We build compliance-critical systems. Here we write about what we learn — engineering patterns, identity infrastructure, product decisions, and the regulations that shape them all.
Browse all articles ↓
Watch
The first episode of The Digital Trust Podcast — Kristiana Kuneva asks Jeroen van Hertum what digital trust actually is, why it is a communication problem more than a security one, and what the European Digital Identity Wallet means well before 2027.
The most trusted digital platforms are consistently the most intuitive to use. The false choice between security and experience is a design problem, not a technical constraint, and it comes from security that arrives late.
Quantum computers will eventually break the public-key cryptography most digital infrastructure relies on. Europe has already set the migration timetable: start by end of 2026, high-risk systems by 2030, everything else by 2035. The first step is knowing where your cryptography and your keys actually are.
eIDAS 2.0 is not an upgrade to your identity and access management stack. It is a regulation that changes who owns user identity at a structural level: the user holds the credential, and your platform becomes a verifier rather than an owner.
eIDAS 2.0 requires regulated platforms to accept the EU Digital Identity Wallet by December 2027. Here's the implementation guide for product and engineering teams: registration, OID4VP, SD-JWT VC, and the 16-22 week timeline to get there.
The EU digital identity wallet will let every citizen authenticate, store, share, and sign documents digitally by the end of 2026. Here's what it means for individuals, businesses, and the public sector.
Digital trust is the confidence a user has that a platform will protect their data, behave as promised, work when needed, and hold up under regulatory scrutiny.
We publish new thinking every four weeks. No noise — just ideas from the team actually building these systems.
Subscribe to updates