Identity Verification by Evrotrust

Evrotrust performs remote identity verification using certified workflows. Users verify their identity by scanning identity documents and completing liveness checks. This provides out-of-the-box eIDAS (Electronic IDentification, Authentication and trust Services) compliance with no additional certification requirements for your organization.

The Registration Authority (RA) is the entity responsible for verifying user identity before issuing certificates for e-signatures. Who acts as the Registration Authority affects certificate validity and your compliance responsibilities.



When Evrotrust Acts as Registration Authority

When you integrate Evrotrust's e-Identification service with the WebSDK, Evrotrust assumes the Registration Authority role. Identity verifications performed through the WebSDK can be used directly for e-signatures by including the Reference ID in your signing requests.

What this means:

  • Evrotrust handles Registration Authority responsibilities
  • Certificates have long-term validity
  • Streamlined workflow from identification to signing

When Your Organization Acts as Registration Authority

If e-Identification is not integrated (WebSDK) or not yet available (mobile SDK), your organization acts as the Registration Authority. You must sign a RA IDV statement (a document that attests to the identity verification process) with each signing request.

What this means:

  • Your organization assumes Registration Authority responsibilities
  • Include RA IDV statement in every signing request
  • Certificates have short-term validity


Overview of Scenarios

Integration ScenarioRegistration AuthorityCertificate Validity
WebSDK with e-Identification integratedEvrotrustLong-term
WebSDK without e-Identification integrationYour organizationShort-term
Mobile SDKYour organizationShort-term