Abstract: Provided are a platform and a computer-implemented process of controlling access to a restricted resource by verifying qualifications in compliance with a regulatory security framework. A computing system receives a configuration package including a qualification set, a threshold trust for a qualification, a plurality of different sources that could potentially provide information indicative of the qualification, and a different trust level to be assigned to each of the sources. The computing system also receives the information indicative of the qualification from a first source. A first trust level assigned to the first source is compared to the threshold trust associated with the qualification. Responsive to a determination that the first trust level satisfies the trust threshold, the qualification is flagged as being verified without human intervention to control access to the restricted resource.