Shufti, Evrotrust and sproof link identity verification to qualified e-signatures

Shufti has teamed up with Evrotrust and sproof to create a single workflow that turns verified identities into qualified electronic signatures across the EU. The integration is aimed at regulated businesses that need compliant onboarding now and want to be ready for eIDAS 2.0 and the coming EUDI Wallet rollout.

Why it matters: - Regulated businesses need onboarding flows that verify identity, meet AML and e-signature rules, and still move fast. - The combined workflow lets platforms connect identity verification to qualified electronic signatures without building their own qualified trust infrastructure. - The setup is designed for the EU’s tightening digital identity rules, including eIDAS 2.0 and the EUDI Wallet rollout. - The workflow is meant to preserve European data sovereignty by keeping processing on EU-hosted infrastructure.

What happened: - Shufti partnered with Evrotrust earlier this year to extend identity verification into qualified electronic signatures. - sproof has embedded the Shufti-Evrotrust identity layer into its modular, EU-hosted cloud platform. - The companies say the combined flow supports advanced attribute attestation inside the signing process. - Shufti said the partnership turns identity verification into the foundation for a single identity-to-QES journey. - Evrotrust said the partnership shows how qualified trust services can be embedded directly into the customer journey. - sproof said the integration supports European data sovereignty while keeping documents on EU servers.

The details: - Evrotrust is a Qualified Trust Service Provider listed on the EU Trusted List. - Evrotrust connects successfully verified identities with qualified certificates and QES. - sproof uses the combined identity layer as the basis for its signing orchestration. - The workflow allows regulated entities to extract and verify identity attributes such as full name, date of birth and nationality. - The signing flow begins with sproof preparing the document, signing sequence, roles and required fields. - The signer verifies identity through Shufti using notified eIDs, document and biometric checks, or an NFC-enabled ID scan. - Shufti says that verification takes around 12 seconds and reaches 99.7% biometric accuracy. - Shufti says its liveness detection is certified to iBeta ISO/IEC 30107-3 Level 3. - Shufti says it was the first European provider to achieve that benchmark on both iOS and Android. - After verification, Shufti sends Evrotrust a cryptographic hash tied to the signing transaction, not the underlying document. - Evrotrust provides the qualified trust layer needed to issue the certificate and complete the QES. - sproof completes the signed transaction in the same one-time session. - One-time QES certificates are issued and used immediately, then are not stored or reused. - The resulting signature is valid across all 27 EU member states and the wider EEA under eIDAS Article 25. - The signature remains verifiable for up to 10 years in PAdES-LTV format. - Shufti says its flow is built to carry customers into EUDI Wallet-based identity without requiring a rebuild later. - The technical standard ETSI TS 119 461 v2.1.1 raises the bar for identity proofing from 19 August 2027. - Member states are required to make EUDI Wallets available by the end of 2026. - Shufti says the workflow is intended to support AMLR-compliant, audit-ready onboarding. - Shufti says the platform supports more than 240 countries and territories and includes document verification, biometric verification, age verification, AML screening, deepfake detection, fraud prevention and VideoIdent. - Shufti says its passive liveness detection is certified to iBeta Level 3 with a 0% error rate. - Shufti says the platform is certified to ISO 27001 and SOC 2 Type II and is fully GDPR compliant. - Shufti included a link for organizations exploring QES-enabled onboarding: More information.

Between the lines: - The partnership reflects a broader shift from one-off identity checks toward reusable digital trust for regulated transactions. - The companies are positioning Europe-first infrastructure as a response to rising concerns over foreign data access laws, including the US Cloud Act. - sproof’s role as the workflow orchestrator suggests the market is moving toward modular compliance stacks instead of standalone verification tools. - The emphasis on attribute attestation points to a future where businesses may verify only the minimum data needed for a transaction.

What's next: - Businesses evaluating QES-enabled onboarding are expected to test the combined identity and signing flow in their compliance workflows. - The rollout of EUDI Wallet standards and the 2027 identity-proofing update will likely push more platforms toward integrated trust services. - Shufti, Evrotrust and sproof are signaling that they expect demand for legally recognized digital signing to grow across Europe and beyond.

The bottom line: - Shufti, Evrotrust and sproof are packaging identity proofing, qualified trust and signing orchestration into one EU-based workflow built for the next phase of digital compliance.