Electronic Attribute Attestations ((Q)EAA)
Beyond basic identity, the European wallet includes electronic attribute attestations: verifiable credentials (diploma, age, mandate, membership) issued by trusted authorities or organizations.
eIDAS 2.0 Regulatory Framework
Electronic Attestations of Attributes (EAA) are introduced by Regulation (EU) 2024/1183. An attestation certifies that a given attribute (for example a diploma or legal age) is properly linked to a person, independently of their full identity.
To move from theory to practice, discover the Certyneo electronic signature solution and its offer dedicated to your sector — eIDAS compliant, no installation required.
- A "simple" EAA is issued by an authorized body; a QEAA (qualified attestation) is delivered by a qualified trust service provider and benefits from a strengthened presumption of reliability.
- Certain categories of attestations may be based on authentic sources (public registers), guaranteeing the accuracy of the attribute at the time of issuance.
- QEAAs issued in one Member State are recognized in all others, under the cross-border recognition provided for by eIDAS 2.0.
- As with the PID, the presentation of an attestation respects data minimization: only the required attribute is shared with the relying party.
Components involved
Steps
- 1
Issuance by a trusted authority
An authorized body (university, administration, employer) or a qualified service provider issues the attribute attestation for the benefit of the user.
- 2
Addition to the wallet
The user receives the attestation in their European wallet, where it is stored alongside their PID.
- 3
Service request
A registered relying party requests proof of a specific attribute (for example: required diploma or minimum age).
- 4
Verifiable and selective presentation
The user presents only the requested attribute; the service verifies its authenticity through the issuer's signature, without unnecessary disclosure.
Frequently asked questions
- What is an electronic attribute attestation?
- It's a digital certificate proving that an attribute (diploma, age, mandate, membership in an organization) truly belongs to a person. It is carried by the European wallet and cryptographically verifiable.
- What's the difference between EAA and QEAA?
- An EAA is a "simple" attribute attestation. A QEAA is a qualified attestation, issued by a qualified trust service provider: it benefits from a strengthened presumption of reliability and cross-border recognition.
- Who can issue these attestations?
- EAAs are issued by authorized organizations (institutions, employers, administrations). QEAAs are issued by qualified providers, under supervision, in accordance with eIDAS 2.0 regulation.
- What are they concretely used for?
- They make it possible to prove an attribute without revealing one's entire identity: proving one's age of majority, a diploma during recruitment, a mandate to represent a company or a professional qualification.
- Are they recognized throughout Europe?
- Qualified attestations (QEAA) issued in one Member State are recognized in others, making certificates valid beyond national borders when presented via the wallet.
Related guides and solutions
Explore the related resources from our electronic signature hub.