A system for determining whether one of multiple entities meets trust requirements of a privilege grantor including: an identity and trust management system including at least one computing device in communication with the multiple entities, at least one privilege grantor, and at least one authoritative source, the at least one computing device being configured to: receive, store, and maintain at least one rule from the at least one privilege grantor that must be satisfied for the at least one privilege grantor to establish trust with the one entity; establish a database of the multiple entities with information claims containing characteristics describing each of the multiple entities as provided by the multiple entities; query the at least one authoritative source to determine whether at least a portion of the information claims about the multiple entities as stored in the database is correct and/or valid; receive a response from the at least one authoritative source as to whether or not the portion of the information claims is correct and/or valid; store in the database a result of the query for the multiple entities to the at least one authoritative source with or without storing data underlying the result; compare, based at least in part on the response from the at least one authoritative source, the information claims for the multiple entities stored in the database with the at least one rule to determine those of the multiple entities who meet the at least one rule and storage comparison results; and notify the at least one privilege grantor whether one of the multiple entitles meets the at least one rule based on the comparison of the information claims stored in the database with the at least one rule, by providing the at least one privilege grantor only the results of the comparison stored in the database for the one entity to indicate whether the trust requirements are met for the one entity without providing the data underlying the result. an identity and trust management system including at least one computing device in communication with the multiple entities, at least one privilege grantor, and at least one authoritative source, the at least one computing device being configured to: receive, store, and maintain at least one rule from the at least one privilege grantor that must be satisfied for the at least one privilege grantor to establish trust with the one entity; establish a database of the multiple entities with information claims containing characteristics describing each of the multiple entities as provided by the multiple entities; query the at least one authoritative source to determine whether at least a portion of the information claims about the multiple entities as stored in the database is correct and/or valid; receive a response from the at least one authoritative source as to whether or not the portion of the information claims is correct and/or valid; store in the database a result of the query for the multiple entities to the at least one authoritative source with or without storing data underlying the result; compare, based at least in part on the response from the at least one authoritative source, the information claims for the multiple entities stored in the database with the at least one rule to determine those of the multiple entities who meet the at least one rule and storage comparison results; and notify the at least one privilege grantor whether one of the multiple entitles meets the at least one rule based on the comparison of the information claims stored in the database with the at least one rule, by providing the at least one privilege grantor only the results of the comparison stored in the database for the one entity to indicate whether the trust requirements are met for the one entity without providing the data underlying the result. receive, store, and maintain at least one rule from the at least one privilege grantor that must be satisfied for the at least one privilege grantor to establish trust with the one entity; establish a database of the multiple entities with information claims containing characteristics describing each of the multiple entities as provided by the multiple entities; query the at least one authoritative source to determine whether at least a portion of the information claims about the multiple entities as stored in the database is correct and/or valid; receive a response from the at least one authoritative source as to whether or not the portion of the information claims is correct and/or valid; store in the database a result of the query for the multiple entities to the at least one authoritative source with or without storing data underlying the result; compare, based at least in part on the response from the at least one authoritative source, the information claims for the multiple entities stored in the database with the at least one rule to determine those of the multiple entities who meet the at least one rule and storage comparison results; and notify the at least one privilege grantor whether one of the multiple entitles meets the at least one rule based on the comparison of the information claims stored in the database with the at least one rule, by providing the at least one privilege grantor only the results of the comparison stored in the database for the one entity to indicate whether the trust requirements are met for the one entity without providing the data underlying the result.