GRCLibrary.ai

Annex

eIDAS Sector Requirements Annex

This annex describes how an organization in scope of the EU electronic identification and trust services framework (eIDAS) can use the core GRC library to meet its obligations, and where the framework requires artefacts and processes the library does not itself produce. The governing instrument is Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (the European Digital Identity Framework, commonly "eIDAS2"), which introduced the European Digital Identity Wallet, the wallet-relying-party regime, and a strengthened trust-services and supervision model.

Type
Annex
Version
0.0.3
Date
2026-09-24
Owner
Chief Compliance Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Compliance: Sector-Specific
Review frequency
Annual and upon material eIDAS implementing-act, EUDI-wallet specification, or trust-service supervision change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Applicability triggers
  • Role determination
  • Obligations by role
  • Library coverage and gaps
  • Operating expectations
  • Framework alignment
  • Limitations

Frameworks it maps to

Related documents