Signicat Consolidates eIDAS Audits Under Single Assessment Body

Norwegian digital identity provider Signicat has consolidated its eIDAS compliance oversight under a single auditor, ending a fragmented arrangement where five separate conformity assessment bodies evaluated different parts of its operations.

The shift, announced in October 2026, hands all eIDAS-related audits to TÜV Austria. The previous setup emerged from Signicat's acquisition history, which left compliance responsibilities scattered across multiple European jurisdictions and added layers of administrative complexity.

For customers in banking, insurance, and financial services, the multi-auditor structure made it harder to assess Signicat's overall compliance posture across its service portfolio.

The move comes as the revised eIDAS regulation introduces stricter requirements for trust service providers and lays the groundwork for the EU Digital Identity Wallet. Signicat participates in several large-scale wallet pilot programmes, including WE BUILD, Aptitude, NOBID, and EWC.

A single conformity assessment body simplifies the audit trail as wallet interoperability standards take shape, and allows the company to align eIDAS assessments more easily with certifications like ISO 27001 and SOC 2.

We decided to run an RFI among the CABs and TÜV Austria had the best solutions and services to consolidate the situation and for the changes ahead as EUDI Wallets are introduced across Europe.

Jon Ølnes, vice president of digital identity and regulation at Signicat, said the company ran a formal request for information among its existing assessors before making the selection. TÜV Austria already evaluated Signicat's identity proofing service, giving it an established view of the company's technical environment. The transition will be phased to maintain continuous compliance.

The European Commission aims to see 80 per cent of EU citizens adopt the EU Digital Identity Wallet by 2030, a target driving demand for verifiable trust services and pushing providers to demonstrate compliance at scale. Juniper Research projects the global digital identity market will reach $80 billion by the same year, though long-range estimates carry substantial uncertainty.

For Signicat's banking and fintech clients, a unified compliance view aligns with how regulated institutions conduct third-party due diligence. Banks operating under the EU's Digital Operational Resilience Act, which entered full force in January 2025, face tighter obligations around oversight of critical technology suppliers. A cleaner audit structure from a vendor reduces friction in that process.

Signicat, backed by Nordic Capital since 2019, serves more than 20,000 customers across 45 countries and employs over 530 people in 15 European markets.

The company positions itself as a pan-European identity orchestration layer, meaning the clarity and quality of its compliance architecture serve as a commercial differentiator. That becomes especially important as the EUDI Wallet rollout brings in public-sector and cross-border use cases where multiple national supervisory bodies will scrutinise the underlying trust infrastructure.