Legal Entity Identifier (LEI)

The 20-character code is not random; it is a concatenated string with four distinct logical parts:

• Characters 1-4 (LOU Prefix): Uniquely assigned to the Local Operating Unit (LOU) that issued the LEI.
• Characters 5-18 (Entity-Specific Part): A unique, randomly generated alphanumeric string assigned to the legal entity.
• Characters 19-20 (Check Digits): Computed using the ISO 7064 (MOD 97-10) algorithm to validate the integrity of the entire string. This structure ensures no two entities globally share the same identifier.

The LEI is not just a number; it is a federated governance ecosystem consisting of three tiers:

• Regulatory Oversight Committee (ROC): A group of public authorities that oversee the system's adherence to public interest principles.
• Global LEI Foundation (GLEIF): The central operational body that accredits issuers and maintains the global index.
• Local Operating Units (LOUs): Accredited organizations that register entities and issue LEIs. This three-tier model ensures decentralized issuance with centralized data integrity.

The LEI connects to a layered data model that answers 'who is who' and 'who owns whom':

• Level 1 Data (Business Card): Registers the entity's legal name, registered address, and legal jurisdiction.
• Level 2 Data (Corporate Tree): Documents direct and ultimate parent relationships, exposing complex corporate ownership structures. This hierarchy is critical for assessing systemic risk and preventing financial contagion.

The Verifiable LEI (vLEI) extends the static ISO standard into a cryptographically verifiable credential ecosystem:

• Digital Identity Wrapping: Wraps the LEI code in a W3C Verifiable Credential signed by a Qualified vLEI Issuer (QVI).
• Chain of Trust: Establishes a root of trust from the GLEIF down to the legal entity and its authorized representatives.
• Machine-Readable Governance: Enables automated, zero-trust verification of legal identity for AI agents and smart contracts.

The LEI is mandated by over 150 regulations globally to increase market transparency:

• MiFID II / MiFIR (EU): Requires LEIs for all legal entities trading in financial instruments.
• Dodd-Frank Act (US): Uses the LEI for swap data reporting to trade repositories.
• EMIR (EU): Mandates LEI use for derivative contract reporting. Without an active LEI, an entity is effectively barred from participating in regulated financial markets.

The vLEI ecosystem utilizes the Key Event Receipt Infrastructure (KERI) to eliminate ledger dependency:

• Self-Certifying Identifiers: vLEI credentials are anchored in a pre-rotated key event log, not a blockchain.
• Ambient Verifiability: Verifiers can cryptographically prove the authenticity of an LEI without querying a central registry.
• Post-Quantum Readiness: The architecture supports cryptographic agility, allowing for the insertion of NIST-standardized post-quantum algorithms to future-proof legal entity identity.

The cryptographic capability allowing a credential holder to reveal only specific attributes from a verifiable credential. With vLEI credentials, an entity can prove its LEI and jurisdiction without exposing its full organizational hierarchy or officer details.

• Mechanisms: BBS+ signatures, CL signatures (AnonCreds), and SD-JWT
• Zero-Knowledge Proofs: Enable predicate proofs (e.g., 'jurisdiction is in EU' without revealing the country)
• Privacy Benefit: Prevents unnecessary data exposure during automated counterparty verification