Frequently asked questions
The questions we get most often, and the current limitations, plainly stated.
What does Todis actually verify?
That the proof presented by a user's digital identity wallet is genuine (signed by a recognized issuer and still valid), without ever showing you more information than what you asked for.
Do I need to become a qualified trust service provider myself?
No. You remain a simple relying party. That's exactly Todis's role: doing the cryptographic verification on your behalf.
Which wallet formats are supported?
Both main formats of the EUDI Wallet ecosystem: SD-JWT VC (fully automatic
issuer verification through the European registry) and mdoc/ISO 18013-5 (mobile
driving licences, and the France Identité PID). For an mdoc, the issuer is
verified against the trust anchors (IACAs) Todis keeps in a registry, listed by
GET /trust/registries; to have a missing issuer added, write to
integration@todis.eu.
Which countries are covered?
Todis verifies issuers that chain to an anchor of its registry, and the exact list, country by country, is published live on the Trust anchors page. When the European Commission publishes a trusted list for an attestation type, Todis reads it and it prevails: that is the case of the age verification list. Issuers that no published list covers yet, such as France Identité, are declared by Todis. If a particular country or wallet is critical for your use case, contact us: we check its compatibility before you go live.
What data do you see about my users?
The proof transits through our servers for the duration of the verification (never stored, never logged, never reused), and we only pass you what you explicitly asked for, thanks to selective disclosure (a visitor can, for example, prove they're of age without revealing their full date of birth).
Can I self-host the service?
Self-hosting is not part of our standard offers. If your organisation has a sovereignty requirement that demands it, let's talk: it is a tailored engagement, not a checkbox.
Do I need to register somewhere to use the service?
Not today. The European framework (eIDAS 2.0) plans that, eventually, the
relying party (Todis, on your behalf) will register with a national
authority, and that infrastructure isn't open yet in member states. It does
not stop you from moving forward, nor even from working today: on 29 August
2026 we verified a production France Identité wallet end to
end, a PID in mdoc form, against the production certificate authority (IACA)
that the Agence Nationale des Titres Sécurisés publishes on the wallet's page
of the France Identité playground, and with our verifier identifier exactly as
it is issued (a client_id in the x509_hash scheme,
which that wallet accepts). What you need is therefore not a permission but
two technical pieces: that trust anchor, and an encrypted response
(encrypted_response), which some national wallets require. We follow the regulatory work closely and will tell you what
changes when it does.
Can my visitors open their wallet without scanning a QR code?
Yes, on our hosted verification page. If the visitor's browser allows it, a button offers to open the wallet installed on their phone directly. Otherwise, the QR code stays on the page and the verification runs as usual.
Just ask for this option when you create the session: there is nothing else to declare or register. When choosing their wallet, the visitor sees the address of our page.
The button accepts a digital identity in SD-JWT VC format as well as in mdoc format. For an age check, it asks the wallet for the same information as the QR code, starting with the European age attestation. Only a wallet that answers through ISO/IEC 18013-7 Annex C alone, a standard limited to the mdoc format, receives a narrower request: the age of majority information of the European age attestation, and nothing else. If it does not hold that attestation, the QR code stays on the page. The technical details are in the technical reference.
Can I test before I pay?
Yes. A free integration token is available: 50 free requests, no credit card and no deadline, to validate your integration (hosted page, session, direct verification). Need more volume for your testing? Write to integration@todis.eu, we'll get in touch to set up an access that fits.
How does billing work?
Three simple plans, no commitment to get started: see the pricing page.
Got a question that's not here?
contact@todis.eu, we reply quickly.