Enquirer Consulting Group

Reachable Buyer Map

Prepared for Javed Khattak · cheqd · August 2026
Trust infrastructure has an awkward property: the person who evaluates it is rarely the person who signs for it, and the two sit in different segments. Below are the segments where the evaluator sits, the titles that decide inside each one, and roughly how many companies are there. It describes the market rather than your business, and there is nothing to buy at the end of it.
Credential and wallet platforms
The closest thing to a native buyer for this. They already believe the thesis, so the conversation starts at architecture rather than at education. Small, technical and heavily overlapping, which cuts both ways: the population is reachable in weeks, and it is also the group every competitor already knows by name.
Who signs: founder or chief technology officer, head of product, VP of engineering, head of ecosystem.
250 to 400
credential, wallet and decentralized identity platforms across Europe and North America
Identity verification and reusable checks
Bigger, better funded and further from the thesis. They own the customer relationship and the compliance burden, and reusability is the thing their own buyers keep asking for. The strategic conversation here is about what they stop rebuilding, which is a product decision rather than a procurement one.
Who signs: chief product officer, head of partnerships, head of trust and safety, VP of engineering.
300 to 450
identity verification, know your customer and fraud prevention vendors globally
Regulated financial institutions in the UK and Europe
The segment with the deadline. Onboarding cost and repeat verification are line items somebody owns, and the regulatory calendar sets the date rather than the vendor. Long cycles, procurement gates, and the largest budgets on this page.
Who signs: head of digital identity, head of financial crime and onboarding, chief data officer, chief information security officer.
4,500 to 5,500
credit institutions, payment and electronic money firms authorized across the UK and the EU
Government and public sector identity programs
Where the frameworks are written and where the reference case is worth more than the contract. Slow, gated by procurement, and almost impossible to enter cold through a general channel. Named, though: each national program has a small group of people who actually decide the architecture.
Who signs: program director, head of digital identity, chief architect, policy and standards lead.
Roughly 25 to 35 national programs
across Europe, plus regional and agency level schemes; no register lists the people, they are identified one at a time
Education, awarding and professional bodies
The segment that off the shelf lists miss completely, because a university or a chartered body is never classified as a technology buyer anywhere. They issue credentials at volume, they are under pressure on fraud, and almost nobody in this category is being sold to properly.
Who signs: registrar, director of digital strategy, head of qualifications, chief information officer.
2,500 to 3,200
universities, awarding bodies and professional membership organizations across the UK and the EU
AI platform and agent builders
The newest and the least defined. Provenance for content, and identity for agents that act on someone else's behalf, are becoming real requirements rather than talking points. Being straight about it: this group is identified by what it ships, not by how it registers, so it cannot be counted from anything public.
Who signs: chief technology officer, head of AI, head of platform, head of trust and safety.
No public register
identified by product and by public engineering signals rather than by classification; the difficulty is why the segment stays open

Where the openings are

1
Infrastructure sells to the builder, and the builder is reachable by name. The person who evaluates a trust registry is usually two or three levels below the person who signs. That is normally treated as a problem. It is actually the opening, because engineering and product leaders are the most precisely targetable population in any market, and the least sold to well.
2
Regulation puts a date on a decision. Frameworks with a compliance deadline turn a slow category into a moment category. Moments are visible from outside if someone is watching a whole market, and invisible if you are waiting for the right person to find the documentation.
3
Awarding and professional bodies are the underworked segment. Roughly 2,500 to 3,200 of them across the UK and Europe, every one of them issuing credentials that get forged, and none of them appearing on a bought list of technology buyers. Working that segment takes identification rather than purchase, which is precisely why it is still open.
4
Two motions do not share one audience. Partner and ecosystem selling reaches builders, and direct enterprise selling reaches owners of a compliance budget. One channel tends to keep returning to whichever group answers fastest. Two named audiences with two different first lines is a different problem, and a mechanical one.
Built from public market data, industry association membership and public company registers, counts banded deliberately. Categories like credential vendors and agent builders are defined by what a company ships rather than by how it registers, so those counts are ranges rather than lists. Public sector programs and AI builders are described rather than counted, because no register covers them.
ENQUIRER CONSULTING GROUP
enquirerconsulting.com