and the current readiness position are documented and dated, and are shared with customers under evaluation — including any item that is still in progress or depends on an external party. We do not publish a claim without the record that supports it.
5. Requesting the detailed pack
Security questionnaires, conformance reports and the full compliance evidence are available to customers and evaluators on request through this form.
This page is a working draft prepared for review. It is not legal advice and must be validated by counsel before it governs any customer relationship. Questions: contact Alambic Labs.