Feed

Cleverbase· 21 Oct 2026 L2 · Minor

Cleverbase says it updated its IT systems so that the affected eMudhra certificates are no longer trusted.

Two serious vulnerabilities in IT systems: what is going on and what you can do ↗

What happened

• Cleverbase says one of its systems, with limited impact on its services, runs on PHP and was switched off until the security update is installed.
• Cleverbase states that it is investigating the impact on its suppliers' systems.

Why it matters to Signicat

• Cleverbase's public response is a security-incident communication about certificate trust and PHP exposure, not a product or commercial move.
• Cleverbase's statement that its identification, login and signing services are not at increased risk is vendor-stated and not independently verified.

Evidence from the source (4 quotes)

• “One system, with limited impact on our services, runs on PHP. As a precaution, we have switched that system off until the security update has been installed.” source ↗
• “In addition, we are investigating the impact on our suppliers' systems, and taking measures where needed.” source ↗
• “As soon as the news broke, Cleverbase took immediate action.” source ↗
• “As a result, our services for identification, logging in and signing are not at increased risk.” source ↗

eSign trust servicesSecurity incidentBenelux

3 of 3 facts verified against the source · confidence high · claude-haiku-5-5

Cleverbase· 2 Sep 2026 L3 · Notable

Cleverbase states it is a qualified trust service provider licensed by the Dutch Authority for Digital Infrastructure (RDI).

One trust standard for the entire mortgage chain ↗

What happened

• The home buyer identifies at eIDAS assurance level high under Goed IDee, without a copy of the identity document.
• Cleverbase has worked with source data provider Ockto since September 2026 to combine source data with identification.

Why it matters to Signicat

• Goed IDee is a Dutch mortgage-sector identity reuse standard overlapping Signicat's reusable identity and qualified signing offer in the Benelux market.
• The article cites the revised eIDAS Regulation and iDIN phase-out as drivers, which bears on Signicat's Benelux eID brokering watch item; the article itself does not quantify adoption.

Evidence from the source (4 quotes)

• “The home buyer identifies at eIDAS assurance level high, without a copy of the identity document.” source ↗
• “That is why we have been working with Ockto since September 2026: they provide the reliable source data, we provide the trust on top of it.” source ↗
• “That is Goed IDee, HDN's market standard for digital identification and signing for a mortgage.” source ↗
• “The revised eIDAS Regulation sets new requirements for digital identification, and iDIN is being phased out.” source ↗

Reusable identity VCeSign trust serviceseID brokeringOrchestration platformProduct launchPartnershipBenelux

3 of 3 facts verified against the source · confidence medium · claude-haiku-5-5

Cleverbase· 24 Jul 2026 L3 · Notable

Cleverbase WSCA to be part of a national EUDI Wallet implementation

Our WSCA becomes part of a national EUDI Wallet ↗

What happened

• Cleverbase states its WSCA will be part of the implementation of the EUDI Wallet in a European member state.
• Cleverbase states it is undergoing EUCC evaluation based on Common Criteria EAL4+, with Brightsight as the conformity assessment body.
• Cleverbase states wallet providers can run the WSCA as a server application with supported HSMs as the WSCD, or use it as a SaaS hosted by Cleverbase.

Why it matters to Signicat

• A competitor WSCA in a national wallet strengthens Cleverbase in the EUDI wallet supply chain that Signicat's Wallet Hub targets.

Evidence from the source (4 quotes)

• “We are proud that the Cleverbase WSCA will be part of the implementation of the EUDI Wallet in a European member state.” source ↗
• “We are undergoing evaluation under the EU Cybersecurity Certification Scheme (EUCC) based on Common Criteria EAL4+, with Brightsight as the independent, accredited conformity assessment body.” source ↗
• “Wallet providers run the WSCA as a server application in their own secure environment, with supported HSMs as the WSCD, or use it as a SaaS hosted by Cleverbase.” source ↗
• “The fact that a member state is including our WSCA in the implementation of its national wallet is a great confirmation for us” source ↗

EUDI wallet eIDAS 2eSign trust servicesPartnershipCertificationGlobal

3 of 3 facts verified against the source · confidence medium · claude-haiku-5-5