Guidance

Join the register of digital identity and attribute services

This guidance sets out how to join the register of digital identity and attribute services.

Introduction

The register of digital identity and attribute services is a public list of government-registered organisations who provide digital identity services. All organisations on the register provide services that are certified against the UK digital identity and attributes trust framework

This guidance sets out how digital identity providers can: 

  • apply to join the register of digital identity and attribute services 
  • update their service or company details on the register 
  • remove their details from the register

By joining the register, digital identity providers can prove that their services are safe, secure and reliable.  

Learn about the process

1. Understand the requirements of the UK digital identity and attributes trust framework

Before you can apply to join the register, you must ensure that you understand the requirements of the UK digital identity and attributes trust framework, including any role types that could apply to your service.

To get certified and to maintain your registration, you’ll need to prove that your service meets the rules in the trust framework.

Additional rules you may need to meet

You may need to prove that your service meets additional rules depending on how your service will be used. These additional rules are known as supplementary codes and may be required for complying with specific legislation or regulations.  

You must check whether any supplementary codes apply to your service, and that you understand the additional rules.

2. Get certified by a Conformity Assessment Body

You will need to contact an approved Conformity Assessment Body (CAB) to certify each service you would like to register. They will check that your service meets the rules in the trust framework, and the rules of any supplementary codes if applicable.  

Once your service is certified, your CAB will submit your certificate to the Office for Digital Identities & Attributes (OfDIA), along with additional company and contact information to start your application.

3. Start the application process 

OfDIA will review the information provided by your CAB and check that your certificate is valid.

Once your certificate information is confirmed, you will receive an email from OfDIA within 1 week to ask for your agreement to start the application process. You’ll need to follow the link in the email to progress your application.

4. Await your application outcome

OfDIA will review your application using the information that your CAB has submitted. You will receive an email from OfDIA within 3 weeks to confirm the outcome of your application.

5. Get published to the register  

If your application is successful, you will need to agree to your details being published on the register. To do this, you’ll need to follow the link in the email you receive from OfDIA.  

Once you agree, your service information, certification information and organisation’s public contact details will be published to the register within 1 week.

What to do if your information changes  

If there are any changes to your service or certification information, you must contact your CAB. They will manage changes on your behalf.  

If your public contact information changes, you should contact OfDIA directly to update the details on the register. 

Removing your details from the register 

If you want to remove one or more of your listed services from the register, you should contact OfDIA who will send you a removal request by email.

You can contact OfDIA by email at digital.identity.register@dsit.gov.uk.

Last updated 4 April 2025.

Updates to this page

Published 13 September 2024

Sign up for emails or print this page