Identification Broker Services

The Finnish Trust Network (FTN) provides strong electronic identification of natural persons in Finland. It is established by the Finnish government and supervised by the Finnish Transport and Communications Agency (Traficom).

The Finnish Trust Network has many providers of electronic identification means. These are typically banks or telecommunications companies that provide strong electronic identification of their customers. Criipto acts as an identification broker service in the Finnish Trust Network, which means that Criipto is an intermediary between the providers of the identification means and the parties (online services) that rely on strong identification to identify their users.

Criipto thus passes personal information from the different providers of identification means to the relying parties so they can identify a person at a substantial level of assurance. This is done by Criipto’s product, Criipto Verify, which is available to any online service provider.

The benefit for online service providers is that they only need to integrate with Criipto Verify and not with the many different providers of identification means. Additionally, Criipto Verify allows the online service provider to use electronic identification means from other countries.

Online service providers can integrate with Criipto Verify using the industry standard OpenID Connect. The Finnish Trust Network has a specific profile for this standard, ensuring high information security. Criipto Verify uses this profile internally in the Finnish Trust Network and when integrating with online service providers. This ensures the integrity, confidentiality, and authenticity (non-repudiation) of the data involved in the integration.

Criipto charges online service providers a fee for using the identification broker service. Criipto does not charge any fees to end users. Information about prices is available at https://www.criipto.com/pricing/criipto-verify or by contacting sales@criipto.com.

More information about using the Criipto Verify identification broker service as a relying party is available at: https://docs.criipto.com/verify/e-ids/finnish-trust-network/

Identification methods

Criipto acts as an identification broker service for the following means of identification:

• Finnish Bank ID (Tunnistuspalvelu) at a Substantial Level of Assurance
• Finnish Mobile certificate (Mobiilivarmenne) at a Substantial Level of Assurance

Terms and Conditions

Online service providers must agree to certain terms and conditions to use data from the Finnish Trust Network through Criipto Verify. The terms and conditions are available at: https://www.criipto.com/legal/ftn/ftn-terms-of-service.

Processing of Personal Data

Criipto processes the personal data of end users (natural persons) in the identification broker service. Criipto never stores personal data of end users in the Finnish Trust Network for longer than necessary to deliver the data to the online service provider using the data for strong identification. Criipto does not use personal data of end users in the Finnish Trust Network for any other purpose.

Criipto stores a log containing metadata of all successful identifications as required by the Finnish Act on Strong Electronic Identification and Trust Services (617/2009). This log does not contain personal data.

For more details, see Criipto’s Privacy and Data Protection Policy: https://www.criipto.com/legal/privacy

Partners and suppliers

Criipto has several partners who can assist online service providers in integrating Criipto Verify into their products. An overview of Criipto’s partners is available here: https://www.criipto.com/partners

Criipto Verify is hosted by Microsoft Azure in datacenters in the European Union. Criipto Verify uses Amazon Web Services for certain cryptographic operations, but these are not relevant to the Finnish Trust Network identification broker service.

Conformity assessment

Criipto Verify has been audited according to the assessment guideline for electronic identification services in the Finnish Trust Network. The latest assessment was performed in June 2025 by the independent auditor Into Certification Oy.

The service shall be audited regularly as set out in the Finnish Act on Strong Electronic Identification and Trust Services (617/2009).

Supervising authority

The Finnish Transport and Communications Agency supervises Criipto’s identification broker service in the Finnish Trust Network. For more information about the supervision and applicable legislation and guidelines, see: https://www.kyberturvallisuuskeskus.fi/en/our-activities/regulation-and-supervision/electronic-identification