Lutra Labs 🦦

🪪 Introducing LutraID — the EU Business Wallet Imagine a world where paperwork disappears, documents move instantly, and business workflows run automatically across Europe. We’re building exactly that. id.lutralabs.io

Less than a week until @podimconference 2026! ⏳ Don’t forget to stop by our Startup Marketplace booth on Tuesday, May 12 in the afternoon. 😉

Opening a bank account should be simple, secure, and fully digital 🏦 In the second episode of the LutraID Showcase Series, we demonstrate how a user can open a bank account by presenting their Person Identification Data (PID) directly from their digital wallet. No sending screenshots of personal documents. No sharing more data than needed. Just a smooth, trusted flow between the user, their wallet, and the bank. This demo shows how the @EUdigitalID ecosystem can make identity verification faster, more secure, and easier to use in real-world financial services. youtu.be/yib5W5zkhQM?si…

Excited to announce we’re heading to @podimconference 2026 - one of the biggest startup & tech events in the Alps-Adria region! 🌐 Looking forward to meeting great people and talking about European Digital Identity & Wallets (@EUdigitalID) + our product LutraID. Also find us at the Startup Marketplace booth on Tuesday, May 12 (afternoon). See you in Maribor, May 11–13! 👋

Meet the LutraID Showcase Series 🔍 We’re excited to launch the LutraID Showcase Series: a series of real, hands-on demos showing exactly how the @EUdigitalID (EUDI Wallet) ecosystem will work in everyday life. From secure document issuance to seamless verification across different platforms, there’s no better way to demonstrate what the user journey will actually look like. This week, we start with the foundation: issuance of the Person Identification Data (PID) – the first step of your digital identity. More episodes coming in the next weeks. Stay tuned and get ready to see the future unfold ✨ youtu.be/duUdLMplLvg?si…

🔧 Behind the scenes: two powerful digital document formats that are powering the @EUdigitalID (EUDIW) mDoc (ISO/IEC 18013-5) is the standardized high-assurance format that uses a compact CBOR-based structure and the Mobile Security Object (MSO) for strong cryptographic security. It is already widely adopted in the United States for mobile driver’s licenses (mDLs) and excels in proximity scenarios (BLE, NFC) with efficient selective disclosure and offline support. SD-JWT VC (IETF) builds upon the widely adopted JSON Web Token (JWT) standard, adding built-in selective disclosure through salted hashes, strong cryptographic key binding, and seamless integration with web technologies and OpenID flows - making it ideal for remote verification. Both formats are central to eIDAS 2.0 for Person Identification Data (PID) and other types of digital documents (EAAs). They give citizens true data minimization - sharing only what’s needed, when it’s needed. At LutraID, we are actively working on issuance, wallet integration, and verification for both mDoc and SD-JWT VC. If you are interested in implementing or testing with the EUDI Wallet, let’s connect! 👇 id.lutralabs.io

🔍 It looks like the first explorations of ZKPs in the @EUdigitalID (EUDIW) are slowly taking shape. The first integrations of zero-knowledge proofs (ZKPs) are now appearing in the EUDIW libraries, with ZK circuits being built in the @NoirLang programming language from @aztecnetwork . ZKPs are cryptographic methods that enable proving statements without revealing the underlying data. EUDIW was designed to keep personal data securely stored locally in the user’s mobile wallet. This gives individuals true self-sovereignty and full control over when and what they share. Adding ZKPs takes privacy even further: it minimizes data disclosure, reduces linkability across multiple presentations, and strengthens user privacy while keeping the wallet easy to use. A meaningful step forward for privacy-preserving digital identity. 🔒 github.com/eu-digital-ide…

🌍 Another use case spotlight: Vehicle Registration Certificate Say goodbye to old, faded paper vehicle documents in your glove box. The @EUdigitalID (EUDIW) will let you store a secure digital Vehicle Registration Certificate (VRC). It proves your vehicle’s registration and legal compliance with national and European road rules. Key benefits: - Much easier to carry and access anytime - Instant, secure sharing with police, insurers, or when selling or renting the vehicle - No need to manually copy data onto other physical documents when sharing information There will be a strong focus on delegation, making it easy to share the VRC with family members or other drivers while keeping full control (this will be very interesting to explore!). We will no longer have to worry about carrying yet another document with us when going for a drive. 🚗 👉 More EUDIW use cases: ec.europa.eu/digital-buildi…

What are the key dates for eIDAS 2.0 and the future of digital identity ( @EUdigitalID ) in Europe? 🇪🇺 In December 2024, the first implementing acts for the European Digital Identity Wallet (EUDI Wallet) were introduced, defining the technical standards and framework needed to make the system work in practice. This is an important distinction. While the regulation itself (eIDAS 2.0) entered into force in May 2024, these implementing acts are what actually enable real-world deployment. By the end of 2026, every EU member state must provide at least one EUDI Wallet to citizens, and public sector services must accept it. This marks the transition from regulation to real infrastructure and availability across Europe. By the end of 2027, adoption will expand broadly across the private sector, but it will be mandatory only for specific regulated sectors and designated platforms. Industries such as finance, telecom, and energy, as well as very large online platforms (VLOPs), will be required to accept EUDI Wallets for identity verification upon user request. In practice, 2025–2026 will be a build and rollout phase driven by standards and pilots, while 2027 onward marks the shift to full-scale adoption. Now is the time for companies to prepare, understand the upcoming changes, and start exploring how digital identity will impact their products and services 📊 Learn more about eIDAS 2.0: eur-lex.europa.eu/legal-content/… id.lutralabs.io

As the @EUdigitalID rollout gets closer, we're seeing a rapid expansion of real-world use cases and digital document types. 🔐 Person Identification Data (PID), driving licences, insurance documents, payment authorizations, the European Parking Card (EPC), e-Prescriptions, Digital Travel Credentials (DTC), and many others. Each use case defines document schemas, roles of entities and organizations, trust frameworks, and the foundations needed to ensure legal validity and interoperability. 🌍 You can find more about the use case manuals here: ec.europa.eu/digital-buildi…

Another milestone achieved: Issuance of Mobile Driving License (mDL) in mDoc format 📱🎉 Check out the credential being received in the @paradym_id wallet!

As the @EUdigitalID takes shape, it helps to understand that not all digital documents are the same. 🔐 The main difference comes down to who issues the document and what level of assurance and legal effect it carries. In the EUDI Wallet ecosystem, the key document types are EAA, QEAA, and Pub-EAA. Alongside these, the wallet also contains PID (Person Identification Data), which is used to establish identity itself rather than to attest specific attributes. EAA stands for "Electronic Attestation of Attributes". These can be issued by a wide range of private sector entities and are suitable for lower-assurance use cases, such as membership cards, tickets, or other everyday digital proofs. They can still serve as evidence, but they do not carry the same legal effect as a paper document. QEAA stands for "Qualified Electronic Attestation of Attributes". These are issued by trust service providers that meet additional regulatory and compliance requirements. Typical examples include diplomas and mobile driving licences. A QEAA has the same legal effect as a paper attestation, which gives it the highest level of assurance and strong cross-border trust. Pub-EAA refers to an "Electronic Attestation of Attributes issued by or on behalf of a public sector body", based on authentic public sources. These credentials are tied to official government records, such as proof of residence or other state-backed attestations. Like QEAAs, they have the same legal effect as lawfully issued paper attestations. 🏛️ A simple way to think about it: - EAA = useful digital proof, lower assurance - QEAA = qualified proof, highest assurance - Pub-EAA = official public-source proof, high assurance tied to government records The real opportunity with the EUDI Wallet is not just to digitise documents, but to make their trust level explicit, portable, and interoperable across Europe. It is about creating a trust framework where each credential carries the right level of assurance for the right use case.

💼 The European Business Wallet will provide businesses with powerful software to simplify communication and interaction with other companies and government bodies across the European Union. It creates a unified, secure digital environment for cross-border operations. Four main interaction models are planned: • Business-to-Business (B2B): Businesses can digitally exchange data and documents while proving and verifying partner attributes in real time. This includes legal status, domain certificates, and other licenses. • Business-to-Government (B2G): Businesses can seamlessly submit data such as tax filings, VAT declarations, customs documentation and public procurement submissions. This reduces bureaucracy and eliminates fragmented national portals and physical paperwork. • Government-to-Government (G2G): Public bodies can exchange cross-border data like residency and company registration information. Communication happens over secure and encrypted channels. • Government-to-Business (G2B): Governments issue licenses, permits, and certificates directly into business wallets. These credentials are instantly verifiable and reusable across the EU. An important step toward standardizing secure digital communication between legal entities across the European Union. 🇪🇺

SD-JWT document verification ✅ On to refining, improving, and building the next features.

Age verification is becoming one of the most sensitive digital policy questions in Europe 1️⃣8️⃣ With the Digital Services Act in force and countries such as France, Spain, Portugal (reuters.com/world/europe/p…), Denmark and Slovenia tightening or considering stricter rules, platforms are under real pressure to implement effective age checks. Many digital platforms are also considering the introduction of age verification checks: bbc.com/news/articles/… But what is wrong with many current approaches? • Users are asked to upload photos of identity documents • Facial scans and intrusive biometric checks are becoming common • External KYC providers collect and process highly sensitive data • Copies of IDs circulate across multiple systems • Centralised databases become attractive targets for data breaches In trying to protect minors, we risk normalising large scale identity collection. If age verification becomes a permanent layer of the internet, it must be privacy preserving by design. This is where the @EUdigitalID, EUDIW, is critical 🇪🇺 Through selective disclosure, a user shares only the necessary attribute, for example their birthdate or confirmation that they are over 18. No document copy and no excess personal details. The user remains in full control and decides what is disclosed. Zero knowledge proofs (ZKPs) can take this even one step further 🔐 Instead of even sharing a birthdate, a person can simply prove that they meet an age threshold. Only the answer is revealed, not the underlying data. We should take the time to carefully evaluate and choose the right solutions, rather than rushing into intrusive models that may shape our digital future in the wrong direction.

This week, another exciting and important topic! A bit longer than usual, but essential for understanding how digital trust actually works in practice. We’ll take a quick look at electronic signatures and eSeals, and why they matter in the context of the @EUdigitalID (EUDIW) and the European Business Wallet (EBW). The eIDAS Regulation (2014) introduced a common EU framework for electronic identification and trust services, ensuring that electronic signatures and seals are legally recognised across Member States. With eIDAS 2.0 (2024), this framework is significantly extended by introducing digital identity wallets, enabling these trust services to be used seamlessly at scale by citizens and businesses across Europe. 🔏 Electronic signatures allow individuals to sign documents online in a secure, trusted, and legally recognised way across the EU. At the qualified level, electronic signatures have the same legal effect as handwritten signatures. This is achieved through the use of the signer’s digital certificate, which cryptographically links the signature to the individual. Electronic seals (eSeals) are used by organisations to guarantee the origin and integrity of digital documents, functioning like a digital company stamp that proves a document was issued by a specific organisation and has not been altered. 📱 What this means for EUDIW and EBW  The EUDI Wallet will allow individuals and businesses to store, present, and use electronic signatures and digital documents or attestations directly from their mobile wallet, making digital signing seamless and secure across the EU. The EBW provides a full digital identity solution for organisations, enabling them to authenticate themselves and electronically sign or seal official documents with full legal effect across borders, significantly reducing friction in B2B and B2G interactions and simplifying them. Together, eIDAS 2.0 and software components like EUDIW and EBW finally provide the missing building blocks to move from paper-based, manual processes to digital and trusted workflows across Europe. 🇪🇺 In upcoming posts, we’ll dive deeper into the technical details and implementation aspects behind these capabilities! id.lutralabs.io

🩺 The third key use case of the @EUdigitalID (EUDIW): digital insurance documents After Personal Identification (PID) and the digital driving license, the third major use case of the EUDIW will be digital insurance documents. These will include: - Life insurance - Vehicle insurance - Travel / foreign insurance - Other insurance-related documents Insurance documents will be issued digitally and stored directly in the user’s mobile identity wallet, ready to be shared whenever proof of coverage is required.  Verification becomes instant - without manual checks or document uploads. Thanks to cryptographic verification, insurance documents are tamper-proof and impossible to fake. 🔁 A dual role for insurance companies Insurance providers will act as: - Issuers of digital insurance credentials - Verifiers of PID data during onboarding or claims processing This leads to faster processes, higher trust, and better privacy for all parties involved. This is one of the most interesting EUDIW use cases, as it’s the right moment to standardize insurance documents and make them easy and secure to share — not only with insurers, but also with service providers like auto repair shops, hospitals, and others where insurance is used. 🇪🇺

Happy data privacy day!

🚗 Another key use case of the @EUdigitalID (EUDIW): the digital driving license Following Personal Identification (PID), one of the next major use cases of the EUDIW will be the digital driving license. 📱 What changes for EU citizens? Instead of relying solely on a physical driving license card, citizens will be able to store a digital driving license directly in their mobile digital identity wallet — valid across the EU. This digital credential will be usable in both: - Physical interactions (traffic stops, car rentals, inspections) - Digital interactions (online car rentals, insurance platforms, mobility services) 🔁 How sharing works Just like with PID, users remain fully in control. When a relying party requests information, the wallet will share only the required attributes, such as: - Confirmation of a valid driving license - License categories (e.g. B, C, D) - Issue or expiry date No need to reveal unnecessary personal data. 1️⃣ Privacy-first verification Relying parties receive proof, not documents. For example, a car rental service can verify: - “Is this person allowed to drive this vehicle category?” without accessing the full identity of the driver. 2️⃣ Instant, tamper-proof checks Verification is cryptographically secured: - No visual inspection - No forgery - No photos or scans of driving licenses - No manual validation Everything is verified instantly and reliably. 🚦 Beyond the card The digital driving license opens the door to: - Cross-border recognition - Easier renewals and updates - Integration with vehicle, insurance, and mobility ecosystems 👉 This is only the second step. More EUDIW use cases are coming — including vehicle registration, insurance credentials, and many others. Stay tuned! id.lutralabs.io

🔧 Busy building 👀 European Business Wallets (EBWs) 🇪🇺 · End of 2026

🤔 How can identity wallets and all ecosystem players — issuers, verifiers, and software providers — seamlessly communicate? Interoperability requires shared standards and clear rules. For the @EUdigitalID (EUDIW), this is addressed through the Architecture Reference Framework (ARF). The ARF defines a common technical and architectural foundation so wallets and services built by different vendors and Member States can work together securely and across borders. First released in 2023, the ARF continues to evolve alongside large-scale pilots, with further technical guidelines and refinements planned. It defines, among other things: - roles and trust models - issuance and verification flows - alignment with standards like W3C Verifiable Credentials, OpenID (OIDC4VCI, OIDC4VP), and ISO/IEC 18013-5 (mdoc, mDL) If EUDIW is the vision, ARF is the blueprint 🗺️ Check out the ARF here: eudi.dev/2.4.0/architec…