Signicat, the Norwegian digital id supplier, has appointed TÜV Austria as its sole Conformity Assessment Body (CAB) for all eIDAS-related audits, changing a fragmented association by which 5 separate CABs assessed completely different elements of its enterprise. The consolidation, introduced on 20 October 2026, is a direct consequence of the corporate’s M&A-driven growth and the rising regulatory calls for of eIDAS 2.0.
The firm’s acquisition path had left it with compliance assessments unfold throughout a number of our bodies in several European jurisdictions. That construction added administrative overhead and made it more durable for clients in regulated sectors, primarily banking, insurance coverage and monetary companies, to get a coherent image of Signicat’s compliance posture throughout its full service catalogue.
Why a single CAB issues beneath eIDAS 2.0
The timing of the consolidation isn’t incidental. The revised eIDAS regulation, eIDAS 2.0, establishes the framework for the EU Digital Identity Wallet and locations new conformity evaluation obligations on belief service suppliers. Signicat is already a participant in a number of of the EU’s large-scale pockets pilots, together with WE BUILD, Aptitude, NOBID and EWC. Operating beneath a single CAB simplifies the audit path as pockets interoperability requirements are formalised, and makes it simpler to mix eIDAS assessments with adjoining certifications resembling ISO 27001 and SOC 2.
Jon Ølnes, VP of digital Identity and regulation at Signicat, stated the corporate ran a proper request-for-information course of amongst its current CABs earlier than deciding on TÜV Austria. “We decided to run an RFI among the CABs and TÜV Austria had the best solutions and services to consolidate the situation and for the changes ahead as EUDI Wallets are introduced across Europe.”
TÜV Austria already assessed Signicat’s id proofing service, giving it an current baseline of the corporate’s technical surroundings. The transition to single-CAB protection can be phased to keep away from gaps in steady compliance, based on the corporate.
Market and regulatory context
The consolidation displays a broader maturation dynamic within the European digital id sector. The European Commission has focused adoption of an EU Digital Identity Wallet by 80 per cent of EU residents by 2030, a goal that’s driving business demand for verifiable belief companies and pushing suppliers to show audit-grade compliance at scale. Juniper Research has estimated the worldwide digital id market will attain 80 billion {dollars} by the identical 12 months, although such long-range market sizing projections carry huge uncertainty.
For Signicat’s financial institution and fintech clients, the sensible profit is transparency. A single CAB produces a unified compliance view that aligns extra naturally with how regulated monetary establishments conduct their very own third-party due diligence. Banks working beneath the EU’s Digital Operational Resilience Act, which got here into full impact in January 2025, face stricter obligations across the oversight of important know-how suppliers, and a cleaner audit construction from a provider reduces friction in that course of.
Signicat, backed by Nordic Capital since 2019, serves greater than 20,000 clients throughout 45 nations and employs over 530 folks in 15 European markets. The firm’s positioning as a pan-European id orchestration layer means the standard and legibility of its compliance structure is a business differentiator, notably because the EUDI Wallet rollout attracts in public-sector and cross-border use circumstances the place a number of nationwide supervisory our bodies will scrutinise the underlying belief infrastructure.
AI stage 1 of 5: written by Darlyn Ho; AI helped with tone, construction or wording; edited and signed off by Mark Walker, Editorial Director. What the levels mean
