Loading vLEI.wiki
Fetching knowledge base...
Fetching knowledge base...
This comprehensive explanation has been generated from 21 GitHub source documents. All source documents are searchable here.
Last updated: October 7, 2025
This content is meant to be consumed by AI agents via MCP. Click here to get the MCP configuration.
Note: In rare cases it may contain LLM hallucinations.
For authoritative documentation, please consult the official GLEIF vLEI trainings and the ToIP Glossary.
The Global Legal Entity Identifier System (GLEIS) is the worldwide infrastructure system operated by GLEIF that manages the issuance, registration, and maintenance of Legal Entity Identifiers (LEIs), serving as the authoritative data source for verifiable Legal Entity Identifiers in the vLEI credential ecosystem.
The Global Legal Entity Identifier System (GLEIS) is the comprehensive infrastructure system that manages the worldwide issuance, registration, and maintenance of Legal Entity Identifiers (LEIs). As defined in the vLEI Ecosystem Governance Framework, GLEIS represents the foundational data registry operated by GLEIF (Global Legal Entity Identifier Foundation) that provides authoritative legal entity identification data for the global financial system and, increasingly, for the broader digital economy.
GLEIS is explicitly referenced in the canonical definition of vLEI credentials: "Credential concerning a verifiable Legal Entity Identifier, residing in the GLEIS and compliant with one or more of the GLEIF Governance Frameworks." This definition establishes GLEIS as the authoritative data source that vLEI credentials reference and verify against.
The system was established following the 2008 financial crisis as a public-private partnership to provide unique, persistent, and permanent identification for legal entities participating in financial transactions. GLEIS operates under regulatory oversight and provides free access and redistribution of LEI data, encouraging widespread adoption across industries.
GLEIS serves as the primary root of trust for organizational identity within the vLEI ecosystem. The system provides the foundational data layer that enables the issuance of cryptographically verifiable credentials based on legally registered entity information. As stated in the vLEI Q&A documentation:
LEI Verification Requirements: All vLEI credential issuers must implement automated verification against GLEIS to confirm LEI validity and active status before credential issuance. This typically involves API integration with GLEIF's LEI data services.
Status Monitoring: Organizations participating in the vLEI ecosystem should implement continuous monitoring of GLEIS LEI status for their own LEI and for LEIs referenced in credentials they issue or hold. Status changes may trigger credential revocation or update processes.
Data Quality: When integrating GLEIS data into vLEI credentials, implementers must ensure data accuracy and freshness. The Legal Entity vLEI Credential schema requires the LEI attribute to reference a valid, active LEI at the time of issuance.
Qualification Prerequisites: Organizations seeking to become Qualified vLEI Issuers must first obtain and maintain an active LEI in GLEIS. This is a non-negotiable prerequisite established in the vLEI Issuer Qualification Program Manual.
Audit Trail: Implementations should maintain audit trails of GLEIS data verification activities, including timestamps of LEI status checks, data retrieved, and verification results. This supports compliance with governance framework requirements and enables incident investigation.
Hybrid Trust Model: GLEIS represents a centralized, governance-based trust model, while KERI/vLEI represents a decentralized, cryptographic trust model. Understanding this hybrid architecture is essential for proper system design and risk assessment.
Data Sovereignty: While GLEIS data is freely accessible, the legal entities represented in GLEIS maintain sovereignty over their identity through control of AIDs in the vLEI ecosystem. This separation between data registry and identity control is a key architectural principle.
Regulatory Compliance: GLEIS operates under regulatory oversight and compliance requirements that extend to the vLEI ecosystem. Organizations must understand applicable regulations in their jurisdictions when implementing vLEI solutions.
"GLEIF saw the rise of the digital economy and blockchain/distributed ledger technology as enablers for expanding LEI adoption beyond financial services. The critical insight was that the intersection of LEI with the Self-Sovereign Identity (SSI) world—originally developed for natural persons—could revolutionize organizational digital identity."
The vLEI ecosystem builds upon GLEIS by adding cryptographic verifiability to LEI data through KERI infrastructure and ACDC credentials. This creates a dual-layer trust architecture:
GLEIF operates GLEIS as both the Governing Authority and Administering Authority within the Trust over IP Foundation (ToIP) architecture. This dual role consolidates governance control while maintaining the public-private partnership model that has characterized the Global LEI System since its inception.
GLEIF's authority over GLEIS includes:
GLEIS data serves as the authoritative source for vLEI credential issuance. The vLEI Issuer Qualification Program Manual establishes that both Candidate vLEI Issuers and their relevant parent organizations must maintain an Active LEI Entity Status and a LEI Registration Status of Issued, Pending Transfer, or Pending Archival in GLEIS.
This requirement creates a direct linkage between the vLEI credential issuance infrastructure and the existing LEI registry, ensuring that only legally registered entities can participate in credential issuance. The Legal Entity vLEI Credential schema explicitly requires a valid and active LEI from GLEIS as a core attribute.
GLEIS maintains comprehensive data about legal entities according to the ISO 17442:2020 standard. The LEI data model includes:
Level 1 Data (Who is Who):
Level 2 Data (Who Owns Whom):
This structured data provides the foundation for Legal Entity vLEI Credentials, which cryptographically bind LEI data to Autonomic Identifiers (AIDs) controlled by the legal entities themselves.
GLEIS operates on principles of transparency and open access. As stated in the vLEI Ecosystem Governance Framework:
"Free and open access to Global LEI System data" is a foundational principle that must be satisfied.
This open access model enables:
The open access model is critical for the vLEI ecosystem, as it enables verifiers to independently validate that vLEI credentials reference legitimate, active LEIs without relying on proprietary databases or paid services.
GLEIS maintains dynamic status information for each LEI, including:
These status values are critical for vLEI credential lifecycle management. The vLEI Risk Assessment identifies "Credential Validity Management" as a key risk area, noting that credentials must be monitored against LEI status changes in GLEIS. When an entity's LEI status changes to lapsed or retired, associated vLEI credentials may need to be revoked through the Transaction Event Log (TEL) mechanism.
The Legal Entity vLEI Credential directly references GLEIS data. The credential schema includes:
"attributes": {
"LEI": "<valid-lei-from-gleis>",
"i": "<legal-entity-aid>",
"dt": "<issuance-datetime>"
}
The LEI attribute must correspond to a valid, active LEI in GLEIS. Qualified vLEI Issuers (QVIs) are required to verify LEI validity against GLEIS before issuing credentials.
GLEIS data also supports role-based vLEI credentials:
These credentials chain back to the Legal Entity vLEI Credential, which in turn references GLEIS data. This creates a verifiable chain of authority from GLEIS through the organizational hierarchy to individual representatives.
GLEIS represents a traditional centralized registry system, while the vLEI ecosystem built on KERI represents a decentralized cryptographic identity infrastructure. The integration between these systems creates a hybrid architecture that combines:
Traditional Trust (GLEIS):
Cryptographic Trust (KERI/vLEI):
This hybrid approach addresses the "Technical and Human Trust Architecture" described in the research paper "Towards Global Organizational Electronic Identity Systems":
"Technical Trust encompasses cryptographic assurance, data integrity protection, digital signatures, non-repudiation, and finality of transactions. Human Trust involves well-understood, enforceable governance rules applied consistently to identifiable participants within an ecosystem."
The vLEI ecosystem uses GLEIS as an external data anchor for credential verification. When a verifier receives a Legal Entity vLEI Credential, the verification process includes:
This multi-layered verification process ensures that vLEI credentials remain anchored to authoritative legal entity data in GLEIS while providing cryptographic guarantees about credential authenticity and integrity.
The vLEI Issuer Qualification Program Manual establishes strict requirements linking vLEI participation to GLEIS registration:
"A fundamental prerequisite is that both the Candidate vLEI Issuer and its relevant parent organizations must maintain an Active LEI Entity Status and a LEI Registration Status of Issued, Pending Transfer, or Pending Archival in the Global LEI System."
This requirement ensures that all participants in the vLEI credential issuance chain are themselves registered in GLEIS, creating a closed-loop trust system where credential issuers are subject to the same registration and validation requirements as credential holders.
The vLEI Risk Assessment identifies continuous monitoring of GLEIS data as a critical risk mitigation strategy:
"Risks around credentials becoming invalid are addressed through continuous monitoring of Legal Entity LEI status and appropriate action by Legal Entities to manage their vLEI Role Credentials."
This requirement implies that vLEI ecosystem participants must implement automated systems to:
The Trust Assurance Framework establishes data quality requirements that apply to GLEIS integration:
These requirements ensure that GLEIS data used in vLEI credentials meets international standards for data protection and security.
The vLEI Q&A documentation describes GLEIF's strategic vision for expanding GLEIS beyond its original financial services focus:
"GLEIF recognized broader opportunities: International scope with standardized identifiers, Unique, persistent, and permanent identification, Regulatory oversight providing governance assurance, Free access and redistribution encouraging adoption."
This expansion strategy positions GLEIS as a universal organizational identity infrastructure supporting:
The research paper "Towards Global Organizational Electronic Identity Systems" identifies GLEIS as a critical component for emerging technology ecosystems:
"Organizational identity serves as a foundational element for building trust in contexts ranging from smart contract execution to wholesale CBDC settlements and cross-border financial innovation."
Future GLEIS evolution may include:
The vLEI Ecosystem Governance Framework emphasizes technology-agnostic approaches and interoperability:
"Technology-agnostic approach using open source standards, Interoperability and portability of digital identity data."
This principle suggests GLEIS will continue to evolve as an open, interoperable data source that can be integrated with diverse identity systems, credential formats, and verification protocols beyond the current KERI-based vLEI implementation.
GLEIS operates through a network of LEI Issuers accredited by GLEIF to perform entity validation and LEI registration. These issuers:
This distributed operational model enables global coverage while maintaining centralized governance and data quality standards.
GLEIS maintains LEI data through periodic update cycles:
These update cycles create dependencies for vLEI credential lifecycle management, as credentials may need to be updated or revoked based on GLEIS data changes.
While GLEIS data is freely accessible, LEI registration and maintenance involve costs:
These costs are set by individual LEI Issuers within GLEIF guidelines and vary by jurisdiction and service level. The vLEI ecosystem inherits these cost structures, as entities must maintain active LEIs to hold valid vLEI credentials.
GLEIS represents the foundational data infrastructure for the vLEI ecosystem, providing authoritative legal entity identification data that enables cryptographically verifiable organizational credentials. The system bridges traditional legal entity registration with modern decentralized identity technologies, creating a hybrid trust architecture that combines regulatory oversight with cryptographic verifiability.
As the vLEI ecosystem evolves, GLEIS will continue to serve as the authoritative source of truth for legal entity identity, while the KERI-based vLEI layer adds cryptographic guarantees, self-sovereign control, and verifiable credential capabilities. This dual-layer approach enables organizations to participate in digital ecosystems with both legal legitimacy and cryptographic assurance, supporting the transition to a more transparent, verifiable, and automated digital economy.