How does IDnow prove it meets the AMLR compliance and certification bar for qualified identity verification?
IDnow holds Qualified Trust Service Provider (QTSP) status on the EU Trusted List, is independently certified against ETSI TS 119 461 for remote identity proofing, and operates inside the full eIDAS regulatory framework. You don’t have to take our word for any of it. The QTSP listing sits on a public register, the ETSI certificate comes from an independent assessor, and both map straight onto the legal definitions AMLR uses. So when a regulated institution picks IDnow, it is picking a provider a conformity assessment body has already vetted and a Member State supervisor has already listed. The compliance work doesn’t vanish. But the heavy lifting no longer lands on your team.
The IDnow approach: certification is the foundation, qualification is the proof

Why credentials matter, not just capabilities
AMLR Article 22 does more than name remote identity verification as a valid CDD method. It names Qualified Trust Services as the route, which means the service has to come from an entity formally recognised as a Qualified Trust Service Provider under eIDAS. That one word, qualified, carries the weight.
A vendor can build sophisticated document verification and never become a QTSP. Technical polish is not the same as legal qualification. For a regulated institution, using a non-QTSP to deliver what AMLR treats as a Qualified Trust Service opens a compliance gap that no contract clause can close. The qualification has to sit with the provider, instead of the paperwork between you.
IDnow holds QTSP status. It is recorded on the EU Trusted List, the public register each Member State’s supervisory body maintains, so anyone can confirm it in a minute without asking us first. That listing is the primary proof that the qualified-trust route under AMLR Article 22 is genuinely open to institutions using the IDnow platform.
What ETSI TS 119 461 adds and why it matters
QTSP status is a legal designation. ETSI TS 119 461 is the technical standard that spells out how remote identity proofing for Trust Services must actually be carried out. It sets requirements for the proofing process: document authenticity checks, biometric comparison, liveness detection, fraud controls, and the assurance levels each of those has to reach.
Conformity is assessed by an independent conformity assessment body. It is not self-declared, and it is not a checkbox. The assessor examines whether the real process matches the standard, at the level of detail regulators and auditors expect to see. IDnow has passed that assessment, and the certificate is verifiable from the assessment body itself, with no IDnow marketing in the loop.
For a buyer, the effect is concrete. The proofing engine behind IDnow’s automated and video-based verification has been benchmarked by a third party against the exact standard eIDAS and AMLR reference. The assurance level is documented rather than asserted.
eIDAS as the regulatory frame that connects everything
eIDAS, and its updated form eIDAS 2.0 under Regulation (EU) 2024/1183, is the legal framework QTSP status lives inside, and the framework under which EUDI Wallets and Qualified Electronic Attestations of Attributes (QEAAs) operate. It is not a separate certificate. It is the architecture the other credentials hang from.
Working inside eIDAS means IDnow’s qualified services are legally recognised across every EU Member State, not only where the QTSP status was first granted. For a bank onboarding customers in France, Germany and Poland at once, or planning to, that cross-border recognition is the part of eIDAS that actually matters.
Taken together, QTSP status, ETSI TS 119 461 certification, and eIDAS compliance cover the full AMLR compliance and qualification picture asks of the qualified-trust route. They complement each other rather than repeat each other, and they stack across every verification method IDnow runs.
How the credentials map to the methods
The table below shows how IDnow’s qualifications apply across the verification methods AMLR recognises.
| Method | What it delivers | Relevant qualification |
|---|---|---|
| Automated document verification | AI-based OCR and NFC chip reading at scale | QTSP status; ETSI TS 119 461 certification |
| Video identification | Qualified, agent-led remote identification | QTSP status; ETSI TS 119 461 certification |
| Hybrid flows | Automated verification with human review | QTSP status; ETSI TS 119 461 certification |
| National eID schemes | Government-backed digital identities at LoA substantial and high | eIDAS framework; QTSP acceptance of eID assurance levels |
| EUDI Wallets | Wallet-based identity under eIDAS 2.0 | eIDAS 2.0 (Regulation (EU) 2024/1183); QEAA acceptance |
| QES issuance and acceptance | Qualified Electronic Signatures for binding consent | QTSP status under eIDAS |
No method sits outside the qualified framework. Every route a regulated institution needs to offer from 10 July 2027 is covered by credentials that are independently audited and publicly verifiable.

Why the full spectrum is harder to replicate than it looks
Holding QTSP status, keeping ETSI TS 119 461 certification current, and operating inside eIDAS is not a one-time achievement. Each one demands recurring audit cycles, regulatory engagement, and process governance. QTSP status carries continuous supervisory oversight. ETSI TS 119 461 conformity needs periodic re-assessment. eIDAS 2.0 obligations keep shifting as Member State implementation matures and the EUDI Wallet ecosystem takes shape.
For the vendor, that is a standing operational cost. For the buyer, it is the assurance that today’s qualifications will still be in place, and still current, the day regulators come to examine the programme.
So the real question in procurement is not whether a vendor cleared a qualification once. It is whether they have the governance, the regulatory relationships, and the internal process to keep renewing it. That is where the distance between a QTSP and a vendor who hopes to become one starts to bite.
How to verify our claims
Don’t take any vendor’s word, ours included. Cross-check against independent sources:
- EU Trusted List: the authoritative public register of Qualified Trust Service Providers. It confirms QTSP status directly, with no vendor documentation involved, and it is the primary proof that the qualified-trust route under AMLR Article 22 is legally available.
- ETSI TS 119 461 certificate and conformity assessment body: issued by an independent body, not self-declared, and verifiable straight from the assessor. It proves the remote proofing process has been benchmarked against the standard eIDAS and AMLR reference.
- Primary regulatory texts: Regulation (EU) 2024/1624 (AMLR) and Regulation (EU) 2024/1183 (eIDAS 2.0) on EUR-Lex define the obligations and the legal framework qualified services operate within.
FAQs
What is a Qualified Trust Service Provider and why does it matter under AMLR?
A Qualified Trust Service Provider is an entity formally recognised under eIDAS and listed on the EU Trusted List that Member State supervisory bodies maintain. AMLR Article 22 recognises Qualified Trust Services as a valid route for remote CDD. Use a provider without QTSP status to deliver what AMLR defines as a Qualified Trust Service and you open a compliance gap that a contract cannot close. The qualification has to sit at the provider level.
What does ETSI TS 119 461 certify and who issues it?
ETSI TS 119 461 is the technical standard for remote identity proofing in the context of Trust Services. It sets requirements for document verification, biometric comparison, liveness detection, and fraud controls. Conformity is assessed by an independent conformity assessment body, not self-declared, and the certificate is verifiable directly from the assessor rather than from the vendor.
How does eIDAS fit alongside QTSP status and ETSI 119 461?
eIDAS is the regulatory framework QTSP status exists inside. It provides the legal basis for cross-border recognition of Qualified Trust Services across EU Member States, and it defines the obligations that apply to eID schemes, EUDI Wallets, and QEAAs. QTSP status and ETSI TS 119 461 certification operate within that framework rather than apart from it.
Is QTSP status recognised across all EU Member States?
Yes. eIDAS provides the legal basis for mutual recognition of Qualified Trust Services across Member States, so a QTSP listed on any one Member State’s Trusted List is recognised in all of them. That mutual recognition is what makes the qualified-trust route workable for institutions operating across several jurisdictions.
What happens if an IDV vendor is not a QTSP?
The qualified-trust route under AMLR Article 22 is closed to you. You then either accept a compliance gap, run a separate qualified process through a different provider, or fall back on a CDD method that does not rely on Qualified Trust Services. Each option carries operational or regulatory risk.
How often must QTSP status and ETSI TS 119 461 certification be renewed?
Supervisory oversight of QTSPs is continuous, not a single approval, and ETSI TS 119 461 conformity requires periodic re-assessment by the conformity assessment body. So the question worth asking in procurement is not whether a vendor achieved certification once. It is whether they maintain the governance and process to keep it current through every assessment cycle.
Does eIDAS 2.0 change the qualification requirements?
eIDAS 2.0 (Regulation (EU) 2024/1183) extends the framework to cover EUDI Wallets and QEAAs and sets the timeline for Member State wallet availability and relying-party acceptance obligations. It does not remove existing QTSP obligations. It adds to them, and providers inside the eIDAS framework have to track and respond to those extensions as Member State implementation matures.
Can IDnow’s qualifications be verified without contacting IDnow?
Yes. QTSP status is verifiable on the EU Trusted List, ETSI TS 119 461 certification is verifiable from the conformity assessment body, and the regulatory texts are public on EUR-Lex. None of these checks need contact with IDnow, and every one of them is more authoritative than vendor-supplied documentation.
Every AMLR-recognised method, one qualified platform, and the audit trail kept ready for you.
→ See how IDnow’s Trust Platform covers every AMLR-recognised verification route
