Systems and methods for determining the identity of entities who meet trust requirements of a privilege grantor include an identity and trust management system including at least one computing device in communication with at least one entity, at least one privilege grantor, and at least one authoritative source. At least one rule is received from the at least one privilege grantor that must be satisfied for the at least one privilege grantor to trust an entity. A database is established of at least one entity with information about the at least one entity. The at least one authoritative source is queried to determine whether at least a portion of the information about the at least one entity is correct. A response is received from the at least one authoritative source as to whether or not the portion of information is correct. The database stores a result of the query without storing data underlying the result. The information stored in the database is compared with the at least one rule to determine if the at least one entity meets the at least one rule. The at least one privilege grantor is notified whether the at least one entity meets the at least one rule based on the comparison, without providing the at least one privilege grantor with either data stored in the database for the at least one entity or the data underlying the result.