Join the register of digital identity and attribute services
This guidance sets out how to join the register of digital identity and attribute services.
Introduction
The register of digital identity and attribute services is a public list of government approved organisations who provide digital identity services certified against the UK digital identity and attributes trust framework.
This guidance sets out how digital identity and attribute service providers can apply to join the register of digital identity and attribute services. By joining the register, providers can prove that their services are safe, secure and reliable.
Learn about the process
1. Understand the requirements of the UK digital identity and attributes trust framework
Before starting your application to join the register of digital identity and attribute services, you must ensure that you understand the requirements of the UK digital identity and attributes trust framework.
2. Get certified by a Conformity Assessment Body
You will need to contact an approved Conformity Assessment Body (CAB) who will conduct an audit of your company and services against the trust framework. You will also need to provide your CAB with company and contact information for your application to join the register. Once the certification process is complete, your CAB will submit your certificate details and company information directly to Department for Science, Innovation and Technology (DSIT).
3. Start the application process
Once your submission has been reviewed, DSIT will contact you within 1 week via email to confirm your agreement to start the application process. You must confirm agreement for DSIT to progress your application to the next stage.
4. Await your application outcome
DSIT will review your application using the information submitted by your CAB. You will receive an email notification with the outcome of your application within 3 weeks.
5. Get published to the register
If your application is successful, you will need to agree to your details being published on the register by following the link in your email notification. Once DSIT receives agreement, your certificate details and company information will be published to the register of digital identity and attribute services within 1 week. Your application is now complete.
Roles and responsibilities
Department for Science, Innovation and Technology
The Department for Science, Innovation and Technology is a UK government department that is responsible for the register of digital identity and attribute services. DSIT supports the development of the digital identity market by encouraging growth, innovation, and the use of safe and secure digital identities.
Digital identity and attribute service providers
Digital identity and attribute service providers may operate services that can be certified against the UK digital identity and attributes trust framework. Providers can appoint an approved Conformity Assessment Body to complete their certification process. Once certified, providers can then start an application to join the register.
Conformity Assessment Body
An approved Conformity Assessment Body will complete certification checks on digital identity and attribute service providers and submit required certificate and company information directly to DSIT for review.
Before you start your application
What you need to do
- Read and understand the requirements of the UK digital identity and attributes trust framework
- Decide which role types listed in the trust framework apply to your service
- Decide which supplementary schemes you want to certify against, such as Right to Work, Right to Rent or Disclosure and Barring Services criminal record checks
You must make sure you have the following information
- The name, role, email address and telephone number of your primary and secondary contacts
- Your organisation’s registered name and address, trading name, and Companies House, charity registration or D-U-N-S number
- The registered name and address of your parent company (if applicable)
If your organisation runs multiple services
You will be required to get certified for each service that you would like to be added to the register. Your CAB will need to provide a certificate for each service and submit this directly to DSIT for review.
Once you are published to the register
If your certificate or company information changes, in order to maintain your place on the register, you will need to contact your CAB to make the required updates.
If you wish to be removed from the register, you will need to contact your CAB who will inform DSIT.