For telcos, MSPs and system integrators
iSHARE trust services, operated wholesale.
Your enterprise customers need certified data exchange, AI agent authorization and EU Data Act compliance. We run the managed service end-to-end. You own the brand, the channel and the customer relationship.
What's in the wholesale service
Managed iSHARE v3 service
Certified Party operations, onboarding portal, credential issuance, governance flows. 100% Protium IP on the PR Issuer and Authorization Registry.
White-label or co-branded
Your customers see your brand on the portal, the credentials and the support flow. Our trust infrastructure runs underneath.
Multi-tenant by design
Each of your enterprise customers is an isolated tenant in the Ozone platform. Scaling, isolation and governance are built in, not bolted on.
Operating model, not custom build
Documented runbooks, SLA tiers and onboarding playbooks. Repeatable per customer. No bespoke engineering per deal.
How the wholesale model works
The split is simple.
You bring the channel, the brand and the customer relationship. We bring the certified trust infrastructure, the credential issuers, the platform and the managed operations.
The economics are tenant-based.
Each of your enterprise customers becomes a tenant in our multi-tenant trust stack. You invoice your customer. We operate the service. Pricing models are discussed under NDA.
The integration touches your existing stack.
Your B2B sales sells the service. Your billing platform invoices (we provide per-tenant usage telemetry). Your customer support handles tier-1; we handle tier-2/3 on the trust layer. Your IAM, OSS/BSS and sovereign cloud all integrate.
The brand experience is yours.
Customer-facing portals, credentials, support emails and contracts carry your brand. Where preferred, the relationship is co-branded as a powered-by partnership.
Why telcos and MSPs are the natural operator
Trust infrastructure belongs in regulated, sovereign jurisdictions, operated by parties who already serve enterprise customers under SLA. Telcos and large MSPs already own the channel, the regulatory posture, the data centres and the brand trust. What is missing is the certified iSHARE trust layer itself — and the AI authorization stack on top. That is what Protium runs.
How onboarding works
Architecture & integration review
Map your enterprise services, IAM and B2B billing. Define the wholesale tenancy model.
Sandbox deployment
Your team is trained. Integration with your OSS/BSS is validated. First test tenant is onboarded.
Production deployment
First pilot customer goes live. Operations handover. Joint go-to-market materials.
Scale
Repeatable customer onboarding. Joint references where customers agree. Expansion into adjacent services (Ozone licensing, AI agent authorization).
Built on certified infrastructure
Certifications
iSHARE v3 certified · EUDI Wallet ARF v1.5+ ready · OID4VCI · SD-JWT · MCP-compatible · EU Data Act compliant
IP position
100% Protium IP on the Participant Credential Issuer (PR v3) and Authorization Registry. The PR base code comes from iSHARE Foundation as open source (AGPL 3.0). The Ozone platform is proprietary Protium IP.
Deployment posture
EU-only deployment. Multi-tenant by design. Production-grade operations. Audit-ready.
Trusted by organisations including
Selected organisations Protium has worked with since 2014. Public case studies available on request.
Buyer questions, answered
Can we white-label this entirely?+
Yes. Portals, credential UX, support flows and contracts can carry your brand. Co-branded "powered by Protium" is also available.
How does multi-tenancy work?+
Ozone provides tenant-level isolation by design. Each of your customers is a separate tenant with isolated data, configuration and credentials. We provide usage telemetry per tenant.
What is your dependency on iSHARE Foundation?+
The PR base code is iSHARE Foundation open source (AGPL 3.0). The PR v3 Issuer logic, the Authorization Registry and all deployment tooling are Protium IP.
What integrations do you support out of the box?+
Standard SAML/OIDC IAM, REST + webhook integration with OSS/BSS, telco-grade observability, EU sovereign cloud deployment options.
Where is the data?+
EU-only. Specific region and residency arrangements are confirmed in the architecture review.