eIDAS 2.0 · EUDI Wallet ecosystem · built in Romania

Digital identity infrastructure for the European wallet ecosystem.

Issue, present and verify digital credentials — online and in proximity.

OID4VCIOID4VPDCQL ISO 18013-5ISO 18013-7SD-JWT VC Trusted ListsVICAL

Built around European and international interoperability standards.

Why now

The wallet is not a trend. It is a deadline.

eIDAS 2.0 is in force. Member states must offer every citizen a wallet, and relying parties in key sectors become obliged to accept it. The organisations that integrate during the window gain a frictionless channel before their competitors are forced to.

~450MEU citizens will be offered a government-backed digital identity wallet
2026–27wallet roll-out by member states, followed by acceptance obligations for key sectors
20+sectors affected — banking · telecom · energy · government · automotive · crypto · fintech · insurance · retail · PSPs · alcohol · tobacco · betting · pharma · education · notaries · hotels · real estate · healthcare · transport
6interconnected platforms, one contract: issue, hold, present, verify, attest, trust
The platform

One platform. Full credential lifecycle.

Authentic Sourceauthoritative data
IssuerOID4VCI
Wallethold & consent
VerifierOID4VP · ISO 18013-5
Relying Partyverified attributes
TrustStatusAttestationAudit
Products

Six products. One coherent stack.

Each product runs on open standards and works with third-party implementations — use them together or stand-alone.

Holder

ForTrust Wallet

Hold and present trusted credentials.

Native iOS and Android EUDI wallet: enrolment, storage and presentation of digital credentials, with hardware-bound keys and user consent on every disclosure.

Verifier

ForTrust Verifier

Verify credentials online or face-to-face.

Credential verification over the internet and in person via QR, NFC and BLE — including fully offline operation with cached trust and status data.

Issuer

ForTrust Issuer

Issue interoperable digital credentials.

OID4VCI issuance platform for PID technology, mDL technology, EAA and enterprise credentials — in mdoc, SD-JWT VC, JWT VC and BBS+ formats.

Attestations

EAA & QEAA Enablement

Build trusted attribute ecosystems.

Issue and verify Electronic Attestations of Attributes. For qualified attestations, ForTrust integrates with the appropriate qualified trust service provider.

Relying parties

ForTrust RP Gateway

Connect services to EUDI Wallets.

Everything a relying party needs to accept wallets: request generation, user consent, verification and clean JSON results — over protocols your team already knows.

Integration guide →
Trust layer

ForTrust Trust Platform

Operate the trust layer.

Trusted Lists, VICAL, certificate lifecycle, status lists and revocation — the machinery that decides who is trusted, kept in sync and available offline.

Business cases

20+ sectors where the wallet becomes law.

Under Regulation (EU) 2024/1183 and the DSA, accepting the European Wallet becomes a legal requirement across sector after sector from 2026. Every case below carries the full flow, the Commission’s official wording and the obligation date — plus modelled value where industry ranges exist.

Three real selective-disclosure scenarios: bank, utility provider, car rental.
Financial servicesmandatory: November 2026

KYC with no ID-card photocopy. Straight from the wallet, in 6 seconds.

EU banks, financial institutions, and e-money issuers must accept the European Wallet for account opening, customer due diligence (KYC), and credit applications. The citizen sees what's requested, confirms, and the bank receives only the ticked attributes — cryptographically signed and offline-verifiable.

Read the full case
  1. The bank shows a QR code on its account-opening or KYC screen.
  2. The citizen scans the QR with the European Wallet.
  3. The wallet displays the exact list of requested attributes — name, date of birth, ID number, address — and asks for confirmation.
  4. On confirmation, only the ticked attributes are shared, cryptographically signed.
  5. The bank verifies the signature locally, in a few hundred milliseconds, with no third-party call.
  6. Under the regulation, the bank can treat this exchange as equivalent to a face-to-face identification.
“Relying parties, including financial institutions, shall accept the European Digital Identity Wallets for the authentication of natural persons for the purpose of fulfilling the know-your-customer requirements of Directive (EU) 2015/849.”Regulation (EU) 2024/1183, Article 5b

From November 2026, every EU bank, financial institution, e-money issuer, and payment service provider must accept the European Wallet as a valid means of customer identification, alongside physical passports and ID cards. AML / KYC libraries and risk procedures must be updated to read eIDAS 2 electronic attestations.

Today€5–15 per onboarding: document upload, video call, manual reviewWith walletone presentation — verified attributes, seconds, marginal cost near zero
Today25–40% of applicants abandon document-upload flowsWith wallettwo taps in an app the customer already has
Todaycopies of ID documents stored — GDPR liabilityWith walletonly the attributes you requested, with a cryptographic audit trail
Proximity presentation at hospital, hotel, concert.
Public services & hospitalitymandatory: End of 2026

Offline presentation. No account, no booking.

Reception desks, counters, events — anywhere fast identification is needed without a prior account. The wallet shows an ephemeral QR; the validator scans it with a phone or dedicated reader. Verification is cryptographic, local, under 2 seconds.

Read the full case
  1. The citizen opens the wallet app on arrival at the counter.
  2. An ephemeral QR code (valid for 60 seconds) appears on screen.
  3. The validator scans the code with their own reader.
  4. The wallet communicates directly with the reader via BLE or NFC.
  5. The citizen sees which attributes are requested and confirms.
  6. Signature verification runs locally on the reader — no internet, no call to a state server.
“European Digital Identity Wallets shall enable the user to request and obtain, store, select, combine and share, in a manner that is transparent to the user, person identification data and electronic attestations of attributes, including offline.”Regulation (EU) 2024/1183, Article 5a(4)

Every EU Member State public service must accept the European Wallet for authentication and identification by end of 2026 — healthcare, transport, education, local authorities, taxation. Private sectors classed as “critical relying parties” (air and rail transport, telecoms, regulated hospitality) enter scope in 2027.

Online age verification with Zero-Knowledge Proof.
Online age verificationmandatory: 2026

Just TRUE or FALSE. That's it. No personal attribute.

Online platforms hosting age-restricted content or services must verify age strongly, without asking for an ID card or date of birth. The European Wallet generates a Zero-Knowledge mathematical proof — the site receives only the verdict, no PII.

Read the full case
  1. The site (gambling, alcohol shop, 18+ content) shows a verification QR code.
  2. The citizen scans the QR with the European Wallet.
  3. The wallet generates a Zero-Knowledge mathematical proof locally — the computation never leaves the device.
  4. The wallet sends the site only the answer: TRUE or FALSE.
  5. The site receives no name, no date of birth, no address, no document number — only the verdict.
“Providers of very large online platforms shall put in place appropriate and proportionate measures to ensure a high level of privacy, safety and security of minors on their service. Age verification based on European Digital Identity Wallets is regarded as the preferred, data-minimising mechanism.”DSA — Regulation (EU) 2022/2065, Article 28 + European Commission Guidance, July 2025

From 2026, online platforms hosting age-restricted content or services (gambling, adult content, alcohol delivery, tobacco sales) must implement strong age verification. The European Commission explicitly recommends the European Wallet as the preferred mechanism — no personal data is transferred, only the mathematical verdict. Solutions based on ID-card photos or third-party credit-bureau verifiers do not meet data-minimisation requirements (GDPR Art.5).

Todaycard-photo uploads or per-check fees to verification providersWith walleta signed age_over_18 boolean — no document, no photo, no third party per check
Todayyou store birth dates and ID scans you never wantedWith walletyou never receive them — data minimisation by construction
Festival entrance staff scanning the wallet ticket on a tablet — valid in 2 seconds, no paper.
Events & festivalsmandatory: 2026-2027

Ticket in wallet, scan at the gate, cashless pay at the stand.

Festivals and large events are moving to digital tickets + in-event cashless. The citizen buys the ticket directly into the European Wallet, presents it at the gate via NFC tap (2 seconds, no paper, no e-mail in spam), and pays at stands inside with the same wallet — no cash machines, no plastic wristband. The organiser sees aggregates per event, never the individual participant's identity.

Read the full case
  1. The citizen buys a ticket on the organiser's site, scans a QR and signs the payment in their wallet — the ticket lands as a coloured coupon in the wallet.
  2. On event day, at the gate, they open the wallet and NFC-tap the organiser team's validator tablet.
  3. The validator checks the ticket signature, status (unused / used) and event date offline — in 2 seconds, no network, no queues.
  4. For festivals with internal cashless, the citizen tops up an event_wallet balance at an NFC station at the entrance.
  5. At every food stand, bar or merch booth, the vendor taps the wallet → instant debit from the event balance — no physical cash, no lost wristband.
  6. At the end, the unspent balance auto-refunds back to the wallet, no paper voucher from the organiser.
“The European digital identity and the associated electronic attestations may be used to access private services online and offline, including in areas such as event tickets, transport or accommodation, with enhanced privacy through selective disclosure.”Regulation (EU) 2024/1183, recital 14 + Commission Recommendation C(2024) 1432 on the ARF 2.x — proximity flows.

For event organisers, a wallet-held ticket isn't legally mandated yet, but Regulation (EU) 2024/1183 establishes the legal framework for any electronic attestation (including tickets, subscriptions, access passes) to have the same legal value as a paper document. The commercial advantage is immediate: 2-second gate verification (vs. 15-30 seconds for paper-ticket scans), internal cashless with automatic refund, GDPR-by-default compliance (no participant e-mail / phone list to keep), reduced fraud on duplicated tickets.

Todaymanual ID checks measured in minutes per person, connectivity-dependentWith walletBLE/NFC verification in seconds per person, fully offline
Todaystaff judgement calls on document authenticityWith walletcryptographic verdict: issuer signature, device binding, revocation
Member presents the wallet at the gym reception — staff scans the QR on a tablet, access granted instantly.
Fitness, private clubs & membershipsmandatory: 2026-2027

Gym access — no plastic card, no account, no queue.

Gyms, private clubs and subscription venues drop the plastic key card and the dedicated app. The member signs the membership once in their European Wallet, then taps NFC or scans a QR at the reception validator on entry. Membership status (active / suspended / expired) is verified in milliseconds, without transmitting name or ID number — the operator sees only the "access granted" verdict with the membership end date.

Read the full case
  1. The customer buys the membership on the gym's site or directly at reception — signs the payment once in the wallet.
  2. The membership (with time_window policy for unlimited entry or bounded_entries for N-session packs) lands as a coloured pass in the wallet.
  3. On every entry, the member opens the wallet → shows QR or taps the NFC reader.
  4. The reception validator checks the signature, status and expiry date offline — in under one second.
  5. The screen shows only the verdict: "Access granted — membership valid until <date>" or the reason for refusal (expired, suspended). The member's name is never shown.
  6. For session-pack memberships, the counter decrements by one and syncs back at the next internet reconnect.
“Relying parties using electronic attestations shall only use the attributes that are necessary for the provision of the requested service, and shall not systematically collect or process personal data not strictly necessary for the transaction.”Regulation (EU) 2024/1183, Article 5f

Sports clubs, gyms and subscription venues aren't required by Regulation (EU) 2024/1183 to accept the wallet, but GDPR Art. 5(1)(c) (data minimisation) forbids storing the ID number / date of birth / address of members purely for access control — the check can be made without PII. Replacing the plastic key card with a wallet pass removes the PII register, lowers breach risk and makes GDPR compliance automatic. Commercially: zero card cost (vs. €2-5 per member), zero loyalty-app cost (€15-40k initial development).

Smart TV showing a QR code; the user scans it with the wallet on their phone — subscription verified instantly, no new account.
Digital content & streamingmandatory: 2026-2027

TV subscription verified — no e-mail, no card, no new account.

Streaming platforms, smart TVs and content services drop the per-device account creation. The user signs the subscription once in the European Wallet; later, opening the app on any TV, tablet or set-top-box, they scan the QR shown on screen and the wallet proves the active subscription through a pairwise pseudonym — without sharing name, e-mail or payment details.

Read the full case
  1. The user signs the subscription once on the provider's site (e.g. €10 / month), exactly like a PSD2 Art.18 recurring mandate.
  2. The wallet stores the subscription as a pass — visible as a green coupon in the wallet, with a countdown to the next charge.
  3. On any TV / tablet / set-top-box where the app opens, the screen shows a QR with "Connect your subscription".
  4. The user scans the QR with the wallet, confirms on the phone — no new account, no password, no card entry.
  5. The wallet sends the service only a pairwise pseudonym + an attestation "subscription_status=active". The provider doesn't see the real name, only that the same subscriber is back.
  6. The device unlocks for that session. Changing devices? Scan again — no password reset.
“The European Digital Identity Wallet allows the user to authenticate anonymously or pseudonymously towards relying parties, whenever the service does not strictly require identification of the natural person.”Regulation (EU) 2024/1183, Article 5a

Digital content and streaming providers aren't required by Regulation (EU) 2024/1183 to accept the wallet, but GDPR Art. 5(1)(c) and the upcoming ePrivacy regulation push toward data minimisation and fewer password-based accounts. The concrete advantage: eliminating "create account + verify e-mail + enter card + remember password" — the main onboarding drop-off source (industry measures 25-40% drop per new TV). For smart TVs, set-top-boxes and consoles, the "scan QR with wallet" flow reduces steps from 5-7 to 1 — essential on screens without a keyboard.

Let's talk →

Interoperability

One infrastructure, multiple wallets.

ForTrust is built for interoperability, not a closed ecosystem. A digital credential issued by ForTrust infrastructure has been enrolled by an independently developed EUDI wallet — and ForTrust has, in turn, processed and verified presentations coming from an external wallet. In proximity, verification runs device-to-device over BLE and NFC, including where there is no internet at all.

Think of card payments: the payer's bank and the merchant's terminal don't need to be made by the same company for the transaction to work. Digital identity, done right, works the same way.

Cross-vendor issuance ForTrust Issuer → third-party EUDI wallet (OID4VCI) ✓ credential enrolled successfully
Cross-vendor presentation third-party EUDI wallet → ForTrust Verifier ✓ presentation processed and verified
Proximity ForTrust Wallet ↔ ForTrust Verifier · BLE / NFC ✓ offline-capable presentation demonstrated

For a partner this means integration never forces adopting the whole ForTrust stack: use only the issuance, verification, wallet or trust component you need. Tests were performed in a controlled interoperability environment; the identity of third-party providers is not published without their consent, and full production trust / RP authorisation is handled separately.

OpenID Foundation

Official OID4VP 1.0 conformance suite passed in full — including negative security cases and the HAIP profile.

EU reference environment

PID issued into the official EU reference wallet and presentations fully verified by its verifier.

National sandbox programmes

Profile aligned with an official national EUDI sandbox; national-rulebook SD-JWT PID read and verified.

Independent implementations

Cross-enrolment and cross-reading with independent European wallet and verifier implementations certified against ISO 18013-5.

The full conformance matrix — element by element, with honest status (implemented / rollout / in validation) — is public on dwallet.fortrust.ro. Named interoperability reports are available to partners on request.

How implementers win

Three ways to make money

Relying parties

Accept the wallet

Convert more, store less, comply earlier.

Banks, platforms, venues: verified attributes over protocols your team already runs. Lower onboarding cost and drop-off, no document copies on your servers, and art. 5f compliance before it becomes an emergency.

Start with the RP Gateway →
Issuers & brands

Issue your own credentials

Turn attributes you hold into products.

Employers, universities, associations, municipalities: issue employee IDs, student cards, memberships and entitlements that any conformant wallet can hold and any verifier can trust — a new channel to your members, on your brand.

Talk about issuing →
Integrators & resellers

Sell it in your market

White-label the stack, keep the customer.

System integrators and identity providers: deliver EUDI projects on ForTrust technology — hosted, dedicated or fully white-label — with our engineering behind you and your name in front. Partner terms designed so the integrator wins.

Join the partner programme →
Build vs. buy

What building in-house costs

We know precisely, because we built it.

Build it yourself

  • 18–24 months before the first verified presentation
  • Specialist team: COSE/CBOR, SD-JWT, ISO 18013-5 BLE/NFC, trust infrastructure
  • Conformance suites, interop debugging against every wallet on the market
  • A moving target: ARF releases keep coming while you build
  • All of it off your core roadmap

Run on ForTrust

  • Pilot running in ~30 days, on your use case
  • Conformance-tested, interoperability already demonstrated
  • Standards tracked for you — updates land as releases
  • Open standards end-to-end: you can leave — which is why you can safely stay
  • Your team ships your product, not identity plumbing

Pilot — ~30 days

Your use case, real phones, your data. A working demo your board can hold in hand.

Production

Hosted, dedicated deployment or white-label — with SLAs, audit trails and your compliance team in the loop.

Scale

New credential types, new markets, new channels — same platform, same contract.

Scope a 30-day pilot →

Solutions

What our customers build

Age Verification

Prove age_over_18 — or any other age threshold — without unnecessary disclosure of identity.

Prove age. Not identity. →

Enterprise Credentials

Employee ID, membership, role, entitlement and access rights — issued by your organisation, verified anywhere.

University & Education

Student status, diplomas, professional qualifications and other educational attestations as verifiable EAAs.

Government & Public Sector

Technology for PID, mDL and other official credentials — integrated with the competent authority and its authentic sources.

Financial Services Integration

EUDI identity & attribute verification for regulated onboarding. ForTrust delivers verifiable credentials and attributes to the financial institution or the specialised provider responsible for the KYC/AML process.

Legal Person / Business Wallet In development · pilot

LPID, mandates, representation, signatory rights and powers of attorney for organisations.

Join the pilot programme — talk to us.
Developers

“How do I connect?”

ForTrust is a technical product — so the technical answer is one click away, with real endpoints, not marketing.

# Request a verified presentation (your RP credentials required)
GET https://dwallet.fortrust.ro/verifier/vp/request/?fields=family_name,given_name

# → { "qr_uri": "...", "request_uri": "...", "state": "...", "dcql_query": {...} }
# The user scans, consents in their wallet — you receive verified claims as JSON.

For developers →

FAQ

Questions a CISO asks first

Is ForTrust a certified EUDI wallet?

ForTrust is EUDI-ready technology, conformance-tested with the official OpenID Foundation suite and interoperability-tested against the EU reference environment. Formal certification and national accreditations are pursued together with each deployment — we say exactly what is proven, and prove what we say.

Do we have to buy the whole stack?

No. Every component runs on open standards, so you can use only the issuance, verification, wallet or trust layer you need — and swap any of them for a third-party implementation later.

How fast can we integrate?

If your application speaks OpenID Connect, days: redirect to /authorize, receive verified claims as JSON. A full pilot on your use case typically runs in about 30 days.

Does verification work offline?

Yes — face-to-face verification over BLE/NFC per ISO 18013-5 runs with no internet, using cached trust anchors and status lists on the verifier device.

Where does the citizen's data live?

In their wallet, on their device, protected by hardware-bound keys. A relying party receives only the attributes the citizen approves — cryptographically signed, with an audit trail.

Can we white-label it?

Yes — integrators and resellers can deliver the full experience under their own brand, with ForTrust engineering behind them. Ask about the partner programme.

Contact

A demo takes 30 minutes.

Tell us your sector and the flow you care about — onboarding with PID, age verification, check-in, access control — and we will show it live, on real phones.

Business
office@fortrust.ro
Technical support
suport@fortrust.ro
Platform
dwallet.fortrust.ro