Skip to content

Mobile-ID Digital TrustISO/IEC 27001:2022 · SIS351224I008Published certification scope

View evidence

PLATFORM

Identity, Consent & Evidence

Bind who acted, under which authority and purpose, against what consent/delegation state, and what outcome was produced.

01 / CAPABILITIES

What the platform does

01

Identity assurance

Resolve user, service, device and organization identity appropriate to the action.

02

Authorization

Combine role, workspace, relationship, purpose and policy instead of a single coarse role check.

03

Consent & delegation

Evaluate current scope, purpose, subject, delegate and expiry/withdrawal state.

04

Evidence

Retain actor, decision, policy/config version, time, source, correlation and outcome for accountable actions.

02 / DATA FLOW

From context to accountable outcome

01Authenticate actor or workload
02Resolve organization/workspace and subject context
03Evaluate role, relationship and purpose
04Check consent/delegation where applicable
05Allow, challenge or deny action
06Record decision and outcome evidence

03 / INTEGRATION & TRUST

Designed boundaries

01

Integration

OIDC/OAuth 2.1, enterprise federation and service credentials integrate with application authorization.

02

Trust

Step-up, session controls and revocation can be applied to sensitive actions.

03

Boundary

Identity proofing level and accepted external identity providers depend on deployment policy and confirmed integration.