IDnow x Obserwatorium.biz
How Obserwatorium.biz helped IDnow Trust Services AB
become an eIDAS 2.0-certified QTSP
In 2024, IDnow launched IDnow Trust Services AB. As part of the process to become an eIDAS 2.0-certified Qualified Trust Service Provider, IDnow Trust Services AB was required to undergo an independent conformity assessment, and selected Obserwatorium.biz as its trusted assessment partner.
About IDnow
IDnow is Europe’s leading identity verification platform provider. Founded in Munich in 2014, it has grown from a startup into a global scale-up trusted by over 600 customers, including Solaris, BNP Paribas, DEKRA, Holvi, and many more across financial services, telecommunications, gaming, travel and mobility, and other industries.
The launch of IDnow Trust Services AB significantly broadened IDnow’s product offering to include a range of trust services, including Qualified Time Stamps, Qualified Seals, Qualified Electronic Attestation of Attributes (QEAA) and more.
Challenges
The project had a simple, but ambitious aim: launch a Qualified Trust Service Provider within a timeframe of six months. This involved not only designing operational capabilities but also ensuring readiness for an external eIDAS 2.0 conformity assessment.
Key challenges included:
- Establishing the necessary organisational structure, roles, and responsibilities required for operating as a Qualified Trust Service Provider
- Designing end-to-end business, security, and operational processes aligned with eIDAS 2.0 and ETSI standards
- Developing a comprehensive and auditable documentation framework
- Aligning internal practices with regulatory expectations and audit requirements
- Ensuring cross-functional alignment across legal, technical, and operational domains under significant time pressure
The interdependencies between these areas, combined with the complexity of new eIDAS requirements, required a highly coordinated and structured approach.
Scope of cooperation
Obserwatorium.biz supported IDnow Trust Services AB throughout the entire project lifecycle, combining advisory, knowledge transfer, and hands-on support.
Getting IDnow Trust Services AB audit-ready required:
- Conducting structured workshops and training sessions to build internal understanding of regulatory requirements and audit expectations
- Supporting the design of organisational governance, including definition of trusted roles and allocation of responsibilities
- Developing and structuring security and operational processes required by services compliant to eIDAS 2.0 regulation
- Preparing and consolidating a comprehensive documentation framework, including trust service policies, procedures, and supporting materials for audit readiness
- Delivering continuous advisory support during the preparation phase and throughout the audit process
Knowledge transfer was continuous and adaptive, ensuring support aligned with evolving project needs rather than limited to predefined sessions. Close coordination between teams enabled efficient prioritisation, risk monitoring, and timely delivery of required components. To achieve organisational, regulatory, and operational readiness within the timeframe of six months, Obserwatorium.biz provided:
- Continuous expert support
- An adaptive knowledge transfer approach, focusing on real-time needs and practical application
- Strong cross-functional collaboration between teams, ensuring alignment across legal, technical, and operational perspectives
- A structured and iterative approach to documentation and process development
Results & business outcomes
As a result of the collaboration, IDnow Trust Services AB successfully completed the eIDAS 2.0 conformity assessment process and achieved a positive audit outcome, confirming compliance with applicable regulatory and ETSI standards.
A comprehensive governance and operating model were established, supported by a complete set of documentation, policies, and procedures embedded within formal security and operational processes.
IDnow Trust Services AB was officially approved by the Swedish supervisory body, PTS, and is now listed on the EU Trust List on the eIDAS Dashboard. As the EU Trust List is maintained by the European Commission, it provides full regulatory recognition across the European Union. The frameworks developed during the project continue to be maintained and further enhanced to address evolving regulatory requirements, including developments related to NIS2 and related standards.
The cooperation between IDnow Trust Services AB and Obserwatorium.biz has continued beyond the initial project scope, reflecting an ongoing partnership focused on maintaining compliance and supporting further development of trust services capabilities, including qualified archiving.
For IDnow customers, the impact of establishing IDnow Trust Services AB goes far beyond a compliance milestone. The IDnow Trust Platform, which combines all identity verification and qualified trust services, including digital signatures, qualified electronic seals and time stamps, into one platform and one customer experience. This means less complexity, faster procurement, and complete confidence in every transaction.
“This project is a testament to what focused collaboration and genuine client alignment can achieve. We set an ambitious target, worked shoulder-to-shoulder with the IDnow Trust Services AB team to hit it, and built something that will keep delivering value long after the audit was done” – said Marcin Wolski, expert Obserwatorium.biz
Why does IDnow recommend working with Obserwatorium.biz?
“Achieving QTSP status in six months was a bold ambition. Obserwatorium.biz made it a reality. Through IDnow Trust Services AB, IDnow is now uniquely positioned to offer customers a seamless, end-to-end experience that combines IDnow’s leading identity verification capabilities with qualified trust services” – said Johannes Leser, CEO of IDnow Trust Services AB.