When you apply for a visa today, you email a stranger a folder containing your bank statements, your degree, and often your birth certificate. That folder can be forwarded, copied, or leaked, and you will never know. The document outlives the decision it was collected for.

A SabiProfile scoped key inverts that. The key is a signed token that carries its own policy: which of your six credential categories it may read, when it expires, how many queries it allows, and optionally which single organization may present it.

The receiving institution never sees the rest of your vault. A lender asking about proof of funds cannot read your academic history. An admissions office reading your transcript cannot see your bank balance. The scope is enforced cryptographically, not by a terms-of-service promise.

Revocation is one click. The moment you revoke a key, the registry rejects it on the next query, regardless of where it was copied. And every query made against your vault is written to your transparency log, so sharing is something you can audit, not something you hope about.