Digidentity

Netherlands · www.digidentity.eu · 25 vendors

Digidentity B.V. is a Qualified Trust Service Provider that offers secure digital identity solutions, including identity verification, authentication, and electronic signatures. The company enables individuals and organizations to prove their identity online, facilitating secure digital transactions. Digidentity serves various sectors, including governments and financial services, by providing reusable digital identities and compliance with regulations like eIDAS, KYC, and AML.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 25 sub-vendors.

Insights

Last updated 2026-08-16 · revision 1

25 direct vendors, 265 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Digidentity exhibits a good foundation for migration readiness, largely attributable to its modern and modular technology stack. The use of a REST API, native mobile SDKs, Next.js (a React-based frontend framework), and cloud-based signing infrastructure suggests an architecture that is likely to be flexible and adaptable for migration to new environments or platforms. The company's focus on verifiable credentials and EUDI Wallet compatibility also points to forward-looking, interoperable solutions. However, several factors introduce complexity and uncertainty. Digidentity operates in a highly regulated environment, adhering to stringent standards such as eIDAS, PKIoverheid, and various AML/KYC compliance frameworks. Any migration effort would need to meticulously ensure continued compliance, potentially increasing the scope, cost, and duration of the project. The lack of specified data residency requirements is a significant unknown that could pose challenges if strict mandates exist. Furthermore, the absence of data on financial stability (revenue concentration, growth history) makes it difficult to assess the company's capacity to fund a substantial migration. While the data states "Total Vendors: 0," which would imply minimal vendor lock-in, the subsequent listing of diverse "Vendor HQ Countries" for 29 services creates an ambiguity. The explicit "Vendor Lock-in Risk: Unknown" remains a critical gap in assessing potential migration hurdles related to external dependencies.

Compliance

11 in-scope frameworks identified; showing 3.

eIDAS 2.0 — Assessment Required

eIDAS 2.0 (amending eIDAS, applicable from 2026) introduces the European Digital Identity (EUDI) Wallet framework. Digidentity is actively developing EUDI Wallet Verifier services (listed on homepage) and is well-positioned given their existing QTSP status. Risk is Medium because: (1) The regulation is newly applicable and implementing acts are still being finalised; (2) Digidentity is proactively engaged (EUDI Wallet Verifier product exists); (3) Full compliance assessment requires review of implementing technical specifications still under development. Digidentity's existing eIDAS QTSP status provides a strong foundation.

Evidence: https://www.digidentity.eu/eudi-wallet-verifier, https://www.digidentity.eu, https://www.digidentity.eu/certifications

UK Digital Identity & Attributes Trust Framework — Compliant

Digidentity is certified against the UK DIATF and listed on the official GOV.UK Digital Identity Services Register. Certification is independently audited annually by Kantara Initiative. Risk is Low because certification is current, independently verified, and Digidentity is actively providing Right to Work, Right to Rent, and DBS verification services in the UK market under this framework.

Evidence: https://www.digidentity.eu/certifications, https://www.digidentity.eu/api/media/file/20251118DIATF.pdf, https://www.digital-identity-services-register.service.gov.uk/register/provider-details?providerId=30, https://www.digidentity.eu/documentation

SOC 2 (source) — Assessment Required

Digidentity is a cloud services provider processing sensitive personal data for over 250,000 corporate customers, making SOC 2 highly relevant from a customer assurance perspective. However, Digidentity has opted for the European/international certification pathway (ISO 27001, ISO 27701, ETSI standards) rather than the US-centric SOC 2 framework. Risk is Medium because: (1) Digidentity's existing ISO 27001:2022, ISO 27701:2019, ISO 27017:2015, and ISO 27018:2019 certifications provide equivalent or superior assurance to SOC 2 Type II for EU/UK customers; (2) However, US-based enterprise customers or partners may specifically require SOC 2 reports; (3) No SOC 2 report has been publicly disclosed. The absence of SOC 2 may create friction with US-market expansion but does not represent a compliance gap given their robust ISO certification portfolio.

Evidence: https://www.digidentity.eu/certifications, https://www.digidentity.eu/documentation, https://www.digidentity.eu/api/media/file/20260128ISO27001.pdf

Financials

Three-year financials

Financial Resilience Score: 7/10

Digidentity B.V. demonstrates strong qualitative financial resilience despite the absence of publicly available financial figures. The company benefits from a significant regulatory moat as a Qualified Trust Service Provider (QTSP) on the EU Trusted List, UK DIATF list, and Adobe Approved Trust List. These certifications require extensive audits under ETSI EN 319 401/411 standards, creating high barriers to entry. Additionally, the company has built long-term government contracts including the DigiD system for ~17 million Dutch citizens, GOV.UK Verify (9.6M+ citizens), and participation in the EU Digital Identity Wallet Consortium, which typically imply multi-year recurring revenue streams. The company's scale is substantial, with claims of 25M+ persistent identities created, 250,000+ corporate customers, and verifications across 180+ nationalities. Founded in 2008, Digidentity has 17+ years of profitable operations per company statements, and demonstrated strong operational scalability during COVID-19 when daily identity processing volumes grew approximately 20x from ~8,000/day to over 150,000/day. Product diversification across eHerkenning, PKIoverheid, QES, KYC/AML, Right-to-Work, SERMI, and EUDI Wallet Verifier reduces single-product dependency. However, resilience is tempered by concentration risk on government and regulated schemes—the wind-down of GOV.UK Verify (2018-2023) illustrates that national schemes can be discontinued. The eIDAS 2.0 / EUDI Wallet transition may commoditize identity verification and disintermediate QTSPs. Well-funded competitors including Onfido (Entrust), Signicat, Trulioo, Jumio, and IDnow present ongoing competitive pressure. Limited public financial transparency (small/medium company filing regime) restricts external validation of balance-sheet strength.

Key strengths: Regulatory moat as QTSP on EU Trusted List, UK DIATF, and Adobe AATL, Long-term government contracts (DigiD ~17M citizens, GOV.UK Verify 9.6M+ citizens), Scale: 25M+ persistent identities and 250,000+ corporate customers, 17+ years of profitable operations since 2008 founding, Diversified product portfolio across eHerkenning, PKIoverheid, QES, KYC/AML, SERMI, Participation in EU Digital Identity Wallet Consortium pilots, Demonstrated operational scalability (20x volume growth during COVID-19)

Risk factors: Concentration on government and regulated schemes, Political/regulatory disruption risk (e.g., GOV.UK Verify wind-down 2018-2023), eIDAS 2.0 / EUDI Wallet transition may commoditize identity verification, Competition from well-funded rivals (Onfido/Entrust, Signicat, Trulioo, Jumio, IDnow), Limited public financial transparency as private B.V., Loss or non-renewal of major national scheme could materially impact revenue

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report