Spherity

Kit de Herramientas / Plataforma de Identidad

Enterprise decentralized identity management solutions for supply chain, pharma, and industrial use cases. Flagship products include CARO (credential service for US DSCSA pharmaceutical compliance enabling Authorized Trading Partner verification) and VERA (Digital Product Passport suite for EU ESPR/Battery Regulation compliance). Acquired Xylene GmbH (December 2024) to strengthen Digital Product Passport market position. Named Digital Identity Solution of the Year 2025 by Enterprise Security Magazine.

Empresa
Enlaces
Visitar Comunidad

Detalles

Licencia Mixed (open-source product passport examples on GitHub: github.com/spherity/product-pass; core enterprise products are proprietary; contributions to Open Credentialing Initiative/OCI standards)
Estado de Desarrollo 🟢 Activo
Detalle del Estado de Desarrollo Released (production: CARO reached 1M+ interactions January 2025 for DSCSA compliance; VERA Digital Product Passport deployed including BVG Berlin pilot 2024; Xylene acquisition December 2024; EcoVadis Gold sustainability rating)
Propietario Spherity GmbH; Dr. Carsten Stöcker (CEO); Dr. Susanne Guth-Orlowski (CISO)
Órgano de Gobierno Company-controlled (Spherity GmbH) | Open Credentialing Initiative (co-founder; industry consortium)
País Germany (Dortmund)
Año de Inicio 2019
Stack TypeScript + Solidity + Ethereum (enterprise wallet infrastructure; EVM-based identity management; DID resolution)
Financiamiento VC (Blockwall-led round)
Última Investigación 9 mar 2026

Dominios de Caso de Uso

Identidad y Confianza

Capacidades

Identidad soberana Atestaciones portátiles

Kit de Herramientas / Plataforma de Identidad Atributos

Orígenes Identity / Supply chain (decentralized identity for Industrial Internet of Things / Industry 4.0; pharma supply chain compliance; digital product passports)
Base de Datos Blockchain / Enterprise (DID anchoring on Ethereum networks; enterprise credential storage; Spherity-operated Ethereum test networks)
Lenguaje de Consulta REST API (enterprise APIs for credential management, DPP lifecycle, ATP verification)
Formatos de Datos W3C Verifiable Credentials + JSON-LD + GS1 standards (GS1-compliant Digital Product Passports) + SD-JWT
Soporte Móvil Mobile support (planned for DPP consumer-facing QR code scanning; EIDA EU Business Wallet mobile)
Soporte Web Yes (CARO web platform for ATP credentialing; VERA web dashboard for DPP management; EIDA EU Business Wallet web interface)
Aplicaciones Nativas Enterprise platforms (CARO, VERA, EIDA — web-based)
Términos Paid SaaS + Enterprise licensing (CARO for pharma; VERA for Digital Product Passports; EIDA EU Business Wallet)
Fondos €2.5M (Blockwall-led; for expanding global sales, engineering, and decentralized identity management solutions)
Basado En Ethereum / EVM (did:ethr); W3C DID and VC standards; GS1 standards; Open Credentialing Initiative (OCI) specifications; eIDAS 2.0
Permisos Proprietary / Partial Open Source — CARO and VERA are commercially licensed enterprise SaaS products; source code is not published. Two repositories are open source on GitHub: the ethr-revocation-registry-veramo-plugin (revocation integration) and the product-pass reference implementation (W3C VC + DID product passport demo). Smart contract audits are conducted by Nethermind (results published). No OSI license applies to the core platforms.
Herramientas de Desarrollo Enterprise API-first tooling — CARO (pharma ATP compliance) and VERA (Digital Product Passport) are accessed via REST APIs with OpenAPI/Swagger specification and OAuth2 authentication; Postman collections available for API exploration. VERA API documented at learn.dpp.spherity.com with Basic and OAuth2 authentication. Hardhat (npx hardhat) used for Solidity smart contract compilation and deployment in iden3 contracts (referenced in audit materials). ethr-revocation-registry-veramo-plugin (open source, Spherity GitHub) — a Veramo framework plugin for revocation registry management. product-pass repository (open source demo) provides a W3C VC + DID product passport reference implementation using did:ethr and Secp256k1. Spherity does not publish a general-purpose open-source SDK; integrations are via commercial API contracts.
Autenticación e Identidad Decentralized ID (DID) for products, organizations, and machines; enterprise wallet infrastructure (EIDA EU Business Wallet); OCI ATP credentialing
Modelo de Almacenamiento Enterprise cloud (CARO and VERA as SaaS); DID documents on Ethereum networks; credential verification via enterprise APIs
Interoperabilidad High: OCI (Open Credentialing Initiative) founding sponsor; GS1-compliant DPPs; eIDAS 2.0/EUDI Wallet alignment; Catena-X, Manufacturing-X, Energy data-X integration; INATBA participation
Portabilidad de Datos Standards-based export (W3C VCs; GS1-compliant DPPs; interoperable across OCI ecosystem)
Gobernanza y Toma de Decisiones Company-controlled (Spherity GmbH); co-founder of Open Credentialing Initiative (OCI); active in INATBA, DIF, W3C, standards bodies
Estándares de Identidad W3C DID; W3C Verifiable Credentials; eIDAS 2.0; ISO/IEC 18013; OCI Digital Wallet Conformance Criteria; GS1 standards
Métodos DID Soportados did:ethr (Ethereum-based; Spherity-operated test networks); did:web
Gestión de Claves Enterprise key management (HSM support; enterprise-grade security; OCI-compliant wallet conformance audit completed)
Tipos de Credenciales Verifiable Credentials (W3C VCDM); ATP credentials (Authorized Trading Partner for DSCSA); Digital Product Passports (battery, automotive, textiles, pharma); organizational credentials; product credentials
Método de Verificación Cryptographic signature verification (EcdsaKoblitzSignature2016, Secp256k1); blockchain state verification; OCI-compliant credential verification
Funciones de Privacidad Enterprise privacy features; selective disclosure; DPP access control (restricted vs. public product data); privacy-preserving credential presentation
Métodos de Autenticación Enterprise authentication; organizational wallet credentials; ATP credential-based supply chain authentication
Mecanismo de Revocación Credential expiration; issuer revocation; OCI-defined revocation procedures
Tipos de Agentes Soportados Organizations (primary focus); Products (DIDs for products/Digital Product Passports); Machines/IoT (Industry 4.0 identity); Algorithms (non-human entity identity)
Tipos de Billetera/Cliente Enterprise wallet (EIDA EU Business Wallet); web-based platforms (CARO, VERA); SDK/API integration
Mecanismos de Recuperación Enterprise backup and recovery (platform-managed)
Cumplimiento / Regulaciones DSCSA compliant (US FDA pharmaceutical supply chain — first to complete OCI conformance audit); EU ESPR (Ecodesign for Sustainable Products); EU Battery Regulation (2023/1542); eIDAS 2.0; EcoVadis Gold; GS1 standards
Protocolos de Intercambio de Credenciales OCI credential exchange protocols; Presentation Exchange; enterprise API-based exchange; OIDC4VC
Marco de Confianza OCI trust framework (Open Credentialing Initiative — neutral ecosystem coordinator for pharma); GS1-based product trust; government-anchored regulation compliance
Modelo de Costos Enterprise licensing (per-product pricing for CARO, VERA, EIDA)
Resistencia a la Censura Hybrid (enterprise platform is company-operated; credentials anchored on public Ethereum networks; product DIDs are independently verifiable)