Agreely
FR EN

The citizen portal

The citizen portal lives at my.agreely.ca. It is where a personne concernée sees who holds what about them, approves or declines a use of their renseignements personnels, and withdraws consent at any time. The portal is a separate application, served at its own root paths, and it installs as a progressive web app (PWA) on a phone or a computer.

This section covers what the citizen can do:

An identity that is yours alone

The citizen's identity is a passkey (WebAuthn). It is bound to an opaque, tenant-less citizen DID of the form did:agreely:citizen:.... This DID belongs to no company: it is the single point from which you see, in one place, everything you have consented to, without any company being able to correlate you from one side to another.

You never hold a private-key file. The secret stays in your authenticator: Face ID, Touch ID, or a hardware security key. It is the device, not Agreely, that holds the key.

Registration

Creating an identity requires two things:

  • a passkey with user verification and a discoverable (resident) credential, so the authenticator recognizes the account without you typing an identifier;
  • an ed25519 recovery key of which Agreely only ever sees the public part. No mnemonic and no private key can ever be received or stored by the server.

Registration is atomic: it creates your identity, the passkey, the recovery record, and an on-chain identity anchor in a single step. If any step fails, nothing is created.

Login

Login is a standard WebAuthn assertion: your authenticator proves possession of the passkey, with no password. The registration and login endpoints are IP-throttled.

Where the cryptographic details live

The passkey signature suite and the role of the recovery key are described in signatures and passkeys. Why a citizen DID cannot be joined to a company's customer record is covered in unlinkability.

A consent starts on the company's side. The company sends you a secure deep link. The portal then presents each (category, purpose) cell: the category of renseignements personnels requested and the purpose it would be used for. You accept or decline cell by cell, which lets you consent to some uses and not others.

For any renseignement sensible, the portal requires a separate express consent, in keeping with articles 12 and 13. Once your choices are made, you approve everything with your passkey: the same authentication ceremony serves as the signature of your consent.

If you already consented on paper, that company-attested consent can be bound to your DID. The company gives you a single-use claim link; opening it in the portal binds that offline consent to your identity, and it then appears in your dashboard alongside the others.