Digital identity sovereignty & device attestation

Evaluate wallet security without confusing regulatory compliance, hardware-backed key protection and dependence on proprietary platform services.

Build requirements brief Read evidence and limitations

Independent research, not certification: This page compares technical procurement requirements, not verified products. We do not assign provider-specific Google independence, OS support or eIDAS certification without supporting evidence.

Terminology: Native Android hardware key attestation and Google Play Integrity are not interchangeable. An implementation can avoid Play Integrity while still depending on specific Android hardware or trusted attestation roots.

Interactive procurement checklist

Build your supplier assessment brief

Choose the constraints that matter. The brief updates immediately. It is not a scored vendor ranking or a claim that any listed provider meets these requirements.

Architecture due diligence

What buyers should verify

Platform integrity

Is Google Play Integrity mandatory, optional or absent? Is Apple's attestation used on iOS, and for which risks? Request a platform-specific architecture diagram.

Device binding

How are credentials linked to hardware-backed keys or a secure cryptographic device? Review key provisioning, renewal, revocation and fallback paths.

Alternative operating systems

Ask which exact OS builds and devices have been tested. Avoid assuming GrapheneOS, /e/OS or sideloading works without device-specific test evidence.

Primary sources and documented examples

European Commission EUDI Architecture and Reference Framework - architecture and interoperability baseline
European Commission EUDI Wallet Toolbox - technical reference framework and reference implementation
Swiss federal swiyu wallet security approach - describes a planned Android path without Google Play Integrity; Switzerland is not an EU Member State and swiyu is not automatically an EUDI-certified wallet

Last editorial review: 3 November 2026. Sources document frameworks or stated approaches, not audits of suppliers on this platform.

Qualified B2B inquiry

Request a vendor introduction

Send your brief for manual review. We do not promise an eligible supplier or contact providers automatically.

Are you a provider?

Submit evidence about key attestation, operating-system support, EUDI interfaces and any claimed independence from proprietary services for editorial assessment.

Submit or update a provider profile

Submissions are not endorsements. The existing provider directory and matching service remain unchanged.