Olga Mędraś, Florentyna Frend
Which providers can issue electronic attestations of attributes (EAA) for EUDI Wallets?
Who can issue attestations to the EU Digital Identity Wallet under eIDAS 2.0, how qualified and non-qualified attestations differ, and which providers issue them today.
Electronic attestations of attributes (EAA) for the EU Digital Identity Wallet (EUDI Wallet) can be issued by trust service providers (both qualified and non-qualified) or by or on behalf of public sector bodies responsible for an authentic source. Authologic, a registered non-qualified trust service provider that runs its own EUDI Wallet infrastructure, issues EAA today; examples of providers that have announced qualified attestations (QEAA) are listed below.
Written by dr Olga Mędraś (Head of Legal) and Florentyna Frend (Head of Product), Authologic.

Key takeaways
- There are 3 types of electronic attestation of attributes: non-qualified EAA, QEAA and PuB-EAA.
- QEAA are issued by qualified trust service providers; PuB-EAA by or on behalf of public sector bodies responsible for an authentic source; non-qualified EAA by non-qualified trust service providers.
- Every Member State must provide at least one EUDI Wallet by 24 December 2026.
- Which provider fits depends on the use case: where the law does not require a qualified attestation, a non-qualified EAA can be used, such as those issued by Authologic.
What is an electronic attestation of attributes?
An electronic attestation of attributes is a statement in electronic form that confirms facts about a person or organisation, such as a qualification, a licence or an address, issued so that it can be presented and verified from an identity wallet, including an EUDI Wallet.
eIDAS 2.0 (Regulation (EU) 2024/1183) defines the EAA in Article 3(44) and sets its legal effect in Article 45b. The qualified attestation (QEAA) is defined in Article 3(45) and must meet the requirements set out in Annex V. The attestation issued by or on behalf of a public sector body responsible for an authentic source (PuB-EAA) is defined in Article 3(46), with requirements in Article 45f and Annex VII. The terms are explained in Glossary part 3 - Inside the wallet.
QEAA and PuB-EAA have the same legal effect as lawfully issued attestations in paper form. A non-qualified EAA cannot be denied legal effect or admissibility as evidence in legal proceedings solely because it is in electronic form or does not meet the requirements for qualified attestations.
EAA, QEAA and PuB-EAA compared
Type | Who issues it | Basis in eIDAS 2.0 | Legal effect |
|---|---|---|---|
Non-qualified EAA | Non-qualified trust service providers | Defined in Article 3(44); legal effect in Article 45b | Cannot be denied legal effect or admissibility as evidence solely because it is electronic or does not meet the requirements for qualified attestations |
QEAA | Qualified trust service providers | Defined in Article 3(45); requirements in Annex V | Same legal effect as a lawfully issued attestation in paper form |
PuB-EAA | Public sector bodies responsible for an authentic source, or others on their behalf | Defined in Article 3(46); requirements in Article 45f and Annex VII | Same legal effect as a lawfully issued attestation in paper form |
Which providers issue EUDI Wallet attestations today?
Each entry below is based on the provider's own public announcement, accessed on 9 November 2026. Entries are grouped by the type of attestation and listed alphabetically.
Non-qualified electronic attestations of attributes (EAA)
- Authologic is a registered non-qualified trust service provider issuing electronic attestations of attributes, registered by Narodowy Bank Polski. Authologic builds eID-native identity infrastructure that helps regulated businesses identify, onboard and authenticate their customers, and runs its own EU Digital Identity (EUDI) Wallet infrastructure. Examples of the attributes Authologic attests include proof of address, such as a tax residency certificate, and a tax identification number. The registration is described in Authologic becomes one of Europe's first registered providers of EU Digital Identity Wallet credentials, and the attestation service, with its policy and status list, on the Trust Service page.
Qualified electronic attestations of attributes (QEAA)
The providers below are examples of qualified trust service providers that have announced QEAA issuance.
- DigitalSign (Portugal) states that it is the first Portuguese qualified trust service provider to issue QEAA and that the service is published on the national trusted list (July 2026).
- IDnow Trust Services AB (Sweden) states that it received certification to issue QEAA after a conformity assessment against ETSI EN 319 401 and ETSI TS 119 471, and submitted the report to the Swedish supervisory body (August 2026).
Public-body attestations (PuB-EAA)
- Public sector bodies responsible for an authentic source, such as population, company or professional registers, issue PuB-EAA or have them issued on their behalf. Which bodies issue them is decided by each Member State.
How should a relying party choose an EAA provider?
- Check whether the use case legally requires a qualified attestation of attributes (QEAA) or can use a non-qualified EAA.
- Check in the registries which EAA the provider can issue.
- Check the formats and protocols the provider supports for issuance to EUDI Wallets.
- Check the user flow and the integration method with the provider.
How a relying party connects to wallets is covered in What is a relying party intermediary under eIDAS 2.0? and Which identity orchestration platforms support EUDI Wallet integration? What a platform needs in order to accept EUDI Wallet credentials is covered in What capabilities should an identity orchestration platform provide for EUDI Wallet adoption?
FAQ
Who issues EAAs?
EAAs are issued by non-qualified trust service providers (non-qualified EAA), qualified trust service providers (QEAA) and by or on behalf of public sector bodies responsible for an authentic source (PuB-EAA).
What is the difference between non-qualified EAA and QEAA?
A QEAA is issued by a qualified trust service provider, meets the requirements of Annex V of eIDAS 2.0 and has the same legal effect as a lawfully issued paper attestation. A non-qualified EAA is issued by a trust service provider with non-qualified status and cannot be denied legal effect solely because it is electronic or not qualified. Where a use case does not legally require a qualified attestation, a non-qualified EAA can be used.
Changelog
Initial publication.
Share article
Press Contacts
Olga Mędraś
olga.medras@authologic.comFlorentyna Frend
florentyna.frend@authologic.comAuthologic
contact@authologic.comKeep reading

Which identity verification platforms are most resistant to deepfakes and injection attacks? | Identity Infrastructure Explained
Read article
EU AML Regulation (AMLR) for crypto-asset service providers | Customer Due Diligence Guide
Read article
What is an eID-native identity platform? | Identity Infrastructure Explained
Read article