I Fly to Bangkok Tonight. On Friday, Prompt Pass Stops Being a Pilot.

I’m on tonight’s flight to Bangkok. On Friday, Thailand Post switches Prompt Pass on for the public, and a verifiable credential wallet that spent June on one campus with a few hundred students becomes something anyone in Thailand can open.

I’ve written about this partnership from a desk in Australia all year. This week I get to be in the room, and then spend the rest of the week with Thailand Post, TKC and Transformational on what comes after it.

A pilot proves the thing works. A public launch proves a country will actually lean on it.

What the public record shows before Prompt Pass goes public.

Prompt Pass is the first digital document wallet in Thailand built on verifiable credentials. It went live inside Thailand Post’s Prompt Post platform in June, and the first thing it carried was digital transcripts issued with SBAC, which Biometric Update covered at the time. We wrote it up in Thailand Post Just Launched Verifiable Credentials.

On 3 August, at the 144th anniversary press conference, Thailand Post announced the public date and set out a new corporate strategy called RelationSHIFT, with a framework under it called POSTsible Next. The third of its three delivery pathways for 2026 to 2027 is National Trust-Based Social Infrastructure. That is where Prompt Pass sits. We covered the day in 144 Years of Delivering Paper.

This was never built as a private silo. It was built to the standards set by ETDA, Thailand’s Electronic Transactions Development Agency, which is why it plugs into the rest of the country’s digital identity work instead of sitting next to it. Thailand Post is the operator and the announcing party. We built the verifiable credential layer underneath.

Most digital identity projects never get out of the pilot.

I’ve watched a lot of these over the past eight years. The technology is almost never what kills them.

A pilot is a soft landing. One campus, one document type, users you know by name, and a team sitting there ready to fix whatever breaks. Public release takes all of that away and hands you every device, every network, and every person who has never heard of a verifiable credential and has no reason to care what one is.

So plenty of programmes get a demo working, publish a nice report, and quietly never take the next step. Taking it means putting your own name on the result.

Thailand Post is putting its name on it. A 144-year-old state enterprise doesn’t do that for something it expects to be embarrassed by.

This is what privacy KYC fixes.

Here is why a postal service can pull this off at all. Nobody has to build a database of citizens.

A verifiable credential gets signed once by the organisation with the authority to issue it, then the person it belongs to holds it. When you present it, the other side checks the signature and gets a yes or a no. No phone call to the registrar, no photocopy of your transcript sitting on a server, no growing pile of identity documents waiting to become somebody’s breach in two years. That’s privacy KYC technology, and it’s what we’ve been building since our 2018 whitepaper.

It’s also why this can move fast. There’s no central honeypot to secure, because there’s no central honeypot.

What I’m actually doing over there.

Alison and I are both there Friday for the launch, with Thailand Post, TKC and Transformational. That’s the public part. If you’re in Bangkok, come and find us.

The rest of the week is the unglamorous half. Roadmap sessions with Thailand Post on where this goes after education, starting with verifying online sellers, so someone buying from a shop they’ve never heard of can work out who they’re dealing with before any money moves. The education credential rollout landing across August. Time with TKC on delivery, time with Transformational on the institutional side. A launch date is where the real work starts.

What Friday changes for us.

It changes what I can say in a meeting, and that matters more than it sounds.

Up to now the honest pitch has been that we built this early and a state-owned enterprise picked it. From Friday it’s that our technology is in public hands, at national scale, run by a national institution, aligned to a national regulator’s framework. Every conversation we have in Australia and the UK about age assurance and privacy KYC gets easier when “has anyone actually shipped this” has a one-word answer.

It also settles the argument we made back in January when we took a stake in Transformational, which I wrote about in Connecting a Nation. You don’t win national infrastructure by flying in with a product. You partner with someone already trusted in that market, you bring them something worth having, and you accept that your name goes third in the list. Seven months on, that has held up.

And it gives us a reference point. Australia’s Digital ID System opens to the private sector in November, the EU’s wallet deadline lands in December, and the UK is still working out what an effective age check actually looks like. All three are walking toward the architecture Thailand hands its citizens on Friday. I wrote about how far ahead Thailand already was in Thailand’s Digital ID Framework Is Already in Phase 2.

Frequently asked questions.

What is Prompt Pass?
Thailand Post’s digital document wallet, and the first in Thailand built on verifiable credentials. It holds documents issued to you by the organisations with the authority to issue them, and lets you share them in a form anyone can check.

When does it go public?
Thailand Post announced on 3 August 2026 that Prompt Pass would be available to the public on 14 August 2026.

Who built it?
TKC, Transformational and ShareRing, to Ministry of Digital Economy and Society policy and ETDA standards. Thailand Post operates it. Our way into the market was through TKC, which I explained in TKC, Explained.

How is this different from the June go-live?
June was a pilot with SBAC, one campus, one document type, more than 700 students. Friday opens it well past that group.

Does the organisation checking my credential keep a copy of my document?
No. It checks the issuer’s signature and gets a yes or a no. That’s the entire point of privacy KYC.

Can businesses outside Thailand use this?
Yes. The same verifiable credential and privacy KYC layer sits under our commercial products anywhere.

We ship this. We don’t just write about it.

There’s a lot of commentary on digital identity from people who’ve never had to make one work on a Friday morning in a country that’s counting on it.

Our engineering team in Vietnam under Tim Bos wrote the credential layer, stood up the infrastructure and ran the SBAC pilot. TKC brings the systems integration weight a national rollout needs. Transformational carries the relationships and the government process. Thailand Post owns the product, the customers and the trust. That’s why this is launching instead of still being discussed. I set out the rest of what we’re shipping this quarter in Three Fronts, One Quarter.

This is the starting line.

Every country is walking toward the same problem, which is how to let people prove things about themselves without handing a copy of their identity to everyone who asks. Thailand answers it in public on Friday. We’re fixing the same problem for businesses right now, on the same architecture, and we’re not waiting for anyone’s legislation to catch up.

If your organisation is heading at that problem, come and talk to us at sharering.network. Building the trust layer properly the first time costs a fraction of unpicking ten years of stored document copies later.

By Rohan Le Page, Founder and Co-CEO of ShareRing

#PromptPass #ThailandPost #VerifiableCredentials #PrivacyKYC #DigitalIdentity #Bangkok #Private #Secure #Verified