EAA Broker issues digital attestations for organisations that have no crypto team: membership cards, certificates, proof of employment. You send the data. Your people get a proof they keep in their EU wallet and show when someone asks.
| given_name | family_name | member_since |
|---|---|---|
| Luis | Ortega | 2016-09-01 |
| Ana | Moreno | 2019-03-27 |
| Jonas | Weber | 2023-01-15 |
Source: Harbour Rowing Club
Issued via EAA Broker
EAA noun
Electronic attestation of attributes. A digital proof that a person is a member, holds a qualification or works somewhere, defined in the EU's eIDAS 2.0 rules. The person keeps it in their wallet and shows only what is asked for.
Also called attribute attestation, verifiable credential, digital credential, digital proof
Regulation (EU) 2024/1183
Upload a spreadsheet, fill in a form or connect your system to our API. One row per person.
Each person gets a link and a 6-digit code in two separate emails. We send them on your behalf, or you send them yourself.
They open the link, type the code and the attestation is in their wallet. Then we delete the values you sent.
Think of a boarding pass: one airline prints it, and gates all over the world can scan it, because they all read the same standard. Attestations travel the same way. Here is one membership card on a trip. Example
A sailing club uploads its member list. Lena opens her link, types the code, and her membership is in her wallet.
She enters a regatta in England, outside the EU. The entry form asks her wallet for proof of membership. One tap, and the race office knows she sails for a real club.
At the marina, the harbour office scans her phone, even without signal. New Zealand's government verifier app already checks mobile driving licences from the US and Australia this way.
In-person checks use mdoc (ISO/IEC 18013-5), which we are preparing. Online checks run on SD-JWT VC and OpenID4VP.
Every attestation names your organisation as its source. We confirm that you said it, and we never vouch for more.
We keep the values and any contact details only until the attestation is picked up. After that we delete them.
Link and code come in two separate messages. A forwarded email alone is not enough to take someone else's attestation.
We build on OpenID4VCI 1.0, HAIP 1.0, SD-JWT VC and ISO/IEC 18013-5 (mdoc), the standards behind the EU digital identity wallets and mobile driving licences worldwide.
Both are electronic attestations of attributes under eIDAS 2.0. The difference is who issues them and how much legal weight they carry.
| Aspect | EAA | QEAA |
|---|---|---|
| Issued by | A trust service provider, on behalf of the source | A qualified trust service provider with this service granted |
| Supervision | Light, after the fact | National supervisory body, listed in the EU trusted lists |
| Legal effect | Cannot be refused only because it is electronic | Same legal effect as a lawfully issued paper attestation |
| Checking the content | You vouch for it as the source | The provider verifies it, for some attributes against official registers |
| At EAA Broker | Yes, directly | Through a qualified partner (in preparation) |
Regulation (EU) 2024/1183, Art. 45b
Yes, through a qualified partner. By law, a QEAA has to be issued by a qualified trust service provider: the partner issues it, we take care of everything around it, with the same pickup as for an EAA. We are setting this up now. If you need QEAA, tell us early. We will also tell you honestly when an EAA is enough.
Whenever the person checking trusts you as the source: membership of a club, a completed course, access to an event, a role inside your company. A QEAA matters when a law or the checking party explicitly asks for a qualified attestation.
Yes. Checking is mathematics, not geography: whoever checks verifies our signature and the status of the attestation, wherever they are. What stays in the EU is the legal side, because the eIDAS rules on legal effect apply there. Elsewhere an attestation counts as much as the checker trusts your organisation, like a paper membership card abroad, except that nobody can alter or fake it.
Both, because they do different jobs. SD-JWT VC is the web format, made for checks online, on a website or in an app. mdoc (ISO/IEC 18013-5) is the in-person format: phone to phone at a counter, a gate or a jetty, even without internet. It is the standard behind mobile driving licences in many US states and in Queensland, and behind Japan's My Number Card on the iPhone. EU wallets read both. We start with SD-JWT VC; mdoc is in preparation, and our certificates are already built to ISO/IEC 18013-5.
Anyone your people show them to, with a suitable app: the bar at the clubhouse, the race office of a regatta abroad, an online shop with a member discount. The checker needs no account with us. And each time, your member decides what to show, for example only the type of membership, without name or member number.
Wallets that follow OpenID4VCI 1.0 and HAIP 1.0, such as the EU digital identity wallets. Your people do not need one specific app.
The values you send and the email addresses, only until the attestation is picked up. After that we keep a status entry so you can revoke the attestation, and nothing else about the person.
Yes. When someone leaves, you revoke the attestation. From then on, every check shows it as revoked.
Tell us who you are and what you would like to issue. We will get back to you personally.
hello@eaa-broker.com