InfoCert/Tinexta·
6 Oct 2026
L2 · Minor
D.Lgs.
Dati biometrici e AI: nuove regole per la sicurezza e la privacy ↗
What happened
- The article states that D.Lgs. 160/2026 entered into force on 30 September.
- The article states that Tinexta Infocert offers AI-based identity verification with anti-tampering and anti-fraud systems.
- The article states that automatic document analysis includes OCR and NFC reading from electronic document chips.
Why it matters to Signicat
- Regulatory content on Italian biometric rules is a competitor thought-leadership vehicle that overlaps Signicat document IDV and biometrics positioning.
Evidence from the source (4 quotes)
- “in vigore dal 30 settembre” source ↗
- “Tinexta Infocert mette a disposizione tecnologie basate sull’Intelligenza Artificiale che permettono di verificare l’identità dei clienti in modo rapido, con sistemi anti-tampering e anti-frode.” source ↗
- “L’analisi documentale automatica comprende l’OCR, che estrae il testo da immagini e documenti e riduce gli errori nella raccolta dei dati personali, l’NFC, che legge le informazioni dal chip dei documenti elettronici con dati non manipolabili” source ↗
- “Tinexta Infocert mette a disposizione tecnologie basate sull’Intelligenza Artificiale” source ↗
Document IDV biometricsFraud deepfake injectionAgentic AI identityThought leadershipProduct launchItaly
3 of 3 facts verified against the source · confidence medium · claude-haiku-5-5
InfoCert/Tinexta·
21 Sep 2026
L2 · Minor
Every EU Member State must make an EUDI Wallet available to citizens by 24 December 2026.
GDPR privacy, EUDI Wallet e tutela dati: la sfida tra innovazione e rischi ↗
What happened
- The article states that the Tinexta Infocert Wallet can be built as a custom Corporate Wallet or integrated into existing enterprise applications.
Why it matters to Signicat
- Explanatory content positions InfoCert's wallet as an OIDC-based corporate wallet for EUDI readiness, overlapping Signicat's Wallet Hub positioning.
- Low direct threat: generic educational article with no named customers, metrics or certification claims.
Evidence from the source (3 quotes)
- “La soluzione permette di creare un Corporate Wallet personalizzato oppure di integrarlo all’interno delle applicazioni aziendali esistenti” source ↗
- “Il sistema è progettato secondo lo standard OpenID Connect, assicurando l’interoperabilità con il futuro Wallet Europeo.” source ↗
- “Tinexta Infocert Wallet consente di acquisire, conservare e condividere informazioni e attributi di identità di una persona” source ↗
EUDI wallet eIDAS 2Reusable identity VCData sovereignty privacyPositioning narrativeThought leadershipGlobal
2 of 2 facts verified against the source · confidence high · claude-haiku-5-5
InfoCert/Tinexta·
21 Sep 2026
L2 · Minor
31 October 2026 is the deadline set by ACN technical rules for completing baseline security measures, after which enforcement begins from November 2026.
NIS2, compliance e controlli: cosa cambia da ottobre 2026 ↗
What happened
- The article states that the D.Lgs. 138/2024 transposes Directive (EU) 2022/2555 into Italian law.
- The article states that essential entities face ex-ante, continuous ACN supervision, while important entities face ex-post supervision triggered by evidence or suspicion of violation.
- The article states maximum administrative fines of EUR 10 million or 2% of global annual turnover for essential entities, and EUR 7 million or 1.4% for important entities.
- The article lists Tinexta Infocert and Tinexta Cyber as an integrated proposal offering consulting, managed services and training for NIS2 readiness.
Why it matters to Signicat
- Low direct overlap: the article covers NIS2 cyber governance, not eID, signing, or identity verification products. Signicat's Italian NIS2 exposure is not established by this source.
- Signals InfoCert/Tinexta positioning as a compliance-advisory and managed-security provider to Italian enterprises, a possible cross-sell into regulated clients Signicat also serves.
Evidence from the source (6 quotes)
- “A definire le nuove regole è il D.Lgs. 4 settembre 2024, n. 138, che recepisce nell’ordinamento italiano la Direttiva (UE) 2022/2555.” source ↗
- “Soggetti essenziali | Ex-ante e continua” source ↗
- “la sanzione amministrativa può raggiungere un massimo di 10 milioni di euro o il 2% del fatturato annuo globale complessivo dell’impresa, se tale importo è superiore;” source ↗
- “le aziende possono affidarsi alla proposta integrata di Tinexta Infocert e Tinexta Cyber.” source ↗
- “Cyber resilienza e NIS2: le soluzioni di Tinexta Cyber per le organizzazioni” source ↗
- “Unendo la competenza nel Digital Trust all’esperienza dell’hub italiano della Cyber Security, nasce una soluzione capace di coprire il ciclo di protezione del perimetro aziendale” source ↗
Positioning narrativeThought leadershipItaly
5 of 5 facts verified against the source · confidence high · claude-haiku-5-5
InfoCert/Tinexta·
30 Jul 2026
L2 · Minor
The AI Act's general structure becomes fully operational on 2 August 2026.
Ai Act: roadmap 2026-2028 per la compliance aziendale ↗
What happened
- The article states that the labelling obligation for generative AI content is set for 2 December 2026.
- The article states that compliance for stand-alone high-risk AI systems is postponed to 2 December 2027.
- The article states that compliance for high-risk AI embedded in industrial products is deferred to 2 August 2028.
Why it matters to Signicat
- Article is an AI Act compliance explainer with no Signicat product, customer or identity-verification content; relevance to Signicat's identity portfolio is indirect.
Evidence from the source (4 quotes)
- “Una tappa successiva è stabilita per il 2 dicembre 2026.” source ↗
- “la conformità obbligatoria è stata posticipata al 2 dicembre 2027.” source ↗
- “l’adeguamento definitivo è rinviato al 2 agosto 2028” source ↗
- “Il percorso di adeguamento all’ AI Act richiede una pianificazione rigorosa da parte delle organizzazioni che sviluppano o utilizzano sistemi di Intelligenza Artificiale.” source ↗
Positioning narrativeThought leadershipRegulatory commentaryGlobal
4 of 4 facts verified against the source · confidence high · claude-haiku-5-5
InfoCert/Tinexta·
7 Jul 2026
L1 · Noise
Obligations for general-purpose AI models and Article 50 transparency obligations become applicable from 2 August 2026.
Artificial Intelligence Act e imprese: cosa cambia dal 2 agosto 2026 ↗
What happened
- The article reports that, under the Digital Omnibus political agreement reached in May 2026, the reference date for many Annex III high-risk systems moves to 2 December 2027.
Why it matters to Signicat
- Article 50 deepfake and synthetic-content labelling duties touch the document IDV and fraud-detection space, but the article gives no Signicat-specific linkage.
Evidence from the source (2 quotes)
- “Secondo l’accordo politico raggiunto a maggio 2026, per molti sistemi autonomi inclusi nell’Allegato III del regolamento” source ↗
- “i contenuti deepfake, che devono essere identificati come tali quando vengono diffusi al pubblico” source ↗
Regulatory commentaryGlobal
2 of 2 facts verified against the source · confidence high · claude-haiku-5-5
InfoCert/Tinexta·
19 Mar 2026
L2 · Minor
From 2026 a POS–RT logical and telematic linkage obligation applies to merchants.
Pagamenti POS e collegamento RT: obblighi, sanzioni e regole AdE ↗
What happened
- The article reports that merchants must declare their POS devices and the associated RT or web procedure on the Agenzia delle Entrate portal.
- The article states that the penalty for omitted linkage is 90% of the VAT due on the undocumented transaction, with a €500 minimum per operation.
- The article states that SoftPOS applications are treated as equivalent to physical POS terminals for this obligation.
Why it matters to Signicat
- The rule covers SoftPOS and cloud/gestionale integrations, a payments-side compliance topic adjacent to Signicat's risk and AML screening scope rather than its identity products.
Evidence from the source (4 quotes)
- “L’esercente è tenuto a comunicare all’Agenzia delle Entrate quali strumenti per i pagamenti POS utilizza e a quale specifico Registratore Telematico (o procedura web “Documento Commerciale on line”) ciascuno di essi è abbinato.” source ↗
- “sanzione amministrativa: viene applicata una sanzione pari al 90% dell’IVA dovuta sulla transazione non documentata;” source ↗
- “i SoftPOS, ovvero applicazioni su smartphone o tablet che accettano pagamenti contactless: questi sono a tutti gli effetti equiparati ai POS fisici;” source ↗
- “l’integrazione logica è considerata valida quando avviene tramite architetture Cloud o gestionali” source ↗
Regulatory commentaryItaly
4 of 4 facts verified against the source · confidence medium · claude-haiku-5-5
InfoCert/Tinexta·
17 Feb 2026
L2 · Minor
The European Commission published a proposal on European Business Wallets, and its Staff Working Document identifies Qualified Trust Service Providers such as Tinexta Infocert among entities able to provide identification data for European Business Wallet holders.
European Business Wallet, l’identità digitale in azienda ↗
What happened
- The article states that the Infocert Wallet is already in production and is designed to manage Legal Person attributes, delegation models and verified documents.
- The article states that sharing a certificate or delegation requires one click by scanning a QR code.
Why it matters to Signicat
- Vendor claims of 50-70% cost and time reduction are unverified and attributed to InfoCert/Tinexta; no methodology is given.
- A QTSP positioned for EUDI and business wallet identity data competes directly with Signicat's trust, wallet and eSignature positioning in Italy and across the EU.
Evidence from the source (4 quotes)
- “L’Infocert Wallet, già in produzione, nasce su queste basi ed è progettato per gestire attributi di Legal Person, modelli di delega e documenti verificati” source ↗
- “richiede un solo clic, scansionando un QR code” source ↗
- “Questa piattaforma AI-driven riduce i costi operativi e i tempi di percorrenza del 50-70%” source ↗
- “Tinexta Infocert, in qualità di QTSP, investe da tempo in tecnologie che supportano l’identità digitale sicura” source ↗
EUDI wallet eIDAS 2Reusable identity VCPositioning narrativeeSign trust servicesThought leadershipProduct launchGlobalDACH
3 of 3 facts verified against the source · confidence medium · claude-haiku-5-5
InfoCert/Tinexta·
30 Oct 2025
L3 · Notable
Italy's national AI law entered into force on 10 October.
Artificial Intelligence Act: la nuova legge italiana sull’IA ↗
What happened
- The article reports a new criminal offence of unlawful dissemination of AI-generated or altered images, videos or voices, punishable by one to five years.
Why it matters to Signicat
- Low direct impact on Signicat's product lines; the law's deepfake offence is adjacent to document and biometric fraud monitoring in Italy.
Evidence from the source (2 quotes)
- “è punito con la reclusione da uno a cinque anni” source ↗
- “è punito con la reclusione da uno a cinque anni” source ↗
Fraud deepfake injectionRegulatory commentaryItaly
2 of 3 facts verified against the source · confidence medium · claude-haiku-5-5
InfoCert/Tinexta·
17 Apr 2025
L2 · Minor
The OAM-managed Registro degli Operatori Professionali in Oro (OPO) became operational on 17 April 2025, replacing the Banca d'Italia list.
Operatori Professionali in Oro: cos’è il Registro OAM e quali sono gli obblighi antiriciclaggio ↗
What happened
- Companies already on the Banca d'Italia Compro Oro register must register anew with the OAM.
- Existing registrants may continue temporarily if they apply within 30 days of the new register opening.
- The article lists a minimum share capital of €50,000 as a registration requirement.
- The article states remote customer identification may use SPID or CIE, and qualified digital signature.
Why it matters to Signicat
- Regulatory change creates a new onboarding and digital-signature demand in the Italian gold-trade segment, a niche outside Signicat's listed core markets.
- Source is a competitor content piece promoting Tinexta InfoCert SPID, digital signature, PEC and onboarding products; it is not a new product launch.
Evidence from the source (6 quotes)
- “Anche le imprese già iscritte al Registro Compro Oro della Banca d’Italia dovranno effettuare una nuova registrazione presso l’OAM.” source ↗
- “Le aziende già presenti nel registro della Banca d’Italia possono continuare temporaneamente l’attività se presentano domanda entro 30 giorni dall’apertura del nuovo registro.” source ↗
- “Capitale sociale minimo: €50.000 (art. 2327 Codice Civile)” source ↗
- “Identità Digitale SPID o CIE: utilizzando le credenziali SPID del cliente o la CIE, è possibile verificarne l’identità in modo sicuro e conforme alle disposizioni vigenti.” source ↗
- “Adeguarsi ai nuovi obblighi di registrazione e conformità antiriciclaggio è indispensabile per operare legalmente e in sicurezza.” source ↗
- “Tinexta Infocert supporta i professionisti del settore con una gamma di soluzioni digitali in linea con gli obblighi normativi:” source ↗
AML KYB screeningeSign trust servicesRegulatory commentaryThought leadershipItaly
5 of 5 facts verified against the source · confidence high · claude-haiku-5-5
InfoCert/Tinexta·
23 Dec 2024
L2 · Minor
612-quater of the Penal Code.
Reato di deepfake: che cosa prevede il disegno di legge sull’IA? ↗
What happened
- The article reports that the Italian Government approved an AI bill on 23 April 2024 that introduces a new deepfake offence in art. 612-quater of the Penal Code.
- The article reports the proposed deepfake offence is punishable by one to five years of imprisonment.
- The article reports the bill requires AI-generated or AI-manipulated image, video or audio to carry an identifying mark, with AGCOM implementing rules.
Why it matters to Signicat
- Explainer on a national AI bill's deepfake provisions; no Signicat product, customer or competitor is named, so direct relevance to Signicat's identity products is limited.
Evidence from the source (4 quotes)
- “Il disegno di legge approvato dal Governo il 23 aprile 2024 interviene sulla materia introducendo, all’interno del Codice penale, l’art. 612-quater che disciplina il nuovo reato di deepfake” source ↗
- “Tale reato, che viene punito con la reclusione da uno a cinque anni” source ↗
- “Le misure attuative di tali norme saranno definite con uno specifico regolamento dell’AGCOM.” source ↗
- “Il disegno di legge approvato dal Governo il 23 aprile 2024” source ↗
Fraud deepfake injectionPositioning narrativeRegulatory commentaryThought leadershipItaly
3 of 3 facts verified against the source · confidence medium · claude-haiku-5-5
InfoCert/Tinexta·
18 Nov 2024
L1 · Noise
Digitalizzazione dei documenti: la proposta delle Commissione europea per passaporto e carte d’identità
Digitalizzazione dei documenti: la proposta delle Commissione europea per passaporto e carte d’identità ↗
EUDI wallet eIDAS 2Thought leadershipGlobal
0 of 0 facts verified against the source · confidence low · claude-haiku-5-5
InfoCert/Tinexta·
12 Nov 2024
L2 · Minor
IT Wallet on App IO began with 50,000 citizens able to load driving licence, health card and European Disability Card from 23 October.
Mobile Wallet: il portafoglio digitale italiano arriva sull’App Io ↗
What happened
- The wallet was developed by the Italian Presidency's digital transformation department, PagoPA and the state mint IPZS, with IPZS issuing the digital documents.
- Access is via SPID or CIE authentication, with user selection of documents in the Portafoglio section of App IO.
- Pilot expansion to 250,000 users from 6 November 2024 and one million from 30 November is stated.
- Use of the wallet is stated as optional for citizens.
Why it matters to Signicat
- The article describes a state-run wallet launch in Italy with no Signicat involvement; relevance to Signicat is limited to EUDI-aligned wallet competition in Italy.
Evidence from the source (5 quotes)
- “Il portafoglio digitale italiano nasce dalla collaborazione tra il Dipartimento per la trasformazione digitale della Presidenza del Consiglio, PagoPA (la società che gestisce l’App IO), e l’Istituto Poligrafico e Zecca dello Stato, responsabile dell’emissione digitale dei documenti.” source ↗
- “Gli utenti già abilitati devono autenticarsi tramite SPID o CIE e selezionare la sezione “Portafoglio” sull’App IO.” source ↗
- “Dal 6 novembre 2024, la sperimentazione di IT Wallet sarà estesa a 250.000 utenti e il 30 novembre il numero salirà a un milione.” source ↗
- “È importante sottolineare che l’utilizzo dell’It Wallet è facoltativo.” source ↗
- “Il progetto, sancito nel Decreto-legge n.19 del 2024, rappresenta un’infrastruttura digitale strategica destinata a evolversi fino al 2026” source ↗
EUDI wallet eIDAS 2Reusable identity VCProduct launchRegulatory commentaryItaly
5 of 5 facts verified against the source · confidence medium · claude-haiku-5-5
InfoCert/Tinexta·
8 Nov 2024
L2 · Minor
Implementing Regulation (EU) 2024/994 updates EPREL registration rules.
I nuovi dettagli operativi del registro EPREL: un passo avanti verso una maggiore sicurezza e trasparenza ↗
What happened
- New suppliers must use certificates compliant with the new rules from 22 October 2024, with a transition to 22 April 2025 for certain aspects.
- Already-verified EPREL suppliers using non-compliant certificates must present an updated certificate by 22 April 2027.
Why it matters to Signicat
- InfoCert positions its qualified electronic seals as the compliance route for EPREL supplier certificates; this competes with Signicat's trust services for non-identity seal use cases.
- Regulatory deadlines for EPREL certificates are a sales-timing hook for seal vendors; relevance to Signicat's core identity markets is limited.
Evidence from the source (4 quotes)
- “I nuovi fornitori (persone giuridiche o fisiche) dovranno impiegare certificati conformi alle nuove disposizioni a partire dal 22 ottobre 2024.” source ↗
- “I fornitori già verificati in EPREL che impiegano certificati non conformi alla nuova regolamentazione dovranno presentare un certificato aggiornato entro il 22 aprile 2027.” source ↗
- “InfoCert offre una soluzione altamente affidabile: i Sigilli Elettronici Qualificati.” source ↗
- “I fornitori già verificati in EPREL che impiegano certificati non conformi alla nuova regolamentazione dovranno presentare un certificato aggiornato entro il 22 aprile 2027.” source ↗
eSign trust servicesEUDI wallet eIDAS 2Thought leadershipRegulatory commentaryGlobal
3 of 3 facts verified against the source · confidence high · claude-haiku-5-5