Explainers and additional guidance for service providers and conformity assessment bodies

When we receive questions from service providers or conformity assessment bodies relating to interpretation of rules in the trust framework, supplementary codes or the certification scheme, we might publish a blog post to provide extra information and guidance.

This page lists all the explainers and additional guidance we have published to date.

We will:

• add new links when we publish new explainers
• remove links to guidance that are no longer relevant – though the original blog posts will stay published, in case you need to refer to them later

Trust framework and certification

Refer to GOV.UK for the latest versions of the:

• UK digital identity and attributes trust framework
• Supplementary codes
• Certification scheme

Gamma (0.4) to 1.0 trust framework transition

The UK digital verification services trust framework 1.0 is currently in pre-release. It is not yet possible to certify against this version. All services shall certify against the gamma (0.4) publication.

• Announcing the 1.0 trust framework

Beta (0.3) to gamma (0.4) trust framework transition

The beta (0.3) publication of the UK digital identity and attributes trust framework was expired on 31 March 2026. Services can no longer be certified against the beta (0.3) publication.

• Going to gamma: uplifting your existing certification for the new trust framework and supplementary codes
• Why we haven’t provided a gap analysis for beta to gamma uplifts

Communications and marketing

• What can I say about my certification?
• How digital verification service providers should describe certification for specific use cases

Component services

• Do I have to use a certified component in my service? 

Getting certified

• You should plan to renew your certification sooner than you think
• What are valid certificates under the UK digital identity and attributes trust framework?

Good Practice Guides 44 and 45

• Using data brokers as authoritative sources under GPG 45

White labelling

• A new approach to white label certification in the 0.4 trust framework

Interpreting the rules

• Confirming user understanding: what to do and what not to do
• “Must” and “could” in the trust framework and whether the rules apply to your service
• Notifying users of changes to their holder service accounts

GOV.UK register of digital identity and attribute services

Refer to GOV.UK for the latest guidance on how to become certified and apply to join the register.

Applying to join the register

• You should plan to renew your certification sooner than you think
• What happens when you apply to join the register of digital identity and attribute services
• What are valid certificates under the UK digital identity and attributes trust framework?