Yesterday, we published the final release of version 1.0 of the UK digital verification services trust framework. The 1.0 version will come into force from 1 September 2026, or from the date at least one conformity assessment body (CAB) is …
Yesterday, we published the final 1.0 version of the UK digital verification services trust framework on GOV.UK. The publication is accompanied by final versions of the 1.0 supporting documents, as well as the 1.0 supplementary codes for digital right to work, …
As adoption of digital verification services (DVS) grows, it’s important that certified DVS providers share clear, consistent and accurate information about what their certification means. Some terminology can cause confusion - for example, where providers describe their service as being …
The United Kingdom Accreditation Service (UKAS) has granted accreditation to Kantara Initiative; making it the first UKAS-accredited conformity assessment body (CAB) certifying under the UK government’s Digital Identity and Attributes Trust Framework.
You need to have a valid certificate if you want to prove your service conforms with the UK digital identity and attributes trust framework, and want to apply to be listed on the GOV.UK register of services.
If a Part or Section in the trust framework applies to your role, then all of the rules in that Part or Section apply to your service. Your service must conform with all of the “must” rules, and service providers can choose whether or not to implement any “could” rules.
You can avoid your service falling off the GOV.UK register by asking your conformity assessment body to complete your recertification process up to 60 days early. You won't lose the remaining time on your current certificate if you do this, and it will help you to avoid any unnecessary disruption.
Getting onto the GOV.UK register of digital identity and attribute services is not an automatic process. It can take up to 20 working days for your service to appear on the register.
We’ve been asked variously for some kind of document with a gap analysis or assimilation matrix. We don't have one. This is why.
You want to tell people that your service is certified and on the GOV.UK register of digital identity and attribute services. What should you say and what shouldn't you?
