Roles

The same three roles as the person-centric case — issuer, holder, verifier — plus one a company cannot do without: whoever is authorized to act for it.

Role	Who plays it
Issuer	A business register, tax authority, licensing body, certification body, or another company
Holder	The company, through its wallet
Verifier	A public authority, a bank, a marketplace, a counterparty in a tender
Representative	A person authorized to act for the holder, within stated limits

A single company is normally all three at once: it holds its registration extract, presents it to counterparties, and asks its own suppliers for theirs.

The representative

An employee acting for a company is not the holder. They act on the holder's behalf under a mandate that says what they may do, and that mandate is itself a credential — issued by someone authoritative for it, presented alongside the company's own credentials, and revocable when someone changes role or leaves.

This is where business wallets get genuinely harder than personal ones. A phone has one owner; a company has staff, delegations, limits, and turnover.

Issuers are also verifiers

Roles are positions in an interaction, not fixed identities. The register that issues your extract verifies credentials of its own, and the bank that verifies yours issues account attestations. Nothing about being an issuer stops you being a holder.