LEGAL
Finnish Trust Network Identification Principles
Identification Broker Services
The Finnish Trust Network (FTN) provides strong electronic identification of natural persons in Finland. It is established by the Finnish government and supervised by the Finnish Transport and Communications Agency (Traficom).
The Finnish Trust Network has many providers of electronic identification means. These are typically banks or telecommunications companies that provide strong electronic identification of their customers. Idura acts as an identification broker service in the Finnish Trust Network, which means that Idura is an intermediary between the providers of the identification means and the parties (online services) that rely on strong identification to identify their users.
Idura thus passes personal information from the different providers of identification means to the relying parties so they can identify a person at a substantial level of assurance. This is done by Idura’s product, Idura Verify, which is available to any online service provider.
The benefit for online service providers is that they only need to integrate with Idura Verify and not with the many different providers of identification means. Additionally, Idura Verify allows the online service provider to use electronic identification means from other countries.
Online service providers can integrate with Idura Verify using the industry standard OpenID Connect. The Finnish Trust Network has a specific profile for this standard, ensuring high information security. Idura Verify uses this profile internally in the Finnish Trust Network and when integrating with online service providers. This ensures the integrity, confidentiality, and authenticity (non-repudiation) of the data involved in the integration.
Idura Verify does not offer authentication to more than one relying party based on a single authentication of the holder using strong electronic identification means within the Finnish Trust Network.
Idura charges online service providers a fee for using the identification broker service. Idura does not charge any fees to end users. Information about prices is available at https://www.idura.eu/pricing/idura-verify or by contacting sales@idura.eu.
More information about using the Idura Verify identification broker service as a relying party is available at: https://docs.idura.eu/verify/e-ids/finnish-trust-network/
Additional services
Idura’s product Idura Signatures offers online service providers the ability to obtain electronic signatures based on electronic identification means. The electronic signatures are based on electronic identification with Idura Verify.
Idura charges online service providers a fee for using the electronic signature service. Idura does not charge any fees to end users. Information about prices is available at https://www.idura.eu/pricing/signatures or by contacting sales@idura.eu.
Identification methods
Idura acts as an identification broker service for the following means of identification:
- Finnish Bank ID (Tunnistuspalvelu) at a Substantial Level of Assurance
- Finnish Mobile certificate (Mobiilivarmenne) at a Substantial Level of Assurance
Terms and Conditions
Online service providers must agree to certain terms and conditions to use data from the Finnish Trust Network through Idura Verify. The terms and conditions are available at: https://www.idura.eu/legal/ftn/ftn-terms-of-service.
Processing of Personal Data
Idura processes the personal data of end users (natural persons) in the identification broker service. Idura never stores personal data of end users in the Finnish Trust Network for longer than necessary to deliver the data to the online service provider using the data for strong identification. Idura does not use personal data of end users in the Finnish Trust Network for any other purpose.
Idura stores a log containing metadata of all successful identifications as required by the Finnish Act on Strong Electronic Identification and Trust Services (617/2009). This log does not contain personal data.
For more details, see Idura’s Privacy and Data Protection Policy: https://www.idura.eu/legal/privacy
Partners and suppliers
Idura has several partners who can assist online service providers in integrating Idura Verify into their products. An overview of Idura’s partners is available here: https://www.idura.eu/partners
Idura Verify is hosted by Microsoft Azure in datacenters in the European Union. Idura Verify uses Amazon Web Services for certain cryptographic operations, but these are not relevant to the Finnish Trust Network identification broker service.
Conformity assessment
Idura Verify has been audited according to the assessment guideline for electronic identification services in the Finnish Trust Network. The latest assessment was performed in June 2025 by the independent auditor Into Certification Oy.
The service shall be audited regularly as set out in the Finnish Act on Strong Electronic Identification and Trust Services (617/2009).
Supervising authority
The Finnish Transport and Communications Agency supervises Idura’s identification broker service in the Finnish Trust Network. For more information about the supervision and applicable legislation and guidelines, see: https://www.kyberturvallisuuskeskus.fi/en/our-activities/regulation-and-supervision/electronic-identification