Insights & Resources

We built eIDAS Pro around the EU Digital Identity Wallet. So why are we adding bank-eID now? Because the mandates are landing in 2026, the wallets are not — and eID is the live, privacy-first bridge that carries you from today's rules to tomorrow's wallet.

Since January 2026 Google Play requires dating apps to block under-18 users. Here's how European dating platforms can comply with bank-grade eID verification — a signed yes/no from the user's own bank or itsme, without collecting a single ID document.

The EU age-verification app hands your service a signed boolean in the namespace eu.europa.ec.av.1 — but a boolean is only as trustworthy as who signed it. Here is what that namespace contains, and exactly how a verifier proves the attestation is genuine using the Age Verification Trusted List.

Receiving a Proof-of-Age attestation is not the same as trusting it. The EU verifier guidance requires you to validate every age proof against the Age Verification Trusted List before granting access. The Commission already hosts a test list in the eIDAS Dashboard ACC environment — and it is not the same list as the WRPAC provider list.

The EU's age-verification issuer issues a 'Proof of Age' attestation in mso_mdoc format under the namespace eu.europa.ec.av.1, over OpenID4VCI. Here is what that namespace actually contains, how issuance works, and how to point your integration at the live reference issuer — with the caveat that it is a reference, not a production endpoint.

On 29 April 2026 the European Commission urged Member States to make an age-verification app available to citizens by the end of 2026. It is a Recommendation, not a Regulation — non-binding by design. For relying parties, the distinction between 'urged' and 'mandated' is exactly where the planning happens.

On 21 May 2026 the EUDI Wallet Architecture and Reference Framework reached version 2.9.0, and with it Topic X — Relying Party Registration — moved to 'Final'. This is the technical layer beneath the WRPAC obligation: the high-level requirements that define how a relying party is authenticated, what it must declare, and how that declaration ties to a Wallet-Relying Party Access Certificate.

The EU age-verification verifier guide is unambiguous: your verifier must support two presentation mechanisms and select the best one at runtime. DC API is primary, OpenID4VP is the fallback. Get the fallback matrix wrong and a slice of your users silently fail the age gate.

The October 2025 second version of the EU age-verification blueprint added two things that look small and aren't: passports and national ID cards as onboarding methods alongside eIDs, and the Digital Credentials API for presentation. Together they expand who can get a proof of age — and where you can rely on one.

Because the official WRPAC provider list is not yet published, anything sold today as a production WRPAC cannot be publicly verified as chaining to a mandated provider. Here is the verification chain that defines a real one, the red flags, and what sandbox certificates are legitimately for.

As of late May 2026 the official EU trusted-entity lists are not published: the eIDAS Dashboard reports WRPAC as unpublished and the providers list is not publicly served. Here is why that is by design, and what it changes for your December 2026 planning.

Luxembourg is active at policy and pilot level — Data Strategy Action 32, the POTENTIAL pilot via the Ministry for Digitalisation and CTIE, a wallet due by end-2026 — but there is still no public WRPAC provider, registry, or relying-party registration portal. Here is the status for a Luxembourg-established relying party.

A late-May 2026 snapshot of EUDI Wallet readiness across all 27 Member States, with a second column the April scorecard lacked: the WRPAC path. Readiness is attributed to ecosystem trackers; the WRPAC answer is uniform — no public, verifiable production path anywhere yet.

On 29 April 2026 the Commission urged member states to deploy a white-label EU age-verification app integrated with EUDI Wallets. Within 48 hours Germany, Ireland, France, Poland, and Estonia signalled they would not. The fragmentation is now a Council process — and a merchant integration problem.

The 27 April Bitkom survey reframes the rollout. Intent is high; activated credentials are not. 57% of Germans have never used the eID online function, and the bottleneck for January 2027 is no longer awareness — it is the working-credential gap. What that changes for merchants.

Five questions that separate merchants ready for January 2027 from merchants who are about to lose Q1 to integration debt. Score yourself.

Europe's largest EUDI Wallet pilot, with 140 organisations across 19 countries, closed in September 2025. The lessons relying parties should internalise before December 2026.

Ireland is on track for an end-2026 wallet launch and has opened public opt-in testing. The age-assurance debate it is shaping will set the tone for every age-restricted business in the EU.

EU Digital Identity Wallet readiness across all 27 member states. Who has a live wallet, who has a public sandbox, who is still behind, and when you can verify customers from each country.

Eight months before the December 2026 EUDI Wallet deadline, here is where every EU member state actually stands — by tier, with launch dates, scope, and known gaps.

On 28–29 April 2026, Bitkom hosts the eIDAS Summit in Berlin and online. Here is what relying parties and merchants should track from a now-sector-led agenda.

A Bitkom survey from April 2026 finds 52% of Germans have never heard of the EUDI Wallet. Eight months before launch, here is how merchants should bridge the awareness gap.

Three bugs found in the EU age verification app within 24 hours of launch. That is exactly how open-source public infrastructure should work — and so should verifiers.

The Commission's new regulation on EUDI Wallet enrolment explained. What 'LoA substantial + additional procedures = high' means, and what verifiers should expect.

A researcher claimed the EU age verification app can be bypassed in 2 minutes. What actually happened — and what merchants and verifiers should really worry about.

ENISA opened consultation on the first EUDI Wallet certification scheme. Consultation closes 30 April 2026. What is in the draft and why verifiers should care.

A step-by-step tutorial to install the OpenEUDI SDK, create a verification session, and handle the result — all in under 5 minutes using DEMO mode.

We're open-sourcing the core verification protocol library that powers eIDAS Pro. OpenEUDI is a free, MIT-licensed TypeScript SDK for integrating EUDI Wallet verification into any web application.

A technical deep dive into OpenID4VP — the verification protocol that EUDI Wallets use to share verified attributes with businesses. How it works, why it matters, and how OpenEUDI implements it.

A practical, step-by-step checklist to prepare your e-commerce business for eIDAS 2.0 compliance before the December 2026 EUDI Wallet launch.

A technical comparison of EUDI Wallet verification and traditional KYC from a developer's perspective — API complexity, latency, data handling, and integration effort.

How to build an age verification system that collects zero personal data using the OpenEUDI SDK. A boolean result — not a birth date.

The December 2026 deadline is approaching. Understand what WRPAC certificates are and why your business needs compliance now.

Luxembourg's 30-month POTENTIAL pilot validated 6 use cases with 1,000+ successful transactions. Here's what it means for businesses.

Everything you need to know about registering as a Relying Party under Article 5b of eIDAS Regulation 2024/1183.

Article 5b(10) enables intermediaries to handle WRPAC compliance for you. Here's why that's the smarter choice for most businesses.

A comprehensive guide to the upcoming eIDAS 2.0 regulation and EU Digital Identity Wallet, covering timelines, new capabilities, and how merchants can prepare for the next generation of digital identity.

A practical guide to expanding your e-commerce business across EU markets using eIDAS-based identity verification, covering regulatory frameworks, country-specific requirements, and implementation strategies.

A data-driven comparison of eIDAS-based verification against traditional KYC methods, analyzing total cost of ownership, conversion rate impact, and long-term ROI projections for e-commerce businesses.

A comprehensive guide to implementing eIDAS-based age verification for online gaming platforms, covering regulatory requirements across Europe, technical integration patterns, and responsible gambling features.

Discover how eIDAS-based identity verification stops fraud at its source through cryptographic signatures and government PKI, eliminating the vulnerabilities of traditional document-based verification.

Discover how the eIDAS regulation is revolutionizing digital identity verification across Europe, enabling seamless cross-border transactions while protecting privacy and ensuring security.

A comprehensive technical breakdown of the eIDAS verification flow, from QR code generation to attribute validation, covering protocols, security measures, and integration patterns.

Complete guide to adding eIDAS-based age verification to your WooCommerce store. Learn how to implement compliant, frictionless verification for alcohol, tobacco, and age-restricted products.

Learn how to implement instant, compliant KYC verification in your Shopify store using eIDAS. Perfect for financial products, subscriptions, and high-value transactions that require identity verification.

Learn how eIDAS-based identity verification achieves perfect GDPR compliance through data minimization, privacy-by-design architecture, and user control. Reduce your data liability while improving security.