Why your watch needs a digital identity: a private watch ownership register.

A watch can be the most portable valuable a person owns, and the one with the least paperwork attached. Here is what a private watch ownership register - a digital watch passport the owner holds, not the brand - would contain, who has a reason to create it, and why it must never be searchable.

Two camps and a hole: why there is no owner-side watch ownership register

Watch provenance today is served by two kinds of system, and neither belongs to the person who owns the watch.

The first camp is the stolen register. The Watch Register holds roughly £1.7bn of lost and stolen watches (via WatchPro and Robb Report, Feb 2026). It is a negative register: it tells a dealer, an auction house or a police officer what has gone missing, and nothing about what you own or what has been done to it.

The second camp is the brand passport. Every new Breitling has carried a digital passport issued through Arianee since 13 Oct 2020; the Aura Blockchain Consortium counts 20+ brands and 17m+ products (Breitling, Oct 2020; Retail Insight Network / CB Insights, 2024-25). They are issued by the brand, for new goods, inside the brand's app. A watch bought in 1998, or from a house outside the consortia, gets nothing.

Between the two sits the dealer. Certified pre-owned programmes, marketplace authentication and the specialist's warranty deliver pre-owned trust at the point of sale. That trust is real, and it belongs to the dealer. Walk out of the shop and you hold a receipt, a card and a box.

Who each system serves. The owner's column is empty.

So the hole is specific. The pre-owned owner has no portable, evidence-backed identity for the thing on their wrist - no watch ownership register that belongs to them. A watch can be worth more than a car and carry less history than a used hatchback.

Who has an interest in filling a watch ownership register

Registers that work are filled in by the parties with money at stake if the record is wrong. That is the way an HPI check works for a car - institutions that must register finance, write-off and theft data, sold to the trade at pence a look - and it is the mechanism a watch record has to copy.1 For a watch, two parties already hold the facts and already carry the risk.

Your insurer. A specified item on a contents or high-net-worth policy already sits on a schedule with its description, serial and agreed value, often with a professional valuation required at intervals. Pushing that schedule into a Vault the policyholder owns turns the insurer's underwriting file into a positive register - created by the party protecting its money, held by the person who owns the watch. At claim, the insurer reads back what it helped write. That is the Claim Evidence Report, and it is launching.

Your dealer. The specialist who sells you a pre-owned watch has authenticated it, often serviced it, and stands behind it. The Provenance Passport lets that dealer issue those facts into the record as a registered professional - reference, serial, authentication, service, sale - a certificate sold with the watch that outlives the sale. It is launching, for a small annual fee per location; the buyer pays nothing.

Authenticators, independent watchmakers and auction houses issue the same way, registered by reference to credentials they already hold. The class opens when they sign - not before.

What a private watch record holds

A watch Vault is a sealed file, not a listing. Its natural keys are brand, reference and serial, held off-chain under one Vault ID, the digital asset identity, in the format PV-GB-{AREA}-{6 digits}. Around them sit the documents that make a watch worth what it is worth: box and papers, each service as a dated event, the valuer's report, the insurer's specified-item entry and the authentication report.

An illustrative watch Vault; labels show the class of issuer. No real serial, owner or score is shown.

Every document is hashed on upload and given an integrity receipt - the hash and timestamp that prove it has not changed since. Originals are kept; corrections are stored as new versions. Evidence is graded by who issued it: an insurer's, authenticator's or registered watchmaker's event counts for more than a photograph you took yourself. The published rules engine that runs the Homes pilot computes the Vault Score - a verification score - whether the documents exist, who issued them and that they are unaltered since issue; never a valuation, a credit input or a judgement of the work. A record built only from owner uploads caps at 65; the issuers lift it.

How a watch insurance claim and a watch recovery would work

Walk through the worst day.

1. First notification

   You tell your insurer the watch has gone and grant a time-limited scope for the claims handler. They see ownership, agreed value, serial, photographs, sealed documents and the Vault Score; opens are logged. No hunt for an eleven-year-old receipt.

2. Settlement on evidence

   The handler settles against documents whose issuers and integrity are already known. Fewer queries, a shorter wait for both sides.

3. Recovery, through the registers

   The stolen registers have their own processes with dealers, auction houses and the police. You or your insurer log the loss with them; the Vault supplies the serial, photographs and proof of ownership they ask for.

Property Vault is designed to read registers of that kind. It does not promise a match against any of them, and will not until a data agreement exists. The record does not stop a theft. It stops the second loss - the one where you cannot prove what you had.

Why a watch ownership register must be private by default

A public register of who owns which watch would be the most useful document a burglar ever read. So a watch Vault is private by default - a property of the system, not a setting.

• Never searchable by serial. A serial, a reference or a name resolves to nothing unless the owner has opened a scope - and the empty result does not confirm a record exists.
• Reads only under a scope you grant. Scopes are role-limited, time-limited and logged; the tokens behind them are 160-bit, stored hashed and expire. Scopes hide documents, not history: the handler sees what you chose, for as long as you chose.
• Nothing identifiable on the ledger. Integrity receipts are anchored as a daily root with no serials, names or asset identifiers in it. Integrity anchoring runs as a rehearsal on the XRPL testnet: Merkle roots of keyed commitments are written to the test network, which can be reset, and listed on the public anchor page; mainnet anchoring is on the roadmap, subject to approvals. The ledger proves the record has not changed, never what it says.
• No custody. Property Vault never holds the watch, keys or money. It holds the evidence - see security.

What transfers at sale

A brand passport transfers inside the brand's app. A dealer's certificate describes one sale. A Vault follows the watch.

Transfer is a first-class event in the Verified History: the record moves to the new owner with every document, event and integrity receipt intact, and your personal details do not travel with it. The buyer receives the service history, the valuations, the authentication and the fact of each transfer - who issued what, not the previous owners' names. There is no toll on the transfer.

The Vault Score recomputes at that moment, because the mix of issuers has changed: the selling dealer's certificate is now part of the record, and anything the new owner adds is graded as theirs. Nothing resets: a watch that has passed through three Vault-holding owners arrives with its whole graded history - what the next dealer, insurer and buyer want, and cannot see today.

The numbers

Three figures carry the argument. The pre-owned market measured $16.73bn in 2025, up 36.4% (EveryWatch, Feb 2026) - where provenance is thinnest and growth fastest. The Watch Register holds ~£1.7bn of lost and stolen watches, logged 10,000 in 2025 and ran 280,000+ checks (via WatchPro / Robb Report, Feb 2026) - the trade already pays to check, against a negative register. Swiss watch exports were CHF 25.6bn in 2025 (FH, Jan 2026) - the new-goods channel the brand passports serve.

There is no single "luxury watch market" figure here - research publishers' definitions cannot be reconciled - and no Property Vault count: the Luxury class is launching, and we publish numbers when they exist.

Start: register interest in a watch digital identity

Launching

Luxury - watches, jewellery and handbags - is the next class after Property, launching with the partners who register it; the watch provenance page for the Luxury class sets out what the Vault holds. If you own a watch, register interest for watches and we will tell you when the class opens; your Vault will be free. If you insure specified items or sell pre-owned watches, you are the registering party this record needs - the Claim Evidence Report and the Provenance Passport are both launching.