Skip to content
ECZ-ID MSPs & MSSPs
Free Trust Check

ECZ-ID for MSPs · Products

ECZ-ID Intent Control: evaluate a proposed action before it is relied on

ECZ-ID Intent Control evaluates a proposed action against authority, the Intent, policy and optional counterparty context. A decision is evaluated unless an inline enforcement point reports mediating it.

ECZ-ID Intent Control EssentialPaid · OpenBuy monthly
See ECZ-ID Intent

In an MSP client estate

Why ECZ-ID Intent Control matters for a managed estate

Who it is for

MSPs whose clients have write-capable or high-impact machine actors, where a proposed action should be checked against what was authorised.

The MSP problem it addresses

When an agent can change things in a client's systems, you need a recorded decision about whether a proposed action fits the client's authority.

The client problem it addresses

The client wants consequential machine actions checked against what it authorised, with the decision recorded.

When to attach it to a client

Attach it where the Trust Check or a Baseline shows write-capable or high-impact machine capability across client estates.

What the MSP receives

  • Hosted decisions and policy syncs for the entities a plan protects.

What the client receives

  • Recorded decisions about proposed actions against its own authority and policy.

How it fits the recurring Machine Trust service

Decisions accumulate into the evidence a recurring review draws on.

Options, prices and state

Each option, as TrustOps lists it

Bought in TrustOps per tier (monthly or annual prepaid), alone or together with ECZ-ID Intent in one plan. Prices and what can be bought today come from TrustOps, which owns every purchase, entitlement and renewal.

ECZ-ID Intent Control

  • ECZ-ID Intent Control Essential

    Monthly£29.99 per monthPaid · OpenBuy monthlyIncludes protects up to 7 entities · 25,000 hosted decisions a month · 10,000 policy syncs a month.
    Annual prepaid£299 — one payment for 12 months; it does not renewPaid · OpenBuy annualIncludes protects up to 7 entities · 25,000 hosted decisions a month · 10,000 policy syncs a month.

  • ECZ-ID Intent Control Pro

    Monthly£99 per monthPaid · OpenBuy monthlyIncludes protects up to 25 entities · 500,000 hosted decisions a month · 50,000 policy syncs a month.
    Annual prepaid£990 — one payment for 12 months; it does not renewPaid · OpenBuy annualIncludes protects up to 25 entities · 500,000 hosted decisions a month · 50,000 policy syncs a month.

  • ECZ-ID Intent Control Business

    Monthly£299 per monthPaid · OpenBuy monthlyIncludes protects up to 100 entities · 5,000,000 hosted decisions a month · 250,000 policy syncs a month.
    Annual prepaid£2,990 — one payment for 12 months; it does not renewPaid · OpenBuy annualIncludes protects up to 100 entities · 5,000,000 hosted decisions a month · 250,000 policy syncs a month.

ECZ-ID Intent + Intent Control

  • ECZ-ID Intent + Intent Control Essential

    Monthly£39.99 per monthPaid · OpenBuy monthly
    Annual prepaid£399 — one payment for 12 months; it does not renewPaid · OpenBuy annual

  • ECZ-ID Intent + Intent Control Pro

    Monthly£119 per monthPaid · OpenBuy monthly
    Annual prepaid£1,190 — one payment for 12 months; it does not renewPaid · OpenBuy annual

  • ECZ-ID Intent + Intent Control Business

    Monthly£349 per monthPaid · OpenBuy monthly
    Annual prepaid£3,490 — one payment for 12 months; it does not renewPaid · OpenBuy annual

States and prices from the TrustOps catalogue snapshot of 2026-10-14; TrustOps shows the current state. Buying a capability changes what you can operate. It never changes what the public record proves, and no paid tier is a verification outcome.

What you get

In TrustOps' own words

  • ECZ-ID Intent Control Essential

    Evaluates a proposed action against authority, the Intent, policy and optional counterparty context.

    Includes protects up to 7 entities · 25,000 hosted decisions a month · 10,000 policy syncs a month.

  • ECZ-ID Intent + Intent Control Essential

    Both services in one plan: the authorised boundary and its runtime control.

How it works

In plain English

  1. 1A proposed action is submitted for a decision.
  2. 2It is evaluated against authority, the Intent, policy and optional counterparty context.
  3. 3The decision is recorded as evaluated, or as enforced where an inline enforcement point mediates it.

Inputs

  • A proposed action.
  • The relevant authority, Intent and policy, and optional counterparty context.

Outputs and evidence

  • A decision, evaluated unless an inline enforcement point reports mediating it.

With your existing stack

It sits beside your gateways and orchestration; it does not take over the execution path.

Boundaries

What it does not do

  • Payment authorises nothing; only an owner or administrator authorises.
  • It does not define the authorised objective — that is ECZ-ID Intent.
  • A decision is not enforcement unless an enforcement point mediates the action.

TrustOps terms for ECZ-ID Intent Control Essential

  • Payment authorises nothing: only an owner or administrator authorises.
  • Holding a Passport is never an authorisation.
  • A decision is evaluated, not enforced, unless an enforcement point mediates the action.
  • Covered and protected places do not use Active Entity Capacity.
  • A monthly plan cancels at the end of its period.
  • One active plan per service.

What buying it never changes

  • the ECZ-ID of any Passport
  • the Parent organisation tier
  • any Passport assurance (holding a Passport is never an authorisation)
  • Active Entity Capacity (covered and protected places never use it)
  • any authorisation: payment authorises nothing — only an owner or administrator authorises, and nobody authorises their own request
  • any Resolver record, until the owner publishes a proof

Proof and integration

Resolver and Developer Gateway

Resolver relationship

Decisions are not public proof; the Resolver shows only what an owner publishes.

Developer Gateway route

In the MSP journey

What comes before and after

Usually comes before

Usually comes after

Questions

ECZ-ID Intent Control: questions MSPs ask

Does Intent Control block actions?
Only where an inline enforcement point mediates the action. Otherwise the decision is evaluated and recorded, and your existing controls decide.
Can I buy ECZ-ID Intent and ECZ-ID Intent Control together?
Yes. ECZ-ID Intent + Intent Control is one plan with both services; its options are listed on this page with their own states.

Next step

Start with ECZ-ID Intent Control, or see everything you can attach

Paid · OpenBuy monthlyAll MSP products