The secure and scalable backend for large-scale digital identity wallets

Ubiqu provides a Remote WSCD implemented as software inside certified HSMs, where cryptographic keys and their usage policies are generated, stored, and enforced. Wallets and clients access the secure element remotely from any phone or browser, while all signing and authentication logic remains inside the HSM. This delivers persistent eIDAS High assurance without depending on device hardware, and can operate fully remote or in combination with smart cards, eSIMs, or other WSCD types.

Trusted by

How we fit into EUDI wallet implementations

We primarily work with system integrators delivering EUDI wallets, providing certified building blocks that integrate into their broader solution architecture.

Government organisations

Public-sector owners of national or sectoral EUDI wallet implementations who define the security model and choose certified components over closed platforms.

System integrators and technical partners

Delivery teams responsible for architecture and integration who use Ubiqu as the certified backend for keys, policies, and trust services.

How we engage

We provide certified building blocks for RA, CA, and secure key usage, including a Remote WSCD, which can be deployed end-to-end or integrated selectively into existing wallet architectures.

Boris Goranov

– CEO Ubiqu

A table displaying an explanation of the Wallet Secure Cryptographic Device/Application options, from high-end phones (secure element) to eSIMs.

The trade-offs behind wallet security

The defining architectural choice in an eWallet is where the qualified cryptographic environment is placed. It can be device-bound, embedded in a smart card, SIM or eSIM, or operated remotely. All models are compliant, but they differ in scalability, recovery, inclusivity, operational complexity, and reliance on hardware or platform vendors.

Compare the 4 WSCD/WSCA options →

What does a remote secure element mean for the wallet user?

Ubiqu’s Remote Secure Element delivers very high assurance without device-bound hardware. After a one-time NFC passport check, users access their wallet with a PIN while certified cryptography remains securely remote.

A table comparing the technological options for Wallet Secure Cryptographic Device/Application options.

Operationalising the Remote Secure Element

The Remote Secure Element acts as a security foundation that can be applied where high-assurance identity, access, or trust services are required.

We provide the backend technology needed to build and run an EUDI wallet. It handles secure identity usage, authentication, and credential operations in line with the EUDI architecture, without depending on specific devices or phone capabilities.

The organisational identity wallet enables secure access to applications, systems, and physical environments using a single digital identity. It supports authentication and authorisation based on roles and verified attributes, while keeping the user experience simple and consistent.

Our trust-service components enable organisations to issue and operate services such as signatures, seals, timestamps, and attestations. They are designed to integrate into existing architectures without forcing adoption of a full platform. Trust enforcement and scalability are handled by a common security backbone.

We enable organisations to build or evolve towards qualified trust services at their own pace. Instead of adopting a monolithic QTSP platform, organisations can assemble the required components and retain control over their architecture. Certified security components provide the foundation when qualification is required.

The unique advantages of Ubiqu’s wallet solution


And the reason organizations like the US Department of Homeland Security, KPN and other government organizations choose Ubiqu’s technology:

  • Device independence: Unlike traditional solutions tied to specific hardware, our Remote Secure Element works across any device, enabling true mobility without security compromise.
  • Scalable architecture: Designed to handle millions of users without compromising performance or security – essential for national-scale deployments.
  • White-label flexibility: Customize the wallet with your branding and specific requirements while benefiting from our pre-certified technology.
  • Certified technology: Our encryption methods meet the highest security standards and are ready for immediate deployment.

Start building your own wallet with our trusted expertise and technology

Get in touch

This field is for validation purposes and should be left unchanged.