For financial institutions, the EUDI Wallet represents a clear opportunity: simpler onboarding, stronger trust, and less friction at every step of the customer journey. EUDI Wallet Gateway by iDAKTO supports banks across both sides of this equation: verifying wallet-based identity data and issuing bank credentials into wallets. 

What the EUDI Wallet changes in practice 

The EUDI Wallet introduces a new model for sharing trusted identity data, and banks now need to prepare for its adoption. 

Under eIDAS 2.0, they will be required to accept the EUDI Wallet from the end of 2027. Yet this regulatory obligation also creates a significant opportunity. 

As it rolls out alongside the AMLR, which will harmonize customer due diligence requirements across the EU from July 2027, the EUDI Wallet can simplify the collection and verification of trusted identity data, while leaving KYC checks and risk analysis firmly in the hands of banks.  

Instead of asking users to upload documents, enter data manually or repeat identity checks across services, banks will be able to request verified digital attributes directly from a customer’s wallet, with user consent built into the wallet experience by design. 

At the center of this model is the PID, or Personal Identification Data: the core set of identity attributes held in the wallet and issued by an authorized provider. According to the current EUDI Wallet framework, the mandatory PID attributes for a natural person include: 

• family name, 
• given name, 
• date of birth, 
• place of birth, 
• nationality. 

For banks, this changes the verification logic. The question is no longer only: “Can we verify this document?” It becomes: “Can we request, receive and verify certified identity attributes from a trusted wallet?” 

In practice, this means banks can receive identity data in a structured, digital, and verifiable format. The user remains in control of the sharing process, and the bank can rely on technical evidence to support its internal onboarding, authentication, or compliance with workflows. 

The EUDI Wallet can support several banking use cases: 

• KYC onboarding: using certified identity attributes to accelerate account opening. 
• KYC refresh : updating customer identity data from their wallet during periodic reviews or remediation campaigns. 
• Strong Customer Authentication: relying on wallet-based proofs or bank-issued attestations for high-assurance journeys. 
• Account recovery: helping users recover access through a trusted digital identity. 
• Attribute verification: checking specific data such as age, address, eligibility or other trusted attributes. 
• Attestation issuance: allowing banks to issue credentials that customers can store in their wallet and reuse later. 
• Digital signature journeys: Providing verified identity data into contract-signing processes. 

For financial institutions, the EUDI Wallet is thus a new trust infrastructure for digital banking. 

EUDI Wallet for customer onboarding:  the path to a one-click identity experience

Customer onboarding is one of the most immediate and valuable use cases for banks. 

Today, opening a bank account online can still be long and fragmented. A customer may need to scan an ID document, take a selfie, fill in personal information, wait for verification, provide additional proof, and repeat similar steps in future journeys. 

The EUDI Wallet turns onboarding into a simpler trust exchange: customers share verified identity data from their wallet, and banks receive reliable data ready to support their onboarding process. 

For the customer, this means a faster, smoother experience: fewer forms, fewer document uploads, and fewer repetitive checks. In the best case, onboarding moves closer to a one-click identity experience. 

For the bank, the benefits are concrete: 

• Faster onboarding 
  Customers can share verified identity data in a few steps, helping reduce friction and drop-off. 
• Higher data quality 
  Banks receive structured digital attributes rather than relying only on document images or manually entered information. 
• Stronger fraud resistance 
  Identity data comes from a trusted wallet and can be checked through cryptographic verification mechanisms. 
• Compliance by design 
  Wallet-based identity sharing supports strong assurance and helps align onboarding with KYC requirements. 
• Improved customer experience 
  The user stays in a familiar banking journey and only uses the wallet when trusted data needs to be shared. 
• Seamless workflow upgrades 
  Wallet-based onboarding can be added as an additional identification route within existing journeys, while preserving alternative workflows where needed.  

Meet EUDI Wallet Gateway by iDAKTO 

he EUDI Wallet Gateway by iDAKTO is an interoperability layer built on the iDCluster® technology platform. It helps banks connect to the EUDI Wallet ecosystem through a simple and controlled integration, sitting between the bank’s systems and compatible digital wallets to handle wallet-specific complexity while the bank retains full control of its customer journey, business rules and backend processes.  

It covers both sides of the EUDI Wallet integration picture through two dedicated modules: 

The Verifier module supports the consumption of wallet-based identity data, with capabilities to: 

• Request trusted identity data from a customer’s wallet; 
• Receive and verify PID (Personal Identification Data) and attestations; 
• Support authentication and sensitive-operation journeys; 
• Integrate wallet-based identity into existing customer onboarding workflows. 

The Issuer module covers the other side of the equation, with capabilities to: 

• Issue bank credentials directly into a customer’s wallet; 
• Deliver bank-managed attestations in a reusable digital format; 
• Enable customers to store and reuse these attestations across services. 

EUDI Wallet Gateway by iDAKTO gives financial institutions a complete integration path into the EUDI Wallet ecosystem, without having to build or maintain wallet protocols, credential formats and interoperability logic internally. 

Why it helps banks 

EUDI Wallet Gateway by iDAKTO is designed to make EUDI wallet adoption easier, faster and safer for financial institutions. 

One interoperability layer 
EUDI Wallet Gateway connects the bank to the EUDI Wallet ecosystem through a dedicated layer that manages standards, formats, and wallet interactions; covering both identity verification and credential issuance.  

Customer journey continuity 
The bank remains in control of the user experience. In a web journey, the QR code can be displayed directly in the bank’s own interface. In a mobile journey, the bank can manage the app-to-app handoff and return flow. 

Built for banking environments 
Both solutions are designed to fit into regulated IT environments, with API-based integration, traceability, security controls and deployment models adapted to enterprise constraints. 

Flexible deployment 
Depending on sovereignty, security and operating requirements, EUDI Wallet Gateway can be deployed in SaaS, private cloud or on-premises environments. 

Future-ready architecture 
EUDI Wallet Gateway embeds evolving regulatory and interoperability requirements by design, enabling banks to stay aligned as the European framework continues to develop.  

Digital identity adoption is creating new opportunities for banks 

The EUDI Wallet is no longer an abstract future scenario. Across Europe, digital identity adoption is accelerating, and France Identité illustrates this momentum well, with 5 million users and counting. 

For banks, this growing adoption changes the equation. Customers are becoming more familiar with digital identity in their daily lives, creating the right conditions for trusted wallet-based journeys. As a leading digital identity provider, iDAKTO helps financial institutions move from ambition to implementation with EUDI Wallet Gateway; covering both identity verification and credential issuance in a single integration.

The post EUDI Wallet Gateway: redefining digital onboarding for banks appeared first on iDAKTO.

Building Europe’s next generation of digital trust

iDAKTO is proud to join APTITUDE (Advanced Project for Trusted Identity Technologies and Unified Digital Ecosystem), a European large-scale pilot bringing together 115 partners from 11 EU Member States and Ukraine.  

Within the consortium, iDAKTO contributes to several key work areas: supporting the technical foundations and practical demonstrations of the EUDI Wallet, participating in standardization to ensure alignment and interoperability across all use cases, and helping pilot wallet applications in travel, mobility, and payment scenarios, including ticketing and vehicle registration certificates. 

Achieving EUDI Wallet live deployment at scale

As a key partner to France Identité, iDAKTO leverages proven live deployments in France to help EUDI Wallet initiatives graduate from PoC to nationwide services, delivering go-live at speed and a repeatable blueprint for other Member States.  

Our end-to-end EUDI Wallet platform spans the full lifecycle—issuing, storage, verification, wallet management, and ecosystem integration—so validated capabilities move into production smoothly. This production track record makes iDAKTO a trusted, execution-driven contributor to APTITUDE’s objectives. 

Accelerating national digital ecosystems

Developed by iDAKTO and hosted by France Identité, the Potential Playground has been far more than a test environment. Built to outlast the project, it has operated as a true integration factory that moves relying parties from sandbox to live quickly. Beyond interoperability checks, it structured the national ecosystem, standardized integrations, and provided the tooling, guidance, and hands-on support teams need to launch with confidence and scale. 

Today, iDAKTO’s Sandbox provides standardized SDKs, reference code, and clear “golden paths” that cut weeks from RP onboarding, including a ready-to-use VP integration kit (“kit VP”) to accelerate verifiable presentation flows. This is combined with pre-production validation covering functional, security, and interoperability checks aligned to EU requirements, compressing time-to-live and de-risking nationwide rollout. 

By joining APTITUDE, we reaffirm our commitment to a sovereign and secure digital identity for all. Together with Europe’s leading innovators, we’re turning the EUDI Wallet into reality and shaping a future where trust, privacy, and simplicity go hand in hand—where others prototype, we launch and scale.

The post iDAKTO Joins APTITUDE to Accelerate EUDI Wallet Rollout appeared first on iDAKTO.

To ensure the adoption and security of this digital wallet, all stakeholders—citizens, public organizations, businesses, and more—must have confidence that the system is built on strong principles of trust and security.

With this in mind, standardization efforts are underway, and iDAKTO is actively contributing to their development. Below is an overview of how the future EUDI Wallet will function and the trust mechanisms that underpin it.

The different entities and their role in the trust ecosystem

Entities participating in this ecosystem and interacting with the European Digital Wallet must meet several prerequisites:
✅ Be registered in Trust Lists
✅ Be identified/authenticated using electronic certificates

Figure 1: Trust Model Schema – Source: ARF

Trust Lists: The pillars of the European Digital Wallet’s trust model

Introduced by the eIDAS Regulation in 2014, the concept of Trust Lists requires Member States to establish, maintain, and publish “trusted lists of qualified trust service providers and the services they provide.”

At the heart of the EUDI Wallet ecosystem, this trust list model has been expanded to include all actors in the system, ensuring reliability and interoperability. Any entity operating within this environment must be registered, enhancing transparency and security at the European level.

Trust lists include:

• Entities and the services they provide
• Associated information, such as electronic certificates, allowing authentication of these entities

The registration process and entity obligations are governed by eIDAS and its implementing regulations, requiring strict management and audit practices, particularly for qualified providers.

Registration and Requirements for Trust List Entities

For Wallet Providers

Every wallet provider must register on a dedicated trust list, managed at the national level. This includes:

• The provider itself
• Its certified wallet solution, listed in its home Member State’s trust list

Once validated, the Member State notifies the European Commission. If the registration and notification processes are successful, the provider’s Trust Anchor (root certificate) is added to a dedicated wallet trust list.

When issuing a PID or attestation, the PID provider or attestation provider can rely on these trust anchors to verify the authenticity of a Wallet Unit Attestation (WUA) signed by the wallet provider.

Once registered, the wallet provider can activate wallet units for end-users.

🔹 Prerequisites & Requirements:

• Certification ensuring secure design
• Functional certification ensuring interoperability with entities
• Continuous monitoring & incident management
• Technical support for users

For Qualified & Public Sector Attestation Providers (Pub/Q-EAA Providers)

These entities must register on a specific trust list, managed nationally, and obtain an access certificate issued by a Certificate Authority (CA).

This access certificate authenticates attestation providers to wallets, ensuring their legitimacy.

To enable third parties to validate electronic attestations, the provider’s Trust Anchor (root certificate) is also registered on a dedicated attestation trust list.

Certificate Authorities responsible for issuing access certificates must also be registered in a specific trust list, ensuring transparency and security.

🔹 Requirements:

• Publish terms of service and policies
• Conduct risk assessments
• Comply with security & management standards

Public sector attestation providers must undergo audits—likely based on existing standards—to match the reliability level of qualified providers in identity and attribute verification.

PID Providers follow a similar process to Electronic Attribute Attestation Providers.

For Relying Parties (Service Providers)

Any service provider that wants to interact with digital wallets must also register on a specific trust list at the national level and obtain an access certificate.

As with other entities, an access certificate is issued by a Certificate Authority, allowing authentication with wallets.

A dedicated Relying Party Instance Access CA trust list ensures the reliability of this process.

Additionally, a specific registration certificate is issued to service providers, specifying which user data they are authorized to request.

🔹 Prerequisites & Requirements:

• Registration via the European Commission’s procedures
• Submission of company details & intended wallet use
• Full transparency on the types of data requested from users

In summary

The success and adoption of the European Digital Wallet largely depend on the trust users have in managing their digital identity independently. Trust List mechanisms, ensure reliability, transparency, and interoperability. However, updates are needed to accommodate the wallet ecosystem’s unique requirements, particularly regarding trust list management and format.

As we move towards the EUDI Wallet’s implementation, collaboration and standardization efforts will be critical in establishing a robust trust framework. Through active participation in standardization bodies such as ETSI, iDAKTO remains committed to enhancing trust and security in this ecosystem.

The post EUDI Wallet: what are the mechanisms and guarantees of the trust model? appeared first on iDAKTO.

As a developer and provider of electronic wallets, iDAKTO offers secure, certified and used bricks within the France Identité application, officially recognized as a “high” level digital identity. We have therefore set important milestones for the security of the applications and the platform behind what will soon be the French implementation of the European digital identity wallet.

While the implementing acts of the eIDAS 2.0 regulation should soon specify the security requirements of the future European portfolio, iDAKTO is already working on the drafting of the standards within ETSI, CEN and OpenID Foundation.

Andreea Prian, Head of Standardization at iDAKTO and eIDAS compliance expert, takes stock of 5 major security issues around the European digital identity wallet, the questions that arise and the solutions envisaged to answer them.

1. The protection of personal data, a non-negotiable building block of the future EUDI Wallet

Citizens’ trust in the European digital identity depends on the transparency of all the actors involved in the system and on the protection of personal data. However, the certificates issued and stored in the future European wallet will contain metadata – such as the expiry date of the certificate or the cryptographic signature – and technical data that could make it possible to track users when these certificates are shared with third parties. Users could therefore be traceable, since in two different presentations, a cross-check would make it possible to deduce that it is the same person.

Avoiding user tracing could be done through the issuance of single-use certificates, but this solution is actually not very scalable and would place a significant burden on the issuer of certificates.

Another solution could be the use of advanced cryptographic techniques, such as Zero Knowledge Proof, which provide evidence about a user’s data without disclosing its exact value. Signature randomization via cryptographic algorithms and signature schemes of the BBS+ type or offering at least equivalent properties could also be considered.

Such solutions still need to be further developed and tested for possible use in the context of the creation of a digital identity. New “Large Scale Pilots” will be launched in 2025, in order to specify the contours and use cases of the future European identity portfolio. The study of user data protection via these techniques should therefore be an integral part of their roadmap.

2. Anticipating post-quantum threats

The creation of the European Digital Identity Wallet brings to the forefront the security issues around the electronic signature. Many elements that will pass through the wallet will be signed to guarantee the authenticity of the data (stored certificates, presentations of certificates made to the user parties, etc.). However, the post-quantum era is approaching and threatening the asymmetric cryptography currently used for electronic signatures. Quantum computing will be able to reproduce signatures that appear legitimate, making it impossible to distinguish between what is authentic and what is not.

To date, there are no officially recommended post-quantum algorithms in France.Si the first algorithms have already been standardized by NIST, they are not unanimous in terms of their maturity and their ability to guarantee data security on their own.

The use of flexible and scalable protocols, which are not tied to a single cryptographic technique, could be considered. In order to anticipate the threats related to post-quantum, the ANSSI already recommends hybridization, i.e. the simultaneous use of two algorithms, one of which is resistant to post-quantum and the other pre-quantum, sufficiently studied and recognized. If hybridization appears to be a recommended solution, it must still be allowed, for example by the format of the certificates. It is therefore crucial that standardization bodies look into the topic of hybridization integration.

3. Establish a framework of trust

The issue of trust is at the heart of the project to create the European digital identity wallet. The creation of a strong trust framework is necessary in the field of digital identity, in particular for the identification and authentication of certificate issuers, certified wallet providers and especially service providers – public and private – of which there are expected to be many users of the future European wallet. Sensitive data such as health data, stored in the wallet, will require strict regulation.

Many service providers will want to use the EUDI Wallet, which is easy to adopt and interoperable across Europe. They will therefore have to register on “trusted lists” whose criteria have not yet been specified. Leaving it up to the Member States to define their own criteria for registering service providers on the “trusted lists” would risk creating too great disparities, and therefore compromising the security of the future European digital identity wallet.

A strict and transparent registration of legitimate entities on the “trusted lists” is necessary, in order to assure the user that the service he wishes to use is indeed entitled to request information contained in his wallet. The declarative registration (on the basis of a form, for example) will not be sufficient to guarantee confidence in the system. The application of the principles of the GDPR will include a strict condition: companies (third parties) will only have to request from the user the data that is necessary for the purposes for which it will be processed. The European Commission is expected to provide more details regarding the processes for registering on the “trusted lists”.

4. Place the EUDI Wallet under the exclusive control of the user

The use of the European wallet, and in particular the management and sharing of data, must be “under the exclusive control of the user”. Theoretically neutral from a technological point of view, its first implementations will take place in the form of a mobile application (especially in France). In this case, the user will authenticate via their mobile device, in particular via biometrics, which is the means of authentication with the least user friction.

However, the security of authentication varies with the diversity of devices and the lack of guarantees they offer regarding the implementations of biometric solutions. Authentication is a key aspect of data protection. This situation raises the question of trust in these devices that remain beyond the control of the user itself.

It will likely be necessary to strengthen the authentication process for attestations requiring a high level of assurance. The use of an electronic identity card with a PIN code could be a solution, in order to avoid having to resort to biometrics, even if this solution may make the user experience less fluid.

5. Comply with a minimum set of security rules in the absence of a European certification scheme

To date, there is no unified certification scheme at the European Union level indicating how to certify the entire portfolio and its components (back-end, application, hardware cryptographic component, etc.). However, future wallets will have to be certified, and even reach the high level of assurance for electronic identity. The purpose of a certification scheme would be to describe the prerequisites necessary to secure the various components of the portfolio with a view to its certification.

The European countries concerned by the implementation of the future European digital identity wallet have quite heterogeneous levels of cybersecurity. This is therefore likely to create security disparities in different states, with some certifying versions of the wallet that others may consider insufficiently secure.

A minimum set of security rules should be complied with by all Member States in order to ensure a homogeneous and harmonised level of security. This pillar would guarantee all citizens the possibility of using a secure solution on the basis of a certain number of common security rules, regardless of the country.

Security, trust and regulatory requirements around the future EUDI Wallet: the elements to remember

1. Respect for privacy is an essential building block to preserve citizens’ trust in the European Digital Identity and encourage the adoption of the future wallet. The digital wallet will be free and not mandatory for European citizens.

2. It is already necessary to anticipate the threats related to post-quantum, in particular through the simultaneous use of two algorithms, one of which would be resistant to post-quantum.

3. The registration of service providers on “trusted lists” must be carried out in a strict and transparent manner.

4. The authentication process for certificates requiring a high level of assurance should be strengthened (e.g. through the use of an electronic identity card with a PIN code).

5. In the absence of a European certification scheme, the various States will have to develop their own national certification schemes. It is desirable that the Member States work on harmonising the security rules relating to the different components of the European digital identity wallet.

iDAKTO will closely follow the publication of the implementing acts of the eIDAS 2.0 regulation and will continue to be involved in the work of the “Large Scale Pilots” in order to contribute to the development of a fully secure European digital identity wallet.

The post EUDI Wallet security: the key trust and regulation challenges identified by iDAKTO appeared first on iDAKTO.