A detailed look into SSI and the current projects including the EU Data Wallet
- Home /
- Blog Posts /
- A detailed look into SSI and the current projects including the EU Data Wallet
- Nick Vermeulen
- Privacy , SD-JWT , eIDAS , SSI
- 26 September 2025 · Updated 26 September 2025 · 22 min read
Table Of Contents
Navigating the Evolving Landscape of Self-Sovereign Identity: From Failures to Future Promises
TL;DR
Self-sovereign identity (SSI) is advancing but fragmented: Sovrin’s shutdown in 2025 underscores funding and adoption woes, while standards like AnonCreds (zero-knowledge proofs ZKPs for deep privacy) and SD‑JWT (lightweight web disclosure) compete. Projects like cheqd.io, Dock, and ION drive innovation, but interoperability lags. The EU’s EUDI Wallet, rolling out by 2026 with pilots testing cross-border creds, could unify implementations in one user‑controlled app—enabling seamless, consent‑based data sharing and digital sovereignty.
Hey there, digital nomads and privacy enthusiasts!
If you’ve ever dreamed of owning your online identity like you own your wallet—complete with verifiable credentials, selective sharing, and zero Big Tech oversight—you’re not alone. Self-sovereign identity (SSI) is the tech world’s answer to reclaiming control over our personal data. But as we hit the tail end of 2025, the SSI space is a mixed bag: groundbreaking innovations, stubborn standards wars, and some high-profile stumbles. Drawing from a deep dive into the ecosystem, let’s unpack the current status of SSI, spotlight the Sovrin saga, explore competing standards, and envision how the EU’s Digital Identity (EUDI) Wallet could be the interoperability glue that ties it all together for everyday users. Buckle up—this is your comprehensive guide to where SSI stands today and where it’s headed. Get ready we are heading into the world of Verifiable Credentials (VCs).
The Rise and Fall of Sovrin: A Cautionary Tale in SSI
SSI burst onto the scene with promises of decentralized, user-centric identity systems, and few projects embodied that hype like Sovrin. Launched in 2016-2017 by the Sovrin Foundation, this blockchain-based platform aimed to create a global public utility for verifiable digital credentials using Hyperledger Indy tech. It championed privacy through zero-knowledge proofs (ZKPs), allowing users to prove attributes (like “I’m over 21”) without spilling unnecessary details. The great white hope!
But here’s the plot twist: Sovrin didn’t “fail” so much as it became unsustainable. By February 2025, the Foundation announced that the MainNet ledger shutdown was likely on or before March 31, 2025. Participation and funding dwindled as the ecosystem shifted.
Sovrin’s legacy? AnonCreds lives on as an open specification under Hyperledger with ledger‑agnostic implementations. Projects like cheqd provide migration paths to preserve selective disclosure and revocation patterns. Lesson learned: SSI needs sustainable funding and broad adoption, not just innovative crypto, enter stage left the EU Data Wallet project.
Competing Standards: A Battlefield of Privacy and Interoperability
SSI isn’t short on ideas, but it’s drowning in standards—each vying to be the go-to for verifiable credentials. At the heart are formats like AnonCreds and SD-JWT, which enable users to hold and present digital proofs without central authorities.
-
AnonCreds: Born from Sovrin/Indy, this ZKP-heavy spec shines in privacy: think CL signatures for blinded issuance, predicates (e.g., proving “age >= 21” without showing your birthdate), and accumulator-based revocation that keeps things unlinkable. It’s computationally intensive but gold for sensitive use cases like health records. Now decoupled from ledgers, it works with any Verifiable Data Registry (VDR), from blockchains to simple servers. What is not to like?
-
SD-JWT (Selective Disclosure JSON Web Token): An IETF darling, this extends standard JWTs with hashed claims and salts for lightweight disclosure. It’s web-friendly, integrates with OAuth/OpenID, and supports nested structures—but lacks native predicates or ZKP revocation, relying on external mechanisms like status lists. Easier on performance, it’s great for quick verifications in apps, though weaker against collusion or advanced attacks.
These aren’t alone. W3C’s Verifiable Credentials Data Model (VCDM) defines the data model; common encodings include VC-JWT (JOSE) and Data Integrity (e.g., Ed25519Signature2020, BBS+). The IETF specifies the SD‑JWT VC profile. AnonCreds is a separate specification with bridges to VCDM in some stacks, but it’s not itself a VCDM format. Then there’s ISO’s Mobile Driving Licence (mDL) for physical‑digital hybrids. Work on BBS+ signatures continues, but support varies by implementation.
The rub? Fragmentation. AnonCreds excels in deep privacy for decentralised setups, while SD-JWT prioritises simplicity for web ecosystems. Without bridges, users end up juggling wallets and apps, diluting SSI’s “self-sovereign” promise.
Standards status (late 2025): the core SD‑JWT draft has been submitted to the IESG for publication, and the SD‑JWT VC draft adds rendering/integrity metadata and claim path semantics—useful for wallet UX and verifier display. BBS+ work within W3C Data Integrity remains in progress and availability differs across implementations.
The Current Players: Projects Pushing SSI Forward
Despite Sovrin’s wind-down, SSI is buzzing with activity. Here’s a snapshot of key projects as of late 2025:
-
cheqd.io: A Cosmos-based blockchain for SSI, blending Decentralised Identifier (DIDs), VCs, and privacy payments. It supports AnonCreds, SD-JWT, and OpenID4VC, with Trust Registries for verifiable AI agents. Recent wins include an alliance with Dock and participation in industry accelerator programmes. It’s all about monetising trusted data without surveillance.
-
Dock Labs: Post-merger with cheqd, Dock focuses on enterprise credentials via the Dock Platform—reusable KYC, biometrics binding, and selective disclosure. It’s Substrate-rooted but now leverages cheqd’s chain for lower costs.
-
ION (Identity Overlay Network): A permissionless DID network anchored on Bitcoin via the Sidetree protocol—no new token and no extra consensus. Microsoft Entra Verified ID supports did:ion alongside did:web; FaceCheck for liveness/matching reached GA on 2024‑08‑12. Entra’s revocation approach uses status lists.
-
walt.id: A toolkit powerhouse with SDKs for issuers, wallets, and verifiers. Blockchain-agnostic, it emphasises eIDAS compliance and quick deployments—think embedding wallets in apps without building from scratch.
Other notables: IOTA Identity (feeless DAG for cross-border KYC), Polygon ID (ZKPs on Ethereum), Metadium (token-governed for Asian enterprises), Trinsic (API-driven for reusable IDs), Hyperledger Identus (open-source agents from Indy roots), Veramo (modular JS for multi-chain), Evernym (cybersecurity-integrated), Tykn (humanitarian focus), and SpruceID (Ethereum libraries).
The trend? Hybrid models blending decentralised tech with regulatory nods, especially in Europe. But interoperability remains the elephant in the room—users want one wallet, not a dozen.
The EUDI Wallet: A Beacon for Interoperability and User-Centric Identity
Enter the EU Digital Identity (EUDI) Wallet, the game-changer that could unify this mess. Mandated by eIDAS 2.0, it’s a secure mobile app for storing Person Identification Data (PID) and attributes, rolling out across EU states by 2026. Think: one wallet for IDs, diplomas, prescriptions, and payments, with ZKPs/SD-JWT for selective sharing.
How could it bridge competing standards? The EUDI’s Architecture and Reference Framework (ARF) v2.4.0 frames the stack with clear modality and trust models:
- Remote flows: OpenID for Verifiable Presentations (OpenID4VP) and Credential Issuance (OpenID4VCI).
- Proximity flows: ISO/IEC 18013‑5/7 (mDL/mdoc) with HAIP.
- Credentials: SD‑JWT VC profile for selective disclosure in the current ARF line.
- Trust: PKI‑based Trusted Lists and Trust Registries as the anchor—not blockchains; qualified e‑signatures (QES) are required “by default and free of charge” for legal effects.
- Revocation: Status‑list based (for example, W3C VC Status List 2021) in ARF contexts, rather than accumulator proofs.
Pilots as proof: Ongoing tests (e.g., WE BUILD for business wallets, APTITUDE for travel/payments) demonstrate cross‑border journeys and UX/accessibility lessons.
Imagine: A user loads their credentials into the EUDI Wallet. Via OpenID for Verifiable Presentations (OpenID4VP) and OpenID for Verifiable Credential Issuance (OpenID4VCI) flows, they consent to share just “degree type” with a job verifier or “age proof” for a bar app. In ARF‑profiled contexts, revocation is handled via status lists.
For end-users, this means one location for all data: sovereign control, granular consents, and seamless cross-border use. No more app-hopping—consent once, share selectively, revoke anytime. Pilots like DC4EU (education/social security) and NOBID (payments) show it’s feasible, with blockchain backends preventing correlation.
Wrapping Up: SSI’s Path to Everyday Reality
SSI in 2025 is resilient but fragmented—Sovrin’s fade-out underscores the need for sustainable models, while standards like AnonCreds and SD-JWT duke it out for dominance. Yet, with projects like cheqd, Dock, and walt.id innovating, and Microsoft’s ION adding enterprise polish, the ecosystem is maturing.
The EUDI Wallet could be the catalyst, enforcing interoperability and putting users first. By 2027, we might see a world where your digital self is truly yours—one wallet, infinite possibilities. If you’re building in SSI, start eyeing EU pilots for collab opportunities. What’s your take—will EUDI crack the code, or is more chaos ahead? Drop a comment below!
Appendix: Additional Data Tables for SSI Insights
To dive deeper into the specifics mentioned in the post, here are some handy tables. First, a breakdown of the EU Digital Identity (EUDI) Wallet pilot projects, which are crucial for testing interoperability and real-world application. Then, I’ve included comparison tables from our discussions on key SSI projects like cheqd vs. Dock and cheqd vs. Microsoft ION for quick reference.
Table 1: EU Digital Identity (EUDI) Wallet Pilot Projects Overview
| Pilot Name | Objectives | Timeline | Involved Parties | Use Cases Tested | Status/Outcomes |
|---|---|---|---|---|---|
| EU Digital Wallet Consortium (EWC) | Leverage EU digital identity for Digital Travel Credentials, enhancing privacy-preserving access and industrial transformation. | April 2023 – September 2025 (Concluded) | 41 partners and 35 associates from all 27 EU Member States, including public authorities, SMEs, and digital identity experts. | Digital Travel Credentials (e.g., passports, visas, tickets, check-ins); cross-border public-private engagements. | Concluded with assemblies (e.g., Madrid 2024), LPID rulebook publication, and contributions to Reference Wallet interoperability. Emphasized user sovereignty. |
| Digital Credentials for Europe (DC4EU) | Support interoperable digital services in education and social security under cross-border trust frameworks. | April 2023 – September 2025 (Concluded) | Led by Spain; involves nearly all EU Member States, educational institutions, social security agencies, SMEs, and EBSI components. | Educational credentials (e.g., diplomas); social security onboarding (e.g., selfies, eID for benefits). | Concluded; provided insights on EBSI complexity and Dutch Wallet challenges; delivered privacy blueprints for EU Toolbox. |
| NOBID Consortium | Pilot EUDI Wallet for secure, cross-border payment authorizations, fostering public-private collaboration. | April 2023 – September 2025 (Concluded) | Nordic/Baltic countries, Italy, Germany’s DSGV; includes banks, fintechs, and governments. | Payment authorizations, bank account openings, digital signatures, identity matching. | Concluded; gathered usability feedback; contributed to innovation learnings and policy recommendations on strong authentication. |
| POTENTIAL | Foster innovation in six sectors by testing EUDI Wallet integrations. | April 2023 – September 2025 (Concluded) | Led by Luxembourg’s Ministry of Digitalisation; partners from multiple Member States, public-private entities. | Governmental services, banking, telecom, mDL, e-signatures, health (e.g., ePrescriptions). | Concluded; tested wallet effectiveness; provided Commission recommendations on interoperable national wallets and security. |
| WE BUILD Consortium | Design trusted digital business identity ecosystem for eIDAS 2.0 compliance, streamlining processes. | September 2025 – 2027 (Active) | iSHARE Foundation, Signicat, Raidiam, Youverse, Digidentity, iGrant.io; co-funded by EU, involving Member States and enterprises. | EU Business Wallets for organizational identity, payments (B2B/B2G/B2C), KYC, passwordless auth. | Active; early focus on real-world KYC improvements; expected to inform 2026 rollout. |
| APTITUDE | Advance trusted digital identities for seamless travel and payments, demonstrating interoperability. | September 2025 – 2027 (Active) | SITA, Indicio, and EU-funded partners from aviation and fintech sectors. | Travel (e.g., Digital Travel Credentials, mVRC); payments with cross-border emphasis. | Active; launched as milestone; emphasizes verifiable AI agents and privacy for 2026 mandates. |
Table 2: cheqd vs. Dock Features Comparison
| Feature Category | cheqd | Dock |
|---|---|---|
| Blockchain Base & Network | Cosmos SDK; permissionless public network with stable governance. | Originally Substrate (Polkadot); migrated to cheqd for cost reductions. |
| Standards & Protocols | SD-JWT, W3C VCDM, OpenID4VC, AnonCreds (ZKPs), DIDComm, eIDAS 2.0. | W3C DIDs/VCs; supports mDL verification, selective disclosure. |
| Privacy & Security | ZKPs, selective disclosure, privacy-preserving payments; Fee Stability. | Selective disclosure, biometrics binding, fraud detection, encryption. |
| Credential Issuance & Verification | VC issuance with payments; Trust Registries. | Full-stack via Dock Platform; reusable KYC/KYB; delegatable authority. |
| Products & Tools | cheqd Studio, SDKs (Credo, ACA-Py, Veramo); EVM integrations. | Dock Platform, REST API, Wallet SDK; bespoke integrations. |
| Payments & Tokenomics | $CHEQ for governance/staking/payments. | Pre-merger $DOCK (now $CHEQ); monetizes verifications. |
| Governance & Community | Decentralized staking/voting; partnerships like Dock, VERA. | Community-driven; aligns with cheqd post-merger. |
| Unique Aspects & Use Cases | AI integration, eID/data marketplaces; counters surveillance. | SSI for IAM/KYC; reduces onboarding friction; fraud-proof credentials. |
| Recent Updates (2025) | AI Identity Pact (July), Fee Stability (July); Dock integration (August). | Updated guides (September); merger FAQs and migration (February). |
Table 3: cheqd vs. Microsoft ION (with Entra Verified ID) Features Comparison
| Feature Category | cheqd | Microsoft ION (with Entra Verified ID) |
|---|---|---|
| Blockchain Base & Network | Cosmos SDK; permissionless L1 with IBC interoperability. | Sidetree on Bitcoin (L2); permissionless, no sidechain; Entra on Azure. |
| Standards & Protocols | SD-JWT, W3C VCDM, OpenID4VC, AnonCreds, DIDComm, eIDAS 2.0. | W3C DIDs (did:ion, did:web), VCDM; limited to JWT-VC. |
| Privacy & Security | ZKPs, selective disclosure, privacy payments; Trust Registries. | Tamper-evident DIDs; FaceCheck (encrypted biometrics); no native ZKPs. |
| Credential Issuance & Verification | Issuance with incentives; revocation via status lists (AnonCreds accumulators in some stacks). | Entra API for VC issuance/verification; DID resolution via ION. |
| Products & Tools | cheqd Studio, SDKs; customizable for enterprises. | Entra service with APIs, Authenticator wallet; ION open-source nodes. |
| Payments & Tokenomics | $CHEQ for governance/payments. | No token; Bitcoin anchoring (feeless); Entra subscription-based. |
| Governance & Community | Decentralized staking; partnerships (e.g., Dock). | Open-source (DIF); Microsoft-governed for Entra. |
| Unique Aspects & Use Cases | AI agents, CeDeFi; Web3/privacy apps. | Enterprise IAM, KYC; high-assurance biometrics. |
| Recent Updates (2025) | EVM integrations, AI Pact; enterprise pilots. | No major ION updates; Entra network hardening (Oct 2024), FaceCheck GA (Aug 2024). |
These tables add depth to the SSI discussion, highlighting practical implementations and comparisons. Feel free to slot them into the blog for better flow!
Table 4: What are each of the EU Member States doing?
Under the eIDAS 2.0 regulation, which came into force in May 2024, all EU Member States are mandated to provide at least one EU Digital Identity (EUDI) Wallet to their citizens, residents, and businesses by 2026. This user-controlled digital wallet enables secure storage and sharing of verifiable credentials (e.g., IDs, diplomas, licences) with privacy features like selective disclosure. The rollout must be completed by the end of 2026, with some flexibility based on implementing acts (e.g., technical specifications). Member States are participating in large-scale pilots to test interoperability and use cases, ensuring compliance while building on existing national eID systems. The table below summarises each state’s status, timeline, and key actions as of September 2025.
| Country | Commitment/Status | Timeline | Key Actions/Pilots |
|---|---|---|---|
| Austria | Provide EUDI Wallet; pilots involved. | By 2026 | General pilots (travel, education). |
| Belgium | Provide EUDI Wallet; pilots involved. | By 2026 | Interoperability focus. |
| Bulgaria | Provide EUDI Wallet; planning phase. | By 2026 | No specifics; lagging. |
| Croatia | Provide EUDI Wallet; planning phase. | By 2026 | General pilots. |
| Cyprus | Provide EUDI Wallet; pilots involved. | By 2026 | Wallet features testing. |
| Czech Republic | Provide EUDI Wallet; pilots involved. | By 2026 | DC4EU (education/social). |
| Denmark | Provide EUDI Wallet; MitID active. | By 2026 | NOBID (payments); DC4EU (benefits). |
| Estonia | Provide EUDI Wallet; pilots involved. | By 2026 | NOBID (Nordic/Baltic payments). |
| Finland | Provide EUDI Wallet; pilots with FINeID/BankID. | By 2026 | POTENTIAL (19 countries); EWC (ID/travel). |
| France | Provide EUDI Wallet; France Identité launched. | By 2026 | Services, bank, mDL, NOBID, EWC. |
| Germany | Provide EUDI Wallet; national eID active. | By 2026 | NOBID, EWC, DC4EU; services, education. |
| Greece | Provide EUDI Wallet; ERMIS/smartcard active. | By 2026 | Services, bank, mDL, EWC, DC4EU. |
| Hungary | Provide EUDI Wallet; pilots involved. | By 2026 | Cross-border testing. |
| Ireland | Provide EUDI Wallet; pilots involved. | By 2026 | DC4EU (education/social). |
| Italy | Provide EUDI Wallet; national IO App active. | By 2026 | NOBID (payments). |
| Latvia | Provide EUDI Wallet; NOBID involved. | By 2026 | Nordic/Baltic payments (NOBID). |
| Lithuania | Provide EUDI Wallet; pilots involved. | By 2026 | NOBID (Nordic/Baltic). |
| Luxembourg | Provide EUDI Wallet; LuxTrust active. | By 2026 | Leads POTENTIAL; services, EWC, DC4EU. |
| Malta | Provide EUDI Wallet; planning phase. | By 2026 | General commitment. |
| Netherlands | Provide EUDI Wallet; DigiD active. | By 2026 | Services, mDL, NOBID, EWC, DC4EU. |
| Poland | Provide EUDI Wallet; pilots involved. | By 2026 | DC4EU (education/social). |
| Portugal | Provide EUDI Wallet; pilots involved. | By 2026 | Cross-border services. |
| Romania | Provide EUDI Wallet; planning phase. | By 2026 | Preparation lagging. |
| Slovakia | Provide EUDI Wallet; pilots involved. | By 2026 | POTENTIAL participation. |
| Slovenia | Provide EUDI Wallet; smartcard/mobile ID active. | By 2026 | Services, bank, DC4EU. |
| Spain | Provide EUDI Wallet; leads DC4EU. | By 2026 | DC4EU (education/social). |
| Sweden | Provide EUDI Wallet; BankID/Freja eID+ active. | By 2026 | NOBID, EWC, DC4EU. |
Appendix: What is the DC4EU Project?
The DC4EU Project
The Digital Credentials for Europe (DC4EU) is one of the four initial large-scale pilots under the EU Digital Identity Wallet (EUDIW) initiative, funded by the European Commission to test the interoperability, usability, and scalability of the EUDI Wallet in real-world scenarios. Launched in April 2023 and concluded in September 2025, the project focused on the education and social security sectors, aiming to enable cross-border exchange of verifiable credentials while aligning with eIDAS 2.0 and the European Blockchain Services Infrastructure (EBSI).
Key details include:
- Objectives: To develop and pilot digital services for issuing and verifying educational credentials (e.g., diplomas, micro-credentials) and social security entitlements (e.g., Portable Document A1 for worker mobility and European Health Insurance Card). It emphasized privacy-preserving hybridization for cross-sectoral use cases, providing feedback for EUDI Wallet refinements.
- Partners: Led by Spain’s Secretaría General de Administración Digital, with co-leads from Greece (GUNET, GRNet), Austria (Dachverband der Sozialversicherungsträger), Finland (VM Ministry of Finance), and others like Géant, SUNET, and the European Campus Card Association. Involves nearly all EU Member States, educational institutions, social security agencies, and tech providers.
- Use Cases: Onboarding base identities, education domain (credentials issuance), social security (PDA1 execution, EHIC), integrations with existing systems, and ecosystem building for policy support.
- Outcomes/Status: As of September 2025, the project has concluded, delivering blueprints for privacy-focused credential exchange, technical insights on EBSI, and recommendations to the EU Toolbox. It tested full wallet journeys and contributed to the broader EUDI rollout by 2026.
DC4EU highlights the EU’s push for user-centric SSI in public services, influencing standards like W3C VCDM and OID4VC.
Appendix: Other Global Standards and Initiatives
Other Global Standards
While the EUDI Wallet sets a benchmark for decentralised, privacy-focused digital identities in Europe, several global alternatives compete or offer parallel approaches, often emphasising national sovereignty, mobile integration, or centralised control. These draw from standards like ISO/IEC 18013-5 (for mobile driver’s licences) and NIST guidelines, contrasting EUDI’s cross-border focus with more localised or tech-specific implementations. Here’s a brief overview:
- United States Mobile Driver’s Licence (mDL): Based on ISO/IEC 18013-5, this standard enables digital wallets for driver’s licences and IDs, adopted in over 10 states (e.g., California, Arizona). Key features: Selective disclosure via ZKPs, NFC/QR for verification. Compares to EUDI by focusing on mobility and privacy but lacks EU-style cross-state mandates, leading to fragmentation; influenced by NIST SP 800-63 for federal guidelines.
- Singapore’s Singpass: A centralized national digital ID system with a wallet app for over 4 million users, supporting biometrics and verifiable credentials for services like banking and healthcare. Uses custom standards with OAuth integration; competes with EUDI’s decentralization by prioritizing efficiency in a single-nation context, but raises privacy concerns due to government control.
- Australia’s myGov Wallet: Part of the myGovID system, it stores credentials for government services using ISO standards for mDL. Features include biometric auth and data minimisation; similar to EUDI in user control but more centralised, with pilots for international interoperability (e.g., with New Zealand).
- India’s DigiLocker: A cloud-based wallet for documents and credentials, integrated with Aadhaar (biometric ID). Relies on national standards with API access for verification; differs from EUDI’s SSI by being more centralized and scale-focused (over 200 million users), but shares goals of reducing paperwork.
- Global mDL Initiatives (e.g., via AAMVA in North America): Promote ISO 18013 for vehicle-related IDs, with pilots in Canada and Mexico. Emphasize offline capabilities and security; compete with EUDI by targeting transport sectors but lack broad credential support.
These standards often intersect with W3C (e.g., DIDs) but prioritize regional needs, potentially leading to global fragmentation unless harmonized through bodies like the UN or ISO. EUDI’s edge lies in its mandatory EU-wide adoption, which could influence international norms.
Appendix: Comparison of UK Identity Assurance Principles with EUDI Wallet Implementation
This appendix compares the UK Government’s Identity Assurance Principles (as outlined in the provided document) with the implementation in the EU Digital Identity (EUDI) Wallet ecosystem. The EUDI Wallet, governed by eIDAS 2.0 and the Architecture and Reference Framework (ARF), emphasizes user-centric design, privacy by default, and interoperability. The comparison is based on official ARF documentation, highlighting alignments, implementations, and any gaps as of September 2025.
Comparison Table: UK Principles vs. EUDI Wallet Handling
| Principle | UK Description (Summary) | EUDI Wallet Alignment/Implementation | Relevant EUDI References/Notes |
|---|---|---|---|
| 1. User Control | Users must consent or approve all identity assurance activities affecting them; no compulsion to use the service. | Strong alignment: Requires explicit user approval for attribute presentation, issuance, and cryptographic operations (e.g., via PIN/biometrics). Selective disclosure allows denial of requests. No mandatory use; alternatives must be offered. | ARF 2.2, 6.6.2.5, 6.6.3.5, 6.5.3; Topic 6, Topic 43 (Annex 2). GDPR consent requirements enforced. |
| 2. Transparency | Activities must be fully informed and understandable; clear descriptions and justifications provided. | Aligned: Users informed of unregistered attribute requests, disclosure policies, and transaction logs via dashboards. Trust Marks display certification details. Changes require prior notice. | ARF 2.2, 6.5.3.6, 6.6.3.3–6.6.3.4, 6.6.3.13, 4.2.1; Topic 19 (Annex 2). Public ARF documentation ensures openness. |
| 3. Multiplicity | Users can choose and use multiple identifiers freely; no linking of accounts without consent. | Partial alignment: Supports multiple PIDs for multi-national users and Passkey selection. Users can switch providers, but details on full identifier flexibility are limited; no unauthorized linking. | ARF 2.5, 4.3.1, 4.7.2.4, 5.2.2; Topic 11 (Annex 2). Interoperability promotes choice, but pseudonyms not explicitly detailed. |
| 4. Data Minimisation | Only minimum data necessary for interactions; data deletion post-use. | Strong alignment: Selective disclosure via SD-JWT/ISO 18013-5; verifies requests against registered needs. Limited-time attestations and privacy by design minimize retention. | ARF 2.2, 4.2.3, 5.3.2–5.3.3, 6.6.3.3, 6.6.2.7, 7.4.3.5.2; Topics 10, 43 (Annex 2). GDPR Art. 5(1)(c) enforced. |
| 5. Data Quality | Users choose when to update records; appropriate assurance levels for changes. | Partial alignment: Supports re-issuance for attribute updates (e.g., age changes); users informed of needs. Backup/restore aids management, but user-initiated updates not fully detailed. | ARF 2.3, 6.5.4, 6.6.5.2.3; Topics 33–34 (Annex 2). Relies on issuers for accuracy, with user prompts. |
| 6. Service User Access and Portability | Users get copies of data on request; can move/remove data anytime. | Aligned: Dashboard logs for transaction access; supports backup, restore, and migration between wallets. Deletion of attestations/keys; requests to delete presented data via interfaces. | ARF 6.6.3.3; Topics 33–34 (Annex 2). GDPR portability (Art. 20) integrated for data export. |
| 7. Certification | All participants certified against common standards; revocation for non-compliance. | Strong alignment: Wallets, providers, and relying parties certified under eIDAS 2.0; privacy impact assessments and audits required. Trust Marks verify compliance; revocation possible. | ARF 4.2.1, 6.6.3.13; eIDAS 2.0 Art. 6a–6d. Independent certification bodies ensure standards like ISO 27001. |
| 8. Dispute Resolution | Independent third-party resolution for disputes; group complaints and recommendations. | Aligned: National supervisory authorities and EU-level mechanisms (e.g., EDPB) handle complaints. Users can escalate via GDPR processes; independent audits and reporting. | eIDAS 2.0 Art. 45; GDPR Art. 77–79. National data protection authorities act as third parties. |
| 9. Exceptional Circumstances | Exceptions approved by Parliament with independent scrutiny; justified under ECHR Art. 8(2). | Aligned: Exceptions limited to GDPR bases (e.g., national security, crime prevention); subject to proportionality, necessity, and oversight by courts/EDPB. Privacy impact assessments required. | GDPR Art. 23; eIDAS 2.0 Art. 5(2). EU Parliament scrutiny via regulations; no broad exemptions without justification. |
References (selected)
-
Sovrin Foundation. “Sovrin Foundation MainNet Ledger Shutdown Likely on or before March 31, 2025.” Sovrin.org, February 8, 2025.
-
IETF. “Selective Disclosure for JWTs (SD-JWT).” Draft −22, May 29, 2025.
-
OAuth. “SD-JWT-based Verifiable Credentials (SD-JWT VC).” Draft, July 29, 2025.
-
EUDI Wallet Dev Hub. “Architecture and Reference Framework (v2.4.0).” Accessed September 26, 2025.
-
Microsoft Learn. “Microsoft Entra Verified ID — What’s New.” Accessed September 26, 2025.
Appendix: Extended references
-
Sovrin Foundation. “Sovrin Foundation MainNet Ledger Shutdown Likely on or before March 31, 2025.” Sovrin.org, February 8, 2025.
-
Hughes, Riley. “An End of an Era: Sovrin Foundation Announced.” LinkedIn, October 21, 2024.
-
ID Tech Wire. "‘The Community Moved On’: Sovrin Announces MainNet’s ‘Likely Shutdown’." IDTechWire.com, October 21, 2024.
-
cheqd. “Sovrin Mainnet Shutdown: What It Means for Your Ecosystem.” cheqd.io, October 24, 2024.
-
Hyperledger. “AnonCreds Specification.” Hyperledger GitHub, Accessed September 26, 2025.
-
Hyperledger. “Hyperledger AnonCreds.” LF Decentralized Trust, Accessed September 26, 2025.
-
Hyperledger. “AnonCreds Project.” LF Decentralized Trust, Accessed September 26, 2025.
-
IETF. “Selective Disclosure for JWTs (SD-JWT).” Datatracker.ietf.org, May 29, 2025.
-
walt.id. “What is Selective Disclosure?” walt.id Docs, July 22, 2025.
-
OAuth. “SD-JWT-based Verifiable Credentials (SD-JWT VC).” Drafts.oauth.net, July 29, 2025.
-
cheqd. “The Digital Identity Industry Layers.” cheqd.io, August 18, 2025.
-
cheqd. “Welcome to a New Era for Decentralised Identity.” cheqd.io, Accessed September 26, 2025.
-
cheqd. “cheqd: The Payment & Trust Infrastructure for Credentials.” cheqd.io, Accessed September 26, 2025.
-
cheqd. “cheqd’s Partnership Network with Leading Self-Sovereign Identity Vendors.” cheqd.io, Accessed September 26, 2025.
-
cheqd. “VERA and cheqd Partner to Launch Verified Digital Identity.” cheqd.io, June 10, 2025.
-
cheqd. "$CHEQ $DOCK Token Merger Approved." cheqd.io, September 18, 2024.
-
Dock Labs. “Dock Labs and cheqd Form Alliance.” Dock.io, February 21, 2025.
-
cheqd. “Success Story: Dock Labs and cheqd Integration.” cheqd.io, Accessed September 26, 2025.
-
DIF. “ION - An Open, Public, Permissionless Decentralized Identifier Network.” Identity.foundation, Accessed September 26, 2025.
-
Microsoft. “Decentralized Identity and the Path to Digital Privacy.” Microsoft.com, May 15, 2019.
-
Microsoft Learn. “Microsoft Entra Verified ID — What’s New.” Accessed September 26, 2025.
-
GitHub. “decentralized-identity/ion.” GitHub.com, Accessed September 26, 2025.
-
walt.id. “Digital Identity Infrastructure.” walt.id, Accessed September 26, 2025.
-
walt.id. “Identity Wallet Infrastructure.” walt.id, Accessed September 26, 2025.
-
walt.id. “Decentralized Identity Infrastructure that Works Across Ecosystems.” walt.id, Accessed September 26, 2025.
-
European Commission. “EU Digital Identity Wallet Home.” Ec.europa.eu, Accessed September 26, 2025.
-
iGrant.io. “The EUDI Wallet (eIDAS 2.0) - A Business Guide.” Docs.igrant.io, July 31, 2025.
-
Talao. “EUDI Wallet and eIDAS 2: A Complete Guide.” Talao.io, October 14, 2024.
-
EUDI Wallet Dev Hub. “Architecture and Reference Framework.” Eu-digital-identity-wallet.github.io, Accessed September 26, 2025.
-
European Commission. “EU Digital Identity Wallet Pilot Implementation.” Digital-strategy.ec.europa.eu, Accessed September 26, 2025.
-
European Commission. “What are the Large Scale Pilot Projects.” Ec.europa.eu, September 17, 2025.
-
EUDI Wallet Consortium. “EUDI Wallet Consortium: Home.” Eudiwalletconsortium.org, Accessed September 26, 2025.
-
NOBID Consortium. “NOBID Wraps Up Pilot.” Nobidconsortium.com, September 8, 2025.
-
David Birch. “Two European Digital Identity Wallet Pilots to Start in Autumn 2025.” David275.substack.com, August 20, 2025.
-
Biometric Update. “New EU Large Scale Pilots Launch.” Biometricupdate.com, September 2, 2025.
-
ISC2. “Understanding the European Digital Identity Wallet.” Isc2.org, April 8, 2025.
-
POTENTIAL. “Potential - For European Digital Identity: Accueil.” Digital-identity-wallet.eu, Accessed September 26, 2025.
-
IOTA. “IOTA Identity Framework.” Docs.iota.org, Accessed September 26, 2025.
-
IOTA. “Privacy-Preserving Digital Identity with DLT.” Iota.org, Accessed September 26, 2025.
-
GitHub. “iotaledger/identity.” GitHub.com, Accessed September 26, 2025.
-
Biometric Update. “IOTA Decentralized Identity Framework Reaches Alpha.” Biometricupdate.com, March 19, 2025.
-
Polygon. “Polygon ID is More than Biometric Proof of Personhood.” Polygon.technology, August 17, 2023.
-
Polygon. “Introducing Polygon ID, Zero-Knowledge Identity for Web3.” Polygon.technology, March 29, 2022.
-
Verida. “Polygon ID and Verida Make Zero-Knowledge Credentials Accessible.” News.verida.network, May 10, 2023.
-
zkMe. “zkMe on PolygonID — Quick Start Guide.” Medium.com, December 19, 2023.
-
Metadium. “Metadium - Decentralized Compliant Innovation.” Metadium.com, Accessed September 26, 2025.
-
Blockchain.com. “How to Buy Metadium.” Blockchain.com, Accessed September 26, 2025.
-
CoinMarketCap. “What Is Metadium (META) And How Does It Work?” Coinmarketcap.com, August 2, 2025.
-
Trinsic. “Tag: SSI.” Trinsic.id, Accessed September 26, 2025.
-
Trinsic. “SSI and the Cloud.” Trinsic.id, July 14, 2020.
-
Hughes, Riley. “Why Verifiable Credentials Aren’t Widely Adopted.” Medium.com, October 15, 2024.
-
Hyperledger. “hyperledger-identus/hyperledger-identus.” GitHub.com, Accessed September 26, 2025.
-
LF Decentralized Trust. “Identus.” Lfdecentralizedtrust.org, Accessed September 26, 2025.
-
IOHK. “Hyperledger Identus – Then, Now, and Tomorrow.” Iohk.io, January 26, 2025.
-
Veramo. “Veramo - A JavaScript Framework for Verifiable Data.” Veramo.io, Accessed September 26, 2025.
-
GitHub. “decentralized-identity/veramo.” GitHub.com, Accessed September 26, 2025.
-
Avast. “Evernym Joins Avast.” Blog.avast.com, December 9, 2021.
-
CoinDesk. “Avast Acquires Self-Sovereign Identity Firm Evernym.” Coindesk.com, December 9, 2021.
-
SpruceID. “SpruceID.” Spruceid.com, Accessed September 26, 2025.
-
SpruceID. “What is Decentralized Identity?” Blog.spruceid.com, June 13, 2024.
-
SpruceID. “The ABC’s of Decentralized Identity.” Blog.spruceid.com, October 19, 2022.