Signicat, the Norwegian digital id supplier, has appointed TÜV Austria as its sole Conformity Assessment Body (CAB) for all eIDAS-related audits, changing a fragmented association by which 5 separate CABs assessed totally different components of its enterprise. The consolidation, introduced on 20 October 2026, is a direct consequence of the corporate’s M&A-driven enlargement and the rising regulatory calls for of eIDAS 2.0.
The firm’s acquisition path had left it with compliance assessments unfold throughout a number of our bodies in numerous European jurisdictions. That construction added administrative overhead and made it more durable for prospects in regulated sectors, primarily banking, insurance coverage and monetary providers, to get a coherent image of Signicat’s compliance posture throughout its full service catalogue.
Why a single CAB issues beneath eIDAS 2.0
The timing of the consolidation isn’t incidental. The revised eIDAS regulation, eIDAS 2.0, establishes the framework for the EU Digital Identity Wallet and locations new conformity evaluation obligations on belief service suppliers. Signicat is already a participant in a number of of the EU’s large-scale pockets pilots, together with WE BUILD, Aptitude, NOBID and EWC. Operating beneath a single CAB simplifies the audit path as pockets interoperability requirements are formalised, and makes it simpler to mix eIDAS assessments with adjoining certifications corresponding to ISO 27001 and SOC 2.
Jon Ølnes, VP of digital Identity and regulation at Signicat, mentioned the corporate ran a proper request-for-information course of amongst its current CABs earlier than choosing TÜV Austria. “We decided to run an RFI among the CABs and TÜV Austria had the best solutions and services to consolidate the situation and for the changes ahead as EUDI Wallets are introduced across Europe.”
TÜV Austria already assessed Signicat’s id proofing service, giving it an current baseline of the corporate’s technical atmosphere. The transition to single-CAB protection can be phased to keep away from gaps in steady compliance, in response to the corporate.
Market and regulatory context
The consolidation displays a broader maturation dynamic within the European digital id sector. The European Commission has focused adoption of an EU Digital Identity Wallet by 80 per cent of EU residents by 2030, a goal that’s driving industrial demand for verifiable belief providers and pushing suppliers to reveal audit-grade compliance at scale. Juniper Research has estimated the worldwide digital id market will attain 80 billion {dollars} by the identical yr, although such long-range market sizing projections carry vast uncertainty.
For Signicat’s financial institution and fintech prospects, the sensible profit is transparency. A single CAB produces a unified compliance view that aligns extra naturally with how regulated monetary establishments conduct their very own third-party due diligence. Banks working beneath the EU’s Digital Operational Resilience Act, which got here into full impact in January 2025, face stricter obligations across the oversight of crucial know-how suppliers, and a cleaner audit construction from a provider reduces friction in that course of.
Signicat, backed by Nordic Capital since 2019, serves greater than 20,000 prospects throughout 45 international locations and employs over 530 folks in 15 European markets. The firm’s positioning as a pan-European id orchestration layer means the standard and legibility of its compliance structure is a industrial differentiator, significantly because the EUDI Wallet rollout attracts in public-sector and cross-border use instances the place a number of nationwide supervisory our bodies will scrutinise the underlying belief infrastructure.
AI degree 1 of 5: written by Darlyn Ho; AI helped with tone, construction or wording; edited and signed off by Mark Walker, Editorial Director. What the levels mean
