EUDI conformance, certification and testing
Conformance testing checks behaviour against a defined protocol profile. Certification assesses specified requirements under a scheme. Neither proves that every end-to-end deployment is secure, private, usable or interoperable in every configuration.
OpenID4VP and OpenID4VCI conformance tests with HAIP are available. EUDI wallet cybersecurity certification work and national implementation should be checked for current scheme status before making claims.
For: assurance, security, procurement, architecture and audit teams. This is independent information, not legal, compliance or security advice.
Evidence types
| Evidence | What it addresses |
|---|---|
| Protocol conformance | Expected positive and negative protocol behaviour |
| Security certification | Defined controls and product scope under a scheme |
| Interoperability test | Whether named implementations complete tested flows |
| Penetration/security test | Selected threats in a defined version and environment |
| Operational pilot | Real journey, integration and support evidence |
Read the certificate
- Scheme, issuer and current status.
- Product, version, components and configuration.
- Assurance level, exclusions and dependencies.
- Issue, expiry, surveillance and change rules.
- Public report or registry entry supporting the claim.
Test the gaps
Even a conformant component needs trust configuration, secure deployment, session binding, privacy controls, accessible UX, incident handling and correct integration with the service decision. Test negative and fallback flows, not only a successful credential presentation.
Procurement wording
Require evidence covering the proposed production version before launch and a process for material changes. Avoid broad claims such as 'EUDI certified' unless the exact applicable certification scheme and product scope support them.
Evidence and limits
MyID separates enacted rules, official implementation material, testing and vendor claims. A source can establish what its publisher says; it does not prove that every product, deployment or interpretation works as claimed. Where Irish implementation remains unsettled, this page says so.
- OpenID4VP and OpenID4VCI conformance programme
- ENISA Digital Identity Standards
- European Commission implementing regulations
- European Commission EUDI Wallet Toolbox and ARF
Sources checked 22 August 2026. Re-check the linked primary material before making a consequential decision.
Next useful pages
Follow the Irish evidence
Get the business briefing when Irish wallet, verification and age-assurance evidence changes.
Join the business briefing