Signicat, the Norwegian digital id supplier, has appointed TÜV Austria as its sole Conformity Assessment Body (CAB) for all eIDAS-related audits, changing a fragmented association by which 5 separate CABs assessed totally different components of its enterprise. The consolidation, introduced on 20 October 2026, is a direct consequence of the corporate’s M&A-driven growth and the rising regulatory calls for of eIDAS 2.0.
The firm’s acquisition path had left it with compliance assessments unfold throughout a number of our bodies in several European jurisdictions. That construction added administrative overhead and made it more durable for clients in regulated sectors, primarily banking, insurance coverage and monetary providers, to get a coherent image of Signicat’s compliance posture throughout its full service catalogue.
Why a single CAB issues below eIDAS 2.0
The timing of the consolidation just isn’t incidental. The revised eIDAS regulation, eIDAS 2.0, establishes the framework for the EU Digital Identity Wallet and locations new conformity evaluation obligations on belief service suppliers. Signicat is already a participant in a number of of the EU’s large-scale pockets pilots, together with WE BUILD, Aptitude, NOBID and EWC. Operating below a single CAB simplifies the audit path as pockets interoperability requirements are formalised, and makes it simpler to mix eIDAS assessments with adjoining certifications corresponding to ISO 27001 and SOC 2.
Jon Ølnes, VP of digital Identity and regulation at Signicat, mentioned the corporate ran a proper request-for-information course of amongst its present CABs earlier than choosing TÜV Austria. “We decided to run an RFI among the CABs and TÜV Austria had the best solutions and services to consolidate the situation and for the changes ahead as EUDI Wallets are introduced across Europe.”
TÜV Austria already assessed Signicat’s id proofing service, giving it an present baseline of the corporate’s technical setting. The transition to single-CAB protection shall be phased to keep away from gaps in steady compliance, based on the corporate.
Market and regulatory context
The consolidation displays a broader maturation dynamic within the European digital id sector. The European Commission has focused adoption of an EU Digital Identity Wallet by 80 per cent of EU residents by 2030, a goal that’s driving industrial demand for verifiable belief providers and pushing suppliers to exhibit audit-grade compliance at scale. Juniper Research has estimated the worldwide digital id market will attain 80 billion {dollars} by the identical 12 months, although such long-range market sizing projections carry vast uncertainty.
For Signicat’s financial institution and fintech clients, the sensible profit is transparency. A single CAB produces a unified compliance view that aligns extra naturally with how regulated monetary establishments conduct their very own third-party due diligence. Banks working below the EU’s Digital Operational Resilience Act, which got here into full impact in January 2025, face stricter obligations across the oversight of important know-how suppliers, and a cleaner audit construction from a provider reduces friction in that course of.
Signicat, backed by Nordic Capital since 2019, serves greater than 20,000 clients throughout 45 international locations and employs over 530 folks in 15 European markets. The firm’s positioning as a pan-European id orchestration layer means the standard and legibility of its compliance structure is a industrial differentiator, significantly because the EUDI Wallet rollout attracts in public-sector and cross-border use instances the place a number of nationwide supervisory our bodies will scrutinise the underlying belief infrastructure.
AI degree 1 of 5: written by Darlyn Ho; AI helped with tone, construction or wording; edited and signed off by Mark Walker, Editorial Director. What the levels mean
