eIDAS 2.0 & Procivis One

Situation within the EU

The updated (EU) 910/2014 regulation - aka. eIDAS 2.0 regulation mandates an implementation of the European DigitalIdentity (EUDI) Wallet and infrastructure by end of 2026, requiring governments to make critical decisions now.

Challenge for European Governments

These decisions involve mastering multiple implementation acts, the Architecture and Reference Framework (ARF), analysis of open-source blueprints like the EU Reference Implementation and a balanced approach towards costs, risks and future adaptability.

It's not an "Or" - it's an "And": Full Production-Readiness with the EU Reference Implementation and Procivis One.

With Procivis One, governments don't have to choose between a DIY project with the EU reference implementation* as a base or an external solution with potential vendor lock-in: Procivis One as an open-source technology can build upon the EU's code AND additionally brings a persistence layer, setup & management capabilities, flexibility, scalability, security and user management of an enterprise-ready system to the table.

* The EU commission states that the EU reference implementation’s code acts as a sample implementation, production-readiness is not in scope.

Procivis One reduces interoperability challenges through Country Profiles

ProcivisOne reduces interoperability challenges through Country ProfilesProcivis anticipates up to 27 slightly different eIDAS2.0 implementations, therefore ongoing interoperability was made a key feature. With Procivis One, governments can define distinct country profiles and multiple versions of a single standard. This reduces interoperability challenges with existing national systems or future cross-border requirements. 

As of now, Procivis One is conformant with allrelevant standards and interoperable with the EU reference implementation* andthe Swiss SWIYU sandbox.

* country-specific schemas will be added after theyhave been finalized and published.

Ensuring trust management, wallet unit attestation and governance

For eIDAS 2.0 compliance, governments need to implement a trust management framework that defines authorities for oversight and onboarding while addressing citizen needs like intuitive onboarding, multi-device support and cross-border use cases. Procivis One includes various protocols, is expandable and meets the technical requirements of W3C, eIDAS 2.0 and the Swiss E-ID ecosystem, as well as highest data protection requirements.

Code governance – enterprise ready

Under eIDAS 2.0, open-source requirements mean that all software components — including third-party libraries — must comply with transparency and traceability standards. Therefore, Procivis One comes with a complete Software Bill of Materials (SBOM) for every release. And that’s why Procivis stays ISO-certified, provides extensive documentation, has external security audits carried out, penetration testing and performs effective code governance.

Fully GDPR compliant while keeping flexibility for the future

eIDAS 2.0 is not static and GDPR compliance is not optional. With Procivis One, governments stay flexible to changes in national legal frameworks and emerging technical standards (new credential types, cryptographic advancements) without requiring complete re-architecture. Procivis One fully supports GDPR compliance* with its features such as audit logging, deletion mechanisms, and encryption of personal data at rest and in transit.  

* Note that Procivis One provides the technical means, while the implementation determines how they are applied in practice.