Our WSCA becomes part of a national EUDI Wallet
Behind every digital wallet lies a trust infrastructure that enables security, authenticity and interoperability. An essential component of that infrastructure is the Wallet Secure Cryptographic Application (WSCA). We are proud that the Cleverbase WSCA will be part of the implementation of the EUDI Wallet in a European member state.
Jul 24, 2026
The WSCA protects the critical keys in a wallet and keeps them under the sole control of the user. For every operation, the WSCA verifies two factors: the PIN the user knows and the phone the user has. This verification is tied to the specific transaction, such as placing a signature or decrypting data, and irrefutable evidence of every operation is recorded. This allows us to offer strong guarantees on the smartphones people already carry with them today. The user approves a complete transaction with a single action, even if it consists of multiple operations, while the wallet provider configures access entirely according to its own security policy.
By the end of 2026, every EU member state must make at least one EU Digital Identity Wallet available. The regulation requires that critical assets, such as the user’s keys, are managed by a WSCA. The requirements are set out in Implementing Regulation (EU) 2024/2979 (Article 5), and Implementing Regulation (EU) 2024/2981 requires certification of the wallet solution, including the WSCA. Our WSCA was designed to meet these requirements. We are undergoing evaluation under the EU Cybersecurity Certification Scheme (EUCC) based on Common Criteria EAL4+, with Brightsight as the independent, accredited conformity assessment body. The fact that a member state is including our WSCA in the implementation of its national wallet is a great confirmation for us that our technology meets the high standards Europe sets for digital identity.
Our WSCA is based on open standards such as OAuth 2.0 and aligns with the Our WSCA is based on open standards such as OAuth 2.0 and aligns with the Architecture and Reference Framework (ARF). The technical specifications and source code are transparent, so you can verify our approach yourself instead of taking our word for it. Wallet providers run the WSCA as a server application in their own secure environment, with supported HSMs as the WSCD, or use it as a SaaS hosted by Cleverbase. In both cases, they integrate the client libraries into their wallet apps. The solution scales horizontally on open source Linux servers and works on any smartphone with Secure Enclave, StrongBox or TEE, as well as in web wallets.
In the coming years, every member state will build an EUDI Wallet, and in the private sector a growing number of parties are working on wallets of their own. For all of these solutions, a certified WSCA is an essential component. Looking for one for your wallet, or want to explore the possibilities? We would be happy to talk. We look forward to contributing to a secure and interoperable European identity landscape.
Want to talk about your wallet?
Schedule an introduction to learn more or to sit down with Sander Dijkhuis (CTO).