Identity Relationship Infrastructure
If your identity
is involved, you
should know.
PONALO is the relationship layer between verified people and the institutions that know them. Know what is connected to you. Verify what belongs. Control what happens next.
LIVE
Philip Papa Nii Sowah
ID 870305 •••• 084 · ZA
5 Mar 1987 · Johannesburg
Verified identity
Purpose-bound access. No population query.
Confidence
Institutional view
+4.2% this week
ONE PLATFORM STATE
Identity graph
Three authorised views
One platform state.
The same truth, precisely permissioned for the person, the institution and the state.
Your identity relationships at a glance.
See what exists, what changed, what needs you, and what you can do — for you and the people you are responsible for.
Explore workspace →Enterprise relationship intelligence.
Attest relationships, request consumer confirmation, resolve corrections and prove consent — with disclosure kept minimal.
Explore workspace →Sovereign identity, on your terms.
Identity stays sovereign. Relationships become legible. Citizen agency stays central. No blanket surveillance.
Explore workspace →The invisible problem
Institutions know people
in fragments.
Every institution holds a partial picture of a person, recorded for its own purpose, kept in its own system, updated on its own schedule. Nobody holds the whole.
- Banksknow their customers
- Insurersknow policyholders and lives insured
- Credit providersknow borrowers
- Employersknow employees
- Fundsknow members
- Governmentknow citizens
- Telcosknow subscribers
- Othersknow further fragments
The asymmetry
The person at the centre
has no view back.
You can be a policyholder, a life insured, a beneficiary, a nominee, a surety or a dependant — recorded in systems you have never seen, by parties you may never have met. PONALO returns that view.
Meet PONALO
A living relationship graph, held in the person's name.
Not a copy of every institution's database. A permission-controlled map of the significant relationships that surround one verified identity — with the provenance, status and history of each.
Relationship discovery
Search connected and sandbox sources for relationships involving your verified identity.
Verification & validation
Institutions attest. You confirm or challenge. Neither side decides alone.
Continuous monitoring
New cover, changed beneficiaries and identity activity surface as events, not surprises.
Coverage & confidence
Honest reporting on what was searched — and what was not connected at all.
Access governance
Purpose-specific, revocable, versioned consent. Relationship never implies access.
Policy enforcement
Permissions enforced in data policy, not decorated in the interface.
Audit & provenance
Who initiated it, from where, under which authority, and what changed.
Events & integrations
A single event stream drives activity, notifications, workflows and future connectors.
How PONALO works
Four movements, in order.
- 01
Establish
Verify the person
A verified identity is created with an internal secure Person ID. Jurisdiction identifiers are associated, never used as the key.
- 02
Authorise
Grant purpose-specific consent
You decide which sources may be searched, for what purpose, for how long — and you can withdraw it.
- 03
Discover & map
Build the relationship graph
Connected and sandbox sources return relationships with role, status and provenance attached.
- 04
Monitor & act
Confirm, challenge, resolve
Mine, Not mine, Unsure or Incorrect. Challenges become structured cases with a real lifecycle.
One engine. Three businesses.
Same truth. Different permissions.
Passport, Connect and Sovereign are authorised views onto one platform state. Update once, reflect everywhere authorised — and nowhere else.
Your identity relationships,
at a glance.
Passport answers four questions the moment you open it: what exists, what changed, what needs me, and what can I do. On web for deeper work, on mobile for the moments that need an answer now.
Relationship health
Total relationships, verified, needs review, and what is asking for your attention.
Discovery
Run a search across connected sources — and see plainly which sources were not searched.
Activity
One ledger of everything that happened, on every device, from every authorised party.
Continuity
Quiet preparedness for the people who depend on you — without becoming a death app.
Cover on me
Some cover involving you was never arranged by you.
Passport is being built so a person can eventually see legitimate, discoverable insurance relationships where their own life is insured — including relationships initiated by others — subject to law, purpose and provider connectivity.
Cover I bought
Policies you hold.
Cover on me
Where your life is insured by another party.
Employer cover
Group schemes attached to employment.
Family cover
Where you are named by someone else.
Benefits for me
Entitlements that may be relevant to you.
Being named in a relationship is not the same as being entitled to a payment. PONALO uses careful language throughout — nominated, potentially entitled, conditionally entitled, confirmed, claim required, paid — and never implies legal certainty where there is none.
Beneficiaries, people, family
People are not profile fields.
Spouses, children, dependants, beneficiaries, nominees, next of kin, guardians, executors, trustees and trusted professionals are distinct roles, each with its own meaning and its own limits.
Relationship does not imply visibility.
Being someone's spouse, parent, beneficiary or next of kin does not give access to their Passport. Permission and lawful authority are separate things, and PONALO treats them separately.
People graph
Person-to-person roles, held explicitly rather than inferred.
Authority records
Holder, subject, scope, purpose, evidence, jurisdiction, expiry, revocability.
Access is granted
Never assumed. Never inherited from a family relationship.
Proof required
Next of kin is not legal authority. Authority must be evidenced.
Identity activity & protection
Who used your identity, what changed, and does it need you?
PONALO surfaces activity calmly. A new relationship involving your identity needs your attention — that is the tone. Never alarm, never fear-marketing, never a claim of proven fraud.
Activity ledger
Every discovery, confirmation, consent change, correction and claim update, on one timeline.
Information conflicts
When an institution reports something different, both versions are shown. Nothing is silently overwritten.
Protection states
From normal through enhanced verification to a compromised-identity posture, with the actions each state allows.
For institutions that need
the relationship to be true.
Banks, insurers, lenders, employers, funds, telcos and bureaux operate a working environment built for desktops: attest a relationship, request consumer confirmation, resolve corrections, evidence consent, and monitor integration health.
Mutual verification
Institution asserted, consumer confirmed, consumer disputed, pending review, expired, historical.
Consent evidence
Purpose, scope, version, grant, expiry and withdrawal — auditable end to end.
Case queues
Disputes, corrections, identity mismatch and beneficiary discrepancy, with assignment and SLA.
Integration health
Connector status, event throughput, retries and dead-letter states.
Identity stays sovereign
PONALO does not replace national identity. It sits above permitted rails.
Relationships become legible
Configurable relationship, permission and orchestration infrastructure.
Citizen agency stays central
Purpose-specific, role-controlled, minimised and auditable access.
No blanket surveillance
A constitutional constraint of the platform, not a setting.
For governments building
national trust infrastructure.
Trusted national identity establishes who the citizen is. PONALO provides the relationship, permission, orchestration and citizen-agency layer above it — jurisdiction-aware by design.
African-built. Global by architecture.
South Africa first. Country Packs next.
A Country Pack carries the identity adapter, civil status rules, privacy and financial rules, family and authority rules, connectors, data residency, languages, formats and redress paths for a jurisdiction.
South Africa
Country Pack #1
Active in this demonstration environment with sandbox connectors.
Ghana
Architecture prepared
Identifier and connector slots exist. No national integration is claimed.
Kenya
Architecture prepared
Identifier and connector slots exist. No national integration is claimed.
Trust, privacy, security
A trust constitution, not a trust badge.
- The individual comes first.
- Relationship does not imply access.
- Authority must be proven.
- Consent should be understandable.
- Data disclosure should be minimised.
- Provenance should be visible.
- Disputed information stays visibly disputed.
- Coverage must be honest.
- Security is a product feature.
- Jurisdiction matters.
- AI cannot manufacture legal truth.
- Government access is never blanket surveillance.
PONALO ONE IDENTITY. ONE PASSPORT.
If your identity is involved, you should know.