ACURIS AS EUDI WALLET VERIFIER · THE WALLET PROVES WHO — ACURIS MAKES THE ADDRESS USABLE
A Verifier service for banks, insurers, payment service providers, telecoms, and other regulated industries that must accept EUDI Wallet credentials by the end of 2027 — built in Germany, governed under German and EU law, and integrated into a 240+-country address-validation reference database.
The EU Digital Identity Wallet is a mobile app that every EU citizen and resident will have access to by December 2026, mandated by Regulation (EU) 2024/1183 (eIDAS 2.0). It holds verifiable digital credentials — government identity, driving licence, address attestations, professional qualifications — and lets users share specific attributes with services that need them.
The privacy innovation is selective disclosure: a user can prove their address without revealing their name, or prove they're over 18 without revealing their date of birth. This is a fundamental shift in how identity verification works across the EU economy.
By the end of 2027, banks, insurers, payment service providers, telecoms, and other regulated entities operating in the EU must accept EUDI Wallet credentials for identity verification. That requires each of those entities to integrate with a Verifier — a service that receives credentials from users' wallets, validates them cryptographically against the EU Trust List, and returns a structured response.
That's where Acuris fits.
Acuris operates a dedicated Verifier service whose differentiator is address intelligence: the full cryptographic verification every Verifier must perform, plus the layer that makes the disclosed address operational — live in production at eudi.acuris-geo.com. The Acuris EUDI Wallet Verifier:
accuracy_type (Verified, Corrected, Partial, Unverified) and a confidence scoreWhy an address layer, when the credential is government-signed? Because the signature proves registration, not operational usability. The PID address arrives in the issuing member state’s register format — one of 27 national conventions — and a registered address is not automatically a deliverable, system-ready one. Acuris converts a legally attested address into an operational one: standardised to your core system’s format, ready for the bureau and sanctions matching that follows wallet verification (name-plus-address matching lives or dies on format), geocoded, and flagged for deliverability risk. The wallet proves who; Acuris makes the address usable.
In a customer flow: a bank's onboarding screen shows "Verify your address — open your EUDI Wallet." The user approves on their phone, the credential flows to Acuris, and the bank receives a structured response within seconds. No utility bill upload. No manual review. No PII exposure to the bank beyond the address itself.
Acuris is developing this capability in three explicit phases. We're publishing the roadmap because we'd rather be straight with customers than over-promise.
Working OID4VP endpoint, SD-JWT VC parsing with hash-commitment enforcement, address cross-reference against the live Acuris reference-data pipeline. Proved the protocol layer end-to-end with mocked trust validation. Phase 2 replaced the mock.
EU LOTL + German national TSL fetched and XAdES-verified at boot. Six OJ-authorised LOTL signing certs pinned (OJEU C/2026/1944) for rotation resilience via the EU pivot mechanism. Real X.509 cert-chain validation against the German Bundesnetzagentur TSL. CRL revocation. Production deployment live at eudi.acuris-geo.com with Let's Encrypt TLS, mTLS for bank-facing endpoints, Redis-backed sessions, structured audit logging.
National Trusted Lists for all 27 EU member states plus Iceland, Liechtenstein, and Norway fetched and XAdES-verified at boot in parallel — 30 of 30 national TSLs live, ~1,100 granted-qualified QTSP roots populating the trust state in under two seconds. A credential issued by any qualified trust service provider in the EU or EEA can now be cryptographically anchored back to the EU List of Trusted Lists with no per-country code path. 158 of 158 tests passing.
LOTL pivot monitoring with alerting on EC certificate rotations and 15-day-transition awareness, gunicorn under nginx for production-grade concurrency, Prometheus metrics + Grafana dashboards, real-wallet end-to-end testing against pilot wallets (walt.id reference, plus POTENTIAL Large-Scale Pilot wallets as they ship). Aligned with the end-of-2027 regulatory deadline for regulated industries.
We're tracking the EUDI Wallet rollout closely — beta wallets are live in Germany, Italy, and Sweden, with the full December 2026 deadline approaching for all EU member states.
The Acuris Verifier accepts qualified credentials issued by any qualified trust service provider in any EU or EEA member state. At boot, the verifier fetches the EU List of Trusted Lists, then in parallel fetches and XAdES-verifies the national TSL for each territory below. The result: a single trust state covering the whole bloc, refreshed on every restart, with cryptographic chain-of-trust back to the OJEU-published LOTL signing keys.
National TSLs are published by each member state's eIDAS supervisory body (Bundesnetzagentur for Germany, ANSSI for France, AgID for Italy, and so on) and signed by certificates that the EU LOTL itself attests to. The Acuris Verifier resolves the full chain — LOTL signer → national TSL signer → qualified trust service provider → issuing certificate — on every boot, with no manual per-country wiring.
The EUDI Wallet is a sovereignty-grade infrastructure decision for the EU. Regulated industries verifying identity through it want their Verifier to share that sovereignty posture:
If you're a regulated entity preparing for EUDI Wallet acceptance — or a consultancy advising one — we'd value a conversation. Our team takes these enquiries directly.
Read the architecture brief (PDF)Tell us what's working or what's missing. Sent anonymously unless you're signed in.
Your feedback went straight to the team.