Signicat

What Is Signicat?

Europe does not have a single digital identity system. It has roughly thirty national ones — BankID in Norway and Sweden, MitID in Denmark, itsme in Belgium, iDIN and DigiD in the Netherlands, SPID in Italy, and the Finnish Trust Network among them. Each scheme carries its own certification process and technical quirks. Signicat's claim is a bold one: connect once to its platform, and get all of them.

Founded in Trondheim in 2006, Signicat built its business around exactly that fragmentation problem. The company operates as a certified Qualified Trust Service Provider under eIDAS, giving it legal standing to issue qualified electronic signatures across the EU and EEA. Nordic Capital acquired Signicat in 2019, when the company employed around 115 people; it has since grown to more than 500 staff across offices in over a dozen European countries. In October 2025, Signicat appeared for the second consecutive year in the Financial Times and Statista's "Europe's Long-Term Growth Champions" ranking, which recognises ten years of sustained revenue growth.

The bold claim needs a caveat attached immediately. Signicat is not a general-purpose login tool, and it should not be compared head-to-head with developer-first CIAM platforms like ZITADEL, Ory, Hanko, or Cidaas. Those tools solve application authentication for developers who want flexible, often self-hostable identity infrastructure. Signicat solves a narrower, deeper problem: regulated identity verification, KYC/AML onboarding, and legally binding signatures for banks, insurers, and public institutions. The two categories overlap in the word "identity" and almost nowhere else.

Key Features

The eID and Wallet Hub

Signicat's central product connects to roughly 35 European national eID schemes through one integration point. A bank building a Nordic onboarding flow can support BankID in Norway and Sweden, MitID in Denmark, and the Finnish Trust Network without negotiating separate technical relationships with each national scheme operator. That single-integration model is the foundation the rest of the platform is built on, and it is difficult for any competitor without Signicat's regulatory footprint to replicate quickly.

KYC/KYB and Ongoing Monitoring

Beyond authentication, Signicat runs document and biometric identity verification, business (KYB) checks, and ongoing monitoring that flags changes to a customer's risk profile after onboarding. ReuseID lets a previously verified identity be reused across services, cutting friction for repeat customer onboarding. For compliance teams managing anti-money-laundering obligations, this turns a point-in-time check into a continuous process.

eIDAS-Qualified Electronic Signatures

As a Qualified Trust Service Provider, Signicat can issue qualified electronic signatures carrying the same legal weight as a handwritten signature under EU law. That is a stronger legal standard than the "advanced" e-signatures most e-signing tools offer. The Electronic Signature API and Portal, including its Dokobit product, cover both developer-integrated and portal-based signing flows, with digital evidence management providing an audit trail for disputes.

RiskFlow and Mint Orchestration

Signicat's orchestration layer, RiskFlow, lets compliance teams combine multiple identity signals — document checks, eID verification, biometric matching, sanctions screening — into a single onboarding decision without custom engineering for every rule change. Signicat Mint extends this with no-code workflow building, aimed at compliance and product teams who need to adjust onboarding logic without waiting on a developer sprint.

Early EUDI Wallet Readiness

With the EU Digital Identity Wallet rollout approaching, Signicat has built early support into its platform, alongside stated readiness for the incoming AMLR 2027 anti-money-laundering regulation. Whether that translates into first-mover advantage depends on how quickly EU member states finalise their own wallet implementations, but the groundwork is a genuine differentiator against smaller, single-country eID providers.

A Live Example: The iDIN-to-itsme Transition

One current migration illustrates why Signicat's network model matters in practice. The Netherlands is phasing out iDIN, one of the eID methods Signicat supports, in favour of itsme, with iDIN scheduled to cease operating as a standalone service by the end of 2027. A bank that had built a direct integration against iDIN would need to rebuild that connection from scratch. Banks using Signicat's eID and Wallet Hub instead get the itsme migration handled as a platform update, since the abstraction layer between the application and the underlying eID scheme is exactly what Signicat sells.

Pricing

Signicat publishes no price list, and that is not an oversight. The company's own guidance states that cost depends on a combination of setup fees, subscription fees, and per-transaction charges that vary by identity method and country mix. A bank verifying identities across five countries with three different eID methods pays a fundamentally different rate than a fintech doing document checks in a single market.

This model makes sense for Signicat's actual customer base of banks, insurers, and public bodies, who are used to negotiated enterprise contracts rather than shopping from a public tier list. It is far less convenient for a smaller company trying to budget before committing to a sales conversation. Buyers in that position should ask directly for per-transaction and per-country pricing breakdowns before assuming Signicat fits a startup budget.

EU Compliance & Privacy

This is where Signicat's positioning is strongest. As a Norwegian company, Signicat operates under EEA law and is fully subject to GDPR. Its Qualified Trust Service Provider status under eIDAS is independently audited and renewed, not a marketing label — QTSP certification requires ongoing conformity assessment by an accredited body. ISO/IEC 27001 certification covers information security management across the organisation.

Signicat's KYC/AML capabilities are built around EU regulatory requirements, including alignment work already underway for the 2027 AMLR overhaul. Financial institutions that must document every identity-verification decision for a regulator get a real benefit here. Signicat's combination of QTSP status, ISO 27001, and dedicated AML tooling gives compliance teams the paper trail they need without stitching together three separate vendors.

Who It's Best For

Banks, insurers, and payment providers running customer onboarding across multiple European countries get the clearest benefit — one integration replaces what would otherwise be a dozen separate national eID relationships. If your onboarding flow needs BankID, MitID, and itsme all working the same way, Signicat removes that integration burden entirely.

Public-sector bodies and regulated enterprises that need eIDAS-qualified signatures with full legal standing, not just an advanced e-signature, should evaluate Signicat over generic e-signing tools. Compliance teams facing the 2027 AMLR transition may also want to start those conversations early, given Signicat's stated readiness work.

Developers building consumer-app login or workforce authentication should look elsewhere. ZITADEL, Ory, Hanko, and Cidaas all solve that problem more directly, with self-hosting options and developer-first pricing that Signicat does not offer. Buyers who specifically need document-first identity verification without the full eID network might also compare idnow, Fourthline, Sumsub, or Veriff, each of which competes more narrowly on KYC verification alone.

Smaller fintechs operating in a single country, with no near-term plan to expand across Nordic or wider European borders, may also find a single-country KYC vendor cheaper and faster to implement than Signicat's full network. The eID Hub's value scales with the number of countries and eID methods a buyer actually needs to support.

The Verdict

Signicat's bold claim mostly holds up. Its single connection to roughly 35 European eID schemes, combined with genuine QTSP-certified qualified signatures, gives it a network effect that few competitors can match without years of regulatory groundwork. That breadth is real, not marketing gloss, and it is backed by steady growth under Nordic Capital ownership since 2019.

The honest limits matter too. Pricing opacity, an enterprise-only sales motion, and Nordic origins that still shape the company's culture and default assumptions all mean Signicat is a heavy tool for a light job. It is not a substitute for Okta or Auth0 if what you actually need is simple application login. Signicat earns its place, though, when what you need is a single, compliant way to verify identity across Europe's fragmented national eID landscape.

Frequently Asked Questions

Is Signicat GDPR compliant?

Yes. Signicat is a Norwegian company (Norway is EEA, subject to GDPR) and operates as a certified Qualified Trust Service Provider under eIDAS, with ISO/IEC 27001 certification covering its information security management.

How is Signicat different from Okta or Auth0?

Okta and Auth0 are developer-first identity and access management platforms built primarily for application login and workforce authentication. Signicat is built for regulated onboarding — connecting to national eID schemes, running KYC/AML checks, and producing eIDAS-qualified signatures — and serves banks, insurers, and public bodies rather than general app developers.

Does Signicat publish pricing?

No. Signicat combines setup, subscription, and per-transaction fees that depend on which identity methods and countries you need, so pricing is quote-based rather than published as a fixed price list.

Who owns Signicat?

Nordic Capital, a Nordic-headquartered private equity firm, acquired Signicat in 2019. The company has grown from roughly 115 employees at the time of acquisition to more than 500 today under that ownership.

Which national eID schemes does Signicat support?

Signicat's eID and Wallet Hub connects to roughly 35 European eID schemes through a single integration. That list includes BankID in Norway and Sweden, MitID in Denmark, itsme in Belgium, iDIN and DigiD in the Netherlands, SPID in Italy, and the Finnish Trust Network.