More ways to use and accept Digital IDs in the UK

profile picture Yoti 6 min read
An image showing that Yoti is certified as an Identity Service Provider (IDSP), Attribute Service Provider (ASP), Orchestration Service Provider (OSP) and Holding Service Provider (HSP).

We’ve hit an important milestone in our journey to make our trusted and accessible digital IDs easier to use in the UK. 

Yoti has achieved Gamma (v0.4) certification under the UK Digital Identity and Attributes Trust Framework (UKDIATF). In practice, that means we’re now certified across four key roles:

  • Identity Service Provider (IDSP)
  • Attribute Service Provider (ASP)
  • Holding Service Provider (HSP)
  • Orchestration Service Provider (OSP)

It confirms that Yoti meets the UK Government’s highest standards for secure, trusted digital identity services. It also means that we’re ready to support everyday use cases, like accessing age-restricted services and buying alcohol, as digital IDs continue to become widely used in daily life. 

They’re already a versatile, everyday tool that can be used in multiple ways, including to prove your age or identity online and in person, share only the details required in the moment, verify student status and securely share trusted details with businesses or other people when needed.

 

What’s changed and what does this really mean?

Gamma is the latest version of the UKDIATF and is the first statutory trust framework under the UK’s Data Act. It replaces the earlier Beta framework and significantly raises the bar.

Under the Beta version, Yoti was already certified as an IDSP, ASP and OSP. The new Gamma version introduces new requirements, covering areas like security, privacy, accessibility and operational resilience. As part of this uplift, we’re certified to continue providing right to work, right to rent and Disclosure and Barring Service (DBS) checks, operating as an:

  • IDSP (Identity Service Provider) – so we can issue and manage verified digital identities.
  • ASP (Attribute Service Provider) – meaning we can confirm specific attributes, allowing people to share details about themselves without exposing unnecessary personal information. For example, this could be just sharing that you’re over 18 rather than your whole date of birth.
  • OSP (Orchestration Service Provider) – which allows our technology to accept multiple different types of digital IDs – whether issued by Yoti, a Government or another certified identity provider.

And we’ve expanded our certification to include new products and role types that unlock what comes next. We’re now also a:

  • HSP (Holding Service Provider) – letting our digital ID wallets to securely hold government-issued credentials, like the UK’s mobile Driving Licence (mDL), when it becomes available.
  • OSP (Orchestration Service Provider) for Digital ID Connect – which means our ID Checker app and API can help businesses to accept UKDIATF-certified digital IDs when used to prove age, such as when buying alcohol at a self-checkout.

Together, these certifications mean we’re not only continuing to meet regulatory standards but are ready to support businesses in accepting more digital IDs, as well as making it easier for people to use them.

 

The ID Checker app is ready for age-restricted sales

One of the biggest practical outcomes of this certification is that our ID Checker app is now certified as an OSP. This means it can be used by businesses to legally accept and verify UKDIATF-certified digital IDs for age-restricted purchases. It can already be used for age-restricted goods including vapes, tobacco and energy drinks, and will include alcohol once the law changes in the coming months.

Our OSP certification matters because it allows businesses using the Yoti ID Checker app to accept whatever certified digital ID their customers want to use whilst keeping privacy and security front and centre. 

For businesses, that means:

  • Avoiding handling sensitive personal data directly
  • A simple, legally compliant way to check age and identity
  • No need to integrate with multiple digital ID wallet providers
  • Being able to accept the UK Government’s mDL when it becomes available

For users, it means:

  • Faster checks
  • Improved privacy
  • More convenience
  • An anonymous way to prove your age or identity

 

Our digital ID wallets are ready to hold government credentials

Alongside OSP certification, we’ve also achieved certification as a HSP. This is a crucial development, as it means our wallets are ready to securely store government-issued credentials when they’re rolled out. This includes the UK’s mDL, which is due to launch publicly in 2026.

HSP certification confirms that our digital ID wallets meet strict UK Government standards. People can trust that their credentials are safe, encrypted and not accessible by anyone but themselves, and organisations receiving the credential or attribute can trust that the user is sharing the bare minimum in a secure and anonymised way. 

When you combine our HSP-certified digital ID wallets and OSP-certified ID Checker, you have an interoperable identity solution that can be used nationwide to securely accept digital IDs and in a way that gives users choice. 

 

What this means for you going forward

Our listed products are now certified by the UK Government to enable users to use and accept digital IDs in an interoperable and legally compliant way. This means we can:

  • Accept UKDIATF-certified digital IDs from multiple providers
  • Verify attributes on behalf of organisations
  • Meet UKDIATF requirements end-to-end
  • Protect user privacy by default

As digital ID becomes more and more a part of everyday life, our focus remains on making it simple, secure and privacy-preserving.

 

A final note

Achieving Gamma certification across IDSP, ASP, HSP and OSP roles is really important. It shows that our technology meets the UK Government’s standards for secure, reliable digital identity, and that we’re ready to help people and businesses use digital ID with confidence.

With this certification, we can support a wide range of services while keeping user privacy and security front and centre. It positions Yoti as a trusted orchestration layer for digital ID, able to bring together multiple sources and make identity verification simpler and safer for everyone.

This achievement reinforces our commitment to building a digital identity ecosystem that works for both people and businesses as the UK moves toward broader adoption of secure, verified digital IDs.

Download our free ID Checker app on iOS or Android today to see how easy it is to accept digital IDs.

– Em, Group Product Manager

Keep reading

Woman doing liveness check on phone

The evolution of presentation attack detection trends in 2025

At Yoti, we perform millions of checks every week for our clients. A critical element of a robust check (whether that’s for age assurance, identity verification, digital IDs or authentication) is liveness detection, also known as Presentation Attack Detection (PAD).  The purpose of liveness detection is simple but essential. It makes sure that the person being verified is physically present in front of the device camera in real time. Without liveness, checks are vulnerable to basic fraud attacks (such as using printed photos or screen replays) and more sophisticated AI attacks (like AI clones). For organisations relying on digital

7 min read
4 different people doing liveness checks

What are liveness checks and why do they matter?

A lot of life happens online now. You can open a bank account from your sofa. Start a new job without meeting anyone in person. Prove your age with a selfie. Interact on gaming platforms. Use a dating site. Rent a flat. Meet people you’ve never seen in real life. But all of these things only work if one thing is true: there’s a real person on the other side of the screen. When that assumption holds, things feel easy. When it doesn’t, people lose money, accounts get taken over, services grind to a halt and trust disappears fast.

8 min read
An image of a woman holding a driving licence in one hand and her mobile phone in another.

How we build our AI models

At Yoti, AI is not a general-purpose experiment. Instead, it is a set of purpose-built tools embedded directly into our identity, authentication and age verification products, designed to deliver secure decisions quickly while not collecting or processing unnecessary data. Rather than using large, general-purpose AI systems, we build and deploy small, specialised models that each solve a clearly defined problem. This approach gives our customers stronger security, better privacy outcomes, faster performance and greater confidence in how decisions are made.   How do our AI-based checks work? At Yoti, our approach is to use multiple models to perform very

5 min read