Signicat, the Norwegian digital identity provider, has appointed TÜV Austria as its sole Conformity Assessment Body (CAB) for all eIDAS-related audits, replacing a fragmented arrangement in which five separate CABs assessed different parts of its business. The consolidation, announced on 20 October 2026, is a direct consequence of the company’s M&A-driven expansion and the growing regulatory demands of eIDAS 2.0.

The company’s acquisition trail had left it with compliance assessments spread across multiple bodies in different European jurisdictions. That structure added administrative overhead and made it harder for customers in regulated sectors, primarily banking, insurance and financial services, to get a coherent picture of Signicat’s compliance posture across its full service catalogue.

Why a single CAB matters under eIDAS 2.0

The timing of the consolidation is not incidental. The revised eIDAS regulation, eIDAS 2.0, establishes the framework for the EU Digital Identity Wallet and places new conformity assessment obligations on trust service providers. Signicat is already a participant in several of the EU’s large-scale wallet pilots, including WE BUILD, Aptitude, NOBID and EWC. Operating under a single CAB simplifies the audit trail as wallet interoperability standards are formalised, and makes it easier to combine eIDAS assessments with adjacent certifications such as ISO 27001 and SOC 2.

Jon Ølnes, VP of digital Identity and regulation at Signicat, said the company ran a formal request-for-information process among its existing CABs before selecting TÜV Austria. “We decided to run an RFI among the CABs and TÜV Austria had the best solutions and services to consolidate the situation and for the changes ahead as EUDI Wallets are introduced across Europe.”

TÜV Austria already assessed Signicat’s identity proofing service, giving it an existing baseline of the company’s technical environment. The transition to single-CAB coverage will be phased to avoid gaps in continuous compliance, according to the company.

Market and regulatory context

The consolidation reflects a broader maturation dynamic in the European digital identity sector. The European Commission has targeted adoption of an EU Digital Identity Wallet by 80 per cent of EU citizens by 2030, a target that is driving commercial demand for verifiable trust services and pushing providers to demonstrate audit-grade compliance at scale. Juniper Research has estimated the global digital identity market will reach 80 billion dollars by the same year, though such long-range market sizing projections carry wide uncertainty.

For Signicat’s bank and fintech customers, the practical benefit is transparency. A single CAB produces a unified compliance view that aligns more naturally with how regulated financial institutions conduct their own third-party due diligence. Banks operating under the EU’s Digital Operational Resilience Act, which came into full effect in January 2025, face stricter obligations around the oversight of critical technology suppliers, and a cleaner audit structure from a supplier reduces friction in that process.

Signicat, backed by Nordic Capital since 2019, serves more than 20,000 customers across 45 countries and employs over 530 people in 15 European markets. The company’s positioning as a pan-European identity orchestration layer means the quality and legibility of its compliance architecture is a commercial differentiator, particularly as the EUDI Wallet rollout draws in public-sector and cross-border use cases where multiple national supervisory bodies will scrutinise the underlying trust infrastructure.

The post Signicat Names TÜV Austria Sole CAB for eIDAS 2.0 Compliance appeared first on The Fintech Times.