Signicat Review
6.9/10The European digital identity company: a Trondheim firm founded in 2006 that reaches 35+ national and bank eID schemes through one API (BankID, MitID, itsme, iDIN, FTN, FranceConnect, SPID, Smart-ID and more), one of the first certified eIDAS 2.0 QTSPs, owned by Nordic Capital since 2019, with EUR ~140M revenue, ~520 staff, and 1,300+ enterprise customers, but no US gaming register footprint.
Our read
The eID hub is the product and it is unmatched: 35+ European national and bank eID schemes through one API over 200+ data sources, plus document and biometric eIDV, data verification, AML and KYC, authentication, qualified e-signing, and orchestration, with reusable eID identity native.
eIDAS 2.0 QTSP among the first certified plus EU wallet acceptance is a real forward-aligned EU moat, but no US register (not on the PA PGCB list), no confirmed UK DIATF entry, and ISO 27001 and SOC 2 not publicly confirmed cap the dimension to the EU side only.
API-first with an open developer portal, identity orchestration from the Sphonic heritage combining eIDs, IDV, data, and fraud in one flow, and single-integration EU wallet acceptance, with the mild offset of a platform assembled from seven to eight acquisitions over five-plus years.
Marquee named brands (Betfair, LeoVegas, Flutter, BetMGM, GG Poker) on a live gaming page, but logo and list level only with no operator testimonial or case study, weaker than Shufti Pro's WhiteHat quote or GBG's GGPoker study, and the footprint is European facing with no US register anchor.
The most tenured pure eID player since 2006 with real scale (EUR ~140M 2025, ~520 staff, 1,300+ enterprise customers, 45+ markets), FT and Statista Long-Term Growth Champion two years running, and a clean incident and litigation record, docked for a long-hold PE owner since 2019 and no audited public accounts.
On-request and enterprise, with no published per-check schedule on record, the opaque camp alongside most of the segment.
Methodology. Our own score, a weighted average of six dimensions, tilted toward verification coverage and compliance. Weighted on the identity-verification scale, where verification coverage leads at 0.22 and compliance and certifications follows at 0.20, a fit for a vendor whose 35+ eID hub is the product and whose eIDAS QTSP status carries the regulatory side while gaming evidence and pricing stay thin. Read the full methodology
- Unmatched national and bank eID coverage: 35+ European schemes through one API (BankID, MitID, itsme, iDIN, FTN, FranceConnect, SPID, Smart-ID and more, vendor-stated Jul 2026), the single biggest differentiator on the roster.
- The BankID and Pay-n-Play cross-edge: Signicat is the identity layer for the Nordic instant-onboarding model that the open-banking payment rails we review (Trustly, Brite, Zimpler, Volt, Yaspa) power on the money side, with verified onboarding in about 30 seconds via BankID.
- Forward-aligned EU regulatory status: one of the first certified eIDAS 2.0 QTSPs, a supervised designation, with EU Digital Identity Wallet acceptance as one integration ahead of the end-2026 mandate.
- Real scale and tenure: EUR ~140M revenue and ~520 staff and 1,300+ enterprise customers across 45+ markets since 2006 (Nordic Capital, 2025), FT and Statista Long-Term Growth Champion two years running, with a clean incident and litigation record.
- No US state gaming register presence: not on the Pennsylvania PGCB list (March 2026) and no US state registration, a real limit for the US lens where Socure, GBG, and Shufti Pro carry PA registrations.
- Gaming named-operator evidence is logo and list level: Betfair, LeoVegas, Flutter, BetMGM, and GG Poker appear on the gaming page with no operator testimonial or case study, weaker than Shufti Pro's WhiteHat quote or GBG's GGPoker study.
- Roll-up integration complexity: the platform was assembled from seven to eight acquisitions over five-plus years (Idfy, Connectis, Encap, Electronic Identification, Dokobit, Sphonic, SmartWorks), so breadth comes with many stacks unified over time.
- Pricing opacity and a European boundary: no published per-check schedule (enterprise and on-request), and the eID model is both the strength and the edge, so outside the eIDAS zone the 35-eID advantage does not apply.
European operators, especially in the Nordics, Benelux, Baltics, and Iberia, that want national-eID and BankID or Pay-n-Play onboarding, eIDAS and EU wallet readiness, and a broad one-API identity and signing stack from a single vendor.
US-only operators that need state-register-anchored KYC, which Signicat has none of, and buyers who want published per-check pricing or a named tier-one US client roster before the first call.
Markets & licensing
Signicat's regulatory story runs the opposite way to the US-lens vendors on this roster. Its anchor is the EU side: it is among the first companies certified as a Qualified Trust Service Provider under eIDAS 2.0, a supervised designation that carries more weight than a self-asserted badge, and its eID hub is built to accept EU Digital Identity Wallets ahead of the end-2026 mandate that requires every member state to offer one. What it does not carry is a US footprint. Signicat is not on the Pennsylvania PGCB gaming service provider list (March 2026), and no UK OfDIA DIATF register entry is on record. The eIDAS 2.0 QTSP status is register-grade EU status, and the US absence is by design.
Signicat sells into the US without a gaming register behind it. The Pennsylvania PGCB service provider list does not carry it (March 2026) and no US state gaming registration exists in its name, while Socure, GBG, and Shufti Pro all hold PA entries. The gaming brands Signicat names are UK and EU facing, which is where the eID advantage actually pays. Anchor a US compliance stack on a vendor a state regulator has already listed.
Signicat's UK presence traces to the Sphonic acquisition in April 2022, which brought the orchestration and financial-crime layer, but no OfDIA DIATF register entry is on record. The eID model is less central to the UK than to the Nordics, where BankID is the universal mechanism, so the UK position is the weaker of the two.
- eIDAS 2.0 Qualified Trust Service ProviderEuropean Union
- Among the first certified QTSPs under eIDAS 2.0, a formal supervised designation for qualified trust services and e-signing · Signicat materials, 2026 · certifying supervisory body and exact date not published
- EU Digital Identity Wallet acceptanceEuropean Union
- The eID hub is built to accept EUDI Wallets as one integration ahead of the end-2026 mandate for member-state wallets · Signicat, Jul 2026 · positioning as the aggregation layer for the eIDAS 2.0 transition
- Pennsylvania PGCB (absent)United States
- Not on the Approved Gaming Service Provider list, so no US state gaming register anchor · Not on the list as of Mar 24, 2026
- UK OfDIA DIATF (unconfirmed)United Kingdom
- No DIATF register entry on record for Signicat or Sphonic, despite UK Sphonic heritage · Not found on the OfDIA DIATF register (Jul 2026)
Licensing tier: The trail is real but EU-shaped: the eIDAS 2.0 QTSP designation is a supervised, register-grade status and the strongest anchor Signicat carries, while the US absence is a design choice and the UK DIATF position is unconfirmed, so verification grades partial rather than verified.
The 45+ markets figure is Nordic Capital's 2025 number and covers the Nordics, Benelux, Baltics, Iberia, DACH, and the UK built out through the acquisition roll-up.
No restricted-market list applies. The relevant limit is that the eID advantage is European and does not extend outside the eIDAS zone (Jul 2026).
Platform & capabilities
The feature set: what's built in. Capabilities light up when present. Anything not shown isn't offered or isn't disclosed.
Integrations & engineering
One contract and one API instead of a separate deal per studio, feed, or PSP. Here's what connects, how fast, and on what stack.
Everything runs through one API and the developer portal at developer.signicat.com. The eID and Wallet Hub reaches 35+ national and bank schemes plus EU Digital Identity Wallets as a single integration, the identity-proofing engine adds document and biometric verification for markets without an eID, and the Sphonic-heritage orchestration layer combines eIDs, IDV, data checks, and fraud screening behind one configuration. Reusable identity is native to the eID model, so a verified user re-authenticates with the same scheme. The relevant cross-edge for our readers is Pay-n-Play: with BankID, verified onboarding completes in about 30 seconds on the identity side, sitting on top of the open-banking payment rails that move the funds.
No single public claim (Jul 2026). The developer portal is open and the eID hub collapses many country integrations into one, while the vendor's gaming page cites market expansion in two to three weeks as a vendor-stated outcome, so the real calendar depends on the eID set and comes out of the sales process.
Products & tools
One API reaches 35+ national and bank eID schemes across Europe, from Norwegian BankID and Danish MitID to itsme, iDIN, the Finnish Trust Network, FranceConnect, SPID, and Smart-ID, wrapped with document plus biometric IDV, data verification, AML and KYC automation, qualified e-signing, and Sphonic-heritage orchestration.
eID and Wallet Hub
One integration reaches 35+ European national and bank eID schemes plus 200+ trusted data sources, and it is built to accept EU Digital Identity Wallets alongside those eIDs without a country-by-country build.
- 35+ eIDs on the hub (vendor-stated, Jul 2026), including Norwegian BankID, MitID, itsme, iDIN, FTN, FranceConnect, SPID, and Smart-ID
- Nordic and Baltic depth: BankID, MitID, Freja eID, Buypass, Smart-ID, Mobiil-ID, and Suomi.fi through one contract
- Benelux and DACH reach: iDIN, DigiD, itsme, eHerkenning, the German Personalausweis eID, and ID Austria
- Built to accept every EU Digital Identity Wallet as one integration ahead of the end-2026 eIDAS 2.0 mandate
- Email and SMS OTP fallbacks where no eID applies
Identity Proofing & eIDV
Document plus biometric verification, from the Electronic Identification acquisition in Spain, alongside data verification of name, age, address, and affordability, and AML and KYC automation for onboarding.
- ID document capture plus biometric and liveness verification for markets without an eID
- Data verification across name, age, address, and affordability signals
- AML and KYC automation for onboarding and for periodic re-checks
- Age verification for gambling access, framed on the gaming page
- Real-time risk data feeding onboarding decisions
Identity Orchestration
Combine eIDs, document IDV, data checks, and fraud and financial-crime screening in one configurable flow, the capability that came in with the Sphonic acquisition in April 2022.
- One flow spanning eID, document IDV, data verification, and AML screening
- Fraud and financial-crime layer from the UK Sphonic acquisition (Apr 2022)
- Rule-based routing between verification methods by market and risk
- Reusable identity native to the eID model, so verified attributes carry forward
- API-first delivery with a public developer portal at developer.signicat.com
Electronic Signing
A qualified electronic signature business built on the Dokobit and Connectis heritage, run under Signicat's eIDAS Qualified Trust Service Provider status.
- Qualified, advanced, and simple electronic signatures under eIDAS
- Signing tied to the same eID schemes used for verification
- QTSP-grade trust services, a formal supervised designation rather than a self-asserted claim
- Baltics and Benelux signing depth from the Dokobit and Connectis acquisitions
- One vendor for verify-and-sign flows in regulated onboarding
On the record
The history that matters: the milestones, the scale, the awards, and who runs it.
Signicat AS started in 2006 in Trondheim, Norway, which is still the HQ, and grew into the pan-European identity company it is today largely under Nordic Capital, which took a majority stake in April 2019 through Fund IX and still owns it in 2026, a long-hold growth story rather than a fresh flip. Under that ownership Signicat made seven to eight acquisitions to assemble what it calls Europe's most comprehensive digital identity platform: Idfy (2019), Connectis (2020), Encap Security (2021), Electronic Identification in Spain (2021), Dokobit (2021), the UK's Sphonic (April 2022) for orchestration and financial-crime tooling, and SmartWorks (2024) for Iceland. The result is a EUR ~140M-revenue company with about 520 staff and 1,300+ enterprise customers across 45+ markets (Nordic Capital, 2025), led by CEO Asger Hattel, and recognized by the FT and Statista as a European Long-Term Growth Champion two years running.
Brands & clients on the platform
Corporate
- Idfy (2019)
- Connectis (2020)
- Encap Security (2021)
- Electronic Identification (2021)
- Dokobit (2021)
- Sphonic (2022)
- SmartWorks (2024)
Leadership
Milestones
- 2006
Signicat AS is founded in Trondheim, Norway, as an early specialist in electronic identity and trust services.
- 2019
Nordic Capital acquires a majority stake in April through Fund IX, and Signicat acquires Idfy, opening the roll-up era.
- 2020
Connectis (Netherlands) is acquired, adding Benelux digital-identity reach and platform breadth.
- 2021
Three acquisitions land: Encap Security (mobile identity), Electronic Identification in Spain (the proprietary eIDV tech), and Dokobit in Lithuania (Baltic e-signature).
- 2022
Signicat acquires the UK's Sphonic in April, adding the trust-orchestration, anti-fraud, and AML layer to the platform.
- 2024
SmartWorks (Iceland) is acquired, and Signicat positions its hub to accept EU Digital Identity Wallets ahead of the eIDAS 2.0 mandate.
- 2025
Nordic Capital reports EUR ~140M revenue, ~520 staff, 1,300+ enterprise customers, and 45+ markets, and the FT and Statista name Signicat a European Long-Term Growth Champion for a second consecutive year.
- 2026
Signicat is among the first companies certified as a Qualified Trust Service Provider under eIDAS 2.0, positioning as the aggregation layer for the EU digital-wallet transition.
Where they're pushing next
- EU Digital Identity Wallet acceptance ahead of the end-2026 eIDAS 2.0 mandate for member-state wallets
- The Nordic Pay-n-Play identity layer, with Finland's domestic license framework arriving in 2027
- Continued European eID coverage as new national and bank schemes come online
Awards & recognition
Trust signals
The checks an operator runs before signing: incidents, enforcement, ownership, and longevity, from our research.
Signicat vs alternatives
The same attributes, side by side, from our normalized provider set, useful for seeing where this vendor fits against its peers.
| Attribute | Signicat | IDnow | Sumsub | GBG |
|---|---|---|---|---|
| Founded | 2006 | 2014 | 2015 | 1989 |
| Team | 520+ | 500+ | 500+ | 1,300+ |
| US market | Restricted | Restricted | — | Available |
| Pricing | On request | Not published | Public | Not published |
| Country coverage | 35+ eIDs | 193 countries | Document-free verification in… | 195 countries |
| UK DIATF | No OfDIA DIATF register entry… | UK DIATF accredited at medium… | Certified IDSP | UK OfDIA DIATF statutory regi… |
The take: IDnow is the closest European peer, an EU-compliance and QTSP specialist, but Signicat's edge is the national eID hub that IDnow does not match at 35+ schemes. Sumsub brings deeper orchestration and public per-check pricing and a stronger gaming footprint, while Signicat answers with the eID breadth and eIDAS QTSP status. GBG is audited and gaming-anchored with a named GGPoker case study, where Signicat's gaming evidence stays logo-level. Pick Signicat when European national eIDs, BankID or Pay-n-Play onboarding, and EU wallet readiness outweigh a US register footprint and published pricing.
Pricing & terms
Signicat quotes pricing on request. Exact figures come at the deal stage, under NDA. Here's what's public about the model and terms.
Enterprise and on-request end to end: no published per-check or per-eID rate on record for operators (Jul 2026)
Turnkey
White-label
Support & account management
The service layer operators inherit: availability, the channels support runs on, and language coverage.
Frequently asked
The things operators actually ask before signing.
Which eIDs does Signicat support?+
More than 35 European national and bank eID schemes through one API (vendor-stated, Jul 2026), alongside 200+ trusted data sources. The flagship schemes include Norwegian BankID, MitID in Denmark, itsme in Belgium, iDIN in the Netherlands, the Finnish Trust Network, FranceConnect, SPID in Italy, and Smart-ID in the Baltics, plus Freja eID, Buypass, the German Personalausweis eID, and ID Austria. No other vendor on this roster comes close on national eID breadth. The exact roster shifts as schemes are added, so confirm the ones your markets need in the sales process.
Can Signicat do BankID and Pay-n-Play onboarding?+
Yes, this is one of its strongest fits. In the Nordic Pay-n-Play model, a single bank-authenticated transaction both moves funds and delivers a verified identity with no registration form, and Signicat is the identity layer for exactly that flow. With BankID, verified onboarding completes in about 30 seconds, and app-based and biometric flows can be as fast as about 5 seconds. On the payment side, Trustly is the Pay N Play originator, and the open-banking rails we review (Brite, Zimpler, Volt, Yaspa) power the money movement, with Signicat as the adjacent identity-side complement rather than the same product.
Is Signicat usable for a US operator?+
Not in a register-anchored way. Signicat is not on the Pennsylvania PGCB gaming service provider list (March 2026), and it holds no US state gaming registration, unlike Socure, GBG, and Shufti Pro, which carry PA registrations. Its footprint is European, and its named gaming brands are UK and EU facing. For a US-only operator that needs state-register-anchored KYC, Signicat is the wrong tool. Its value is the European eID and eIDAS side, not the US lens.
Is Signicat ready for the EU Digital Identity Wallet and eIDAS 2.0?+
Yes, and this is a genuine forward-looking strength. Signicat's eID and Wallet Hub is built to accept every EU Digital Identity Wallet alongside its trusted eIDs as a single integration, without country-by-country builds, and Signicat is among the first companies certified as a Qualified Trust Service Provider under eIDAS 2.0, a formal supervised designation. Under eIDAS 2.0, every EU member state must offer a wallet by the end of 2026, and Signicat is positioning as the aggregation layer for that transition. Confirm the exact certifying supervisory body and date in the sales process.
Who owns Signicat, and is it stable?+
Nordic Capital, a large and reputable Nordic private-equity house, has held a majority stake since April 2019 through Fund IX, and still owns it in 2026, so this is a long-hold growth story rather than a fresh flip. The company reports EUR ~140M revenue, about 520 staff, and 1,300+ enterprise customers across 45+ markets (Nordic Capital, 2025), it was an FT and Statista Long-Term Growth Champion two years running, and no security breach or litigation is on record (July 2026). The one structural note is that PE ownership implies an eventual exit someday, which is a horizon question rather than a current distress signal, and there are no audited public accounts.