eIDAS

Statute European Union · 2014

eIDAS is the EU regulation governing electronic identification and trust services — including the qualified website (QWAC) and seal (QSEAL) certificates that identify regulated third parties in open banking. It provides the pan-European identity and certificate framework that PSD2's access-to-account model relies on, so a bank can cryptographically verify which licensed provider is calling its APIs.

Horizontal regime. It binds companies by what they do with data, software or customers, not by the sector they sit in. The industries below are where it creates specific, additional duties — not the limit of who has to comply.

Countries

Where this binds. Each links to the providers apis.io has catalogued there.

austriabelgiumdenmarkestoniafinlandfrancegermanyirelanditalynetherlandspolandportugalspainsweden

Regions

europedachfrance iberianordicsbeneluxitaly southern europecee

Industries

Each links to that industry as a scored cohort — so the question "how ready is this sector for the regime that governs it?" becomes one you can actually look at.

cybersecuritygovernmentbankinglegal compliance

Implemented by these standards

A regulation is the law; a standard is the machine-readable contract that satisfies it. Almost every regime in this catalog restricts an interface rather than requiring one — where a standard exists, it is the part a provider can actually publish.

Dynamic Client RegistrationMutual TLS
Read the full profile on API Evangelist → Primary source All regulations