8. Criteria assessment methods¶
8.1 Assessment of Declaration¶
A declaration is evaluated by verifying the presence of information fulfilling the criterion.
The information must be one of the following options:
- a self declaration using the Gaia-X Ontology v2511
- a certification as explained in the next section.
Permissible standards
The list of accepted permissible standards is specified by criterion
Linked Data design principle
For convenience, the declarant, ie the issuer, may decide to create reusable declarations in the form of Verifiable Credential and provide resolvable URI to VC containing the required information.
To be noted that linked-Data and RDF semantic is out of scope of this document. Please refer to RDF 1.1 for details.
Info
The resource exposed via those resolvable URI can be secured with access control measures.
Warning
The content of the document and the URI are not verified by the GXDCH. It’s the responsibility of the declarant to provide a declaration in accordance with the criteria.
8.2 Assessment of Certification¶
A certification is evaluated by verifying the presence of a resolvable URI, referred to as link below.
This link must resolve to a Verifiable Credential issued by an approved Gaia-X Notary.
The process to become an approved Gaia-X Notary is described in How to become a GXDCH.
Gaia-X Notary and CAB
A permissible standard CAB issuing itself a Gaia-X compliant VC is de facto a Gaia-X accepted Notary and must be recognized as Gaia-X Notary.
Minimum number of Gaia-X Notaries
As long as there are only two or less approved Gaia-X Notaries in addition to CAB, the use of Gaia-X Notaries is optional. If there are only two or less approved Gaia-X Notaries in addition to CAB, self declaration of your proof of compliance (i.e., evidence or permissible standard certificate) is accepted.
Permissible standards
The list of accepted permissible standards is specified for each criterion
Warning
It is the responsibility of the declarant, i.e. the issuer, to ensure that the permissible standards submitted to the Gaia-X Notary are consistent with the fulfillment of the criteria.
8.3 Signature and Trust Anchors¶
In order to create legally relevant proofs, Gaia-X mandates the declarant, i.e., the issuer, to sign its declarations, i.e., the VCs, with one or more of the accepted cryptographic means listed in the Gaia-X Registry. Example: eIDAS, KTNET, EV-SSL, …