Digital trust goes beyond regulation: six dimensions
A Dubai panel argued that digital trust goes beyond regulation, across six dimensions. Essence builds several of them into its architecture, starting from a server with no key to your content.
When a government body or a large organisation chooses a platform for people's data, the first questions are usually about regulation: which laws apply, which standards, who signs off. Those questions matter. They are not the whole of trust, and the people asked to hand over their data know it.
A panel at FutureSec in Dubai in September 2026, titled "Governing the Foundations of a Trusted Digital Economy", made the point well. Digital trust, it argued, goes beyond cybersecurity and beyond regulation, across six dimensions: trusted identities, secure transactions, accountability, transparency, human behaviour and cooperation between sectors.
We would add one thing. Regulation says what should happen. Architecture can make some things impossible. Several of those dimensions can be built into a system rather than written into a policy, and Essence starts from one such decision: the server holds no key that can read what people keep in their vaults.
Identities people already trust
People already trust their national identity schemes. A platform that invents a competing identity gives them one more thing to trust, so Essence does not issue one. The aim is to build on each country's existing identity rather than replace it, and the platform has sign-in integrations written for UAE Pass, GOV.UK One Login and NHS Login.
A server that cannot read what it holds
Secure transactions start with who can read the data. On Essence, content is encrypted on the person's device. The server receives encrypted content and the metadata it needs, and holds no key that can decrypt the content. Each field value has its own key, so one fact can be shared without opening a whole document. An organisation can receive a verified answer without taking custody of the documents behind it, which leaves it fewer copies of other people's records to protect. We are now extending consent to the same grain: this organisation, these facts, for this reason.
The same decision speaks to human behaviour. That is often treated as a training problem, and part of it is. But a phished login, a persuaded helpdesk and an instruction that turns out to be fake all work the same way: someone is able to hand something over. A secret the operator never holds is one it cannot hand over. Essence cannot be persuaded, tricked or compelled into a disclosure it is unable to perform.
One record for both sides
Accountability means being able to show who relied on what, and when. Transparency means the person concerned can see it too. The panel paired them, and on Essence they come from the same place.
Access is recorded in an audit trail built to show it has not been changed: any single entry can be checked against the full recorded history. People can see their own access history. An organisation's administrators see the part of the record that concerns their organisation. The organisation and the person are looking at one version of events, not two.
Cooperation without copying
Cooperation between government and business, and between countries, often stalls on one question: where does the data go? Essence answers it in the structure. Each country's instance is a separate deployment, with its own database, its own keys and its own certificate chain. Personal metadata crosses to another instance only when the person starts a cross-border action themselves.
That makes cooperation a matter of what organisations can prove to each other, rather than what they copy to each other.
What this means for you
Architecture does not replace regulation. Laws set the expectation. What architecture adds is a set of properties that do not depend on everyone behaving well every day. For a regulator, some questions can then be answered with evidence rather than assurances: can the operator read this, who relied on it, did it leave the country? For an organisation, it means a record it can show, and a straight answer when someone asks who can see their data. If you are working through these decisions for your own organisation, we would be glad to show you how Essence approaches them.
Published 10 September 2026