Germany's digital identity wallet implementation relies on Google and Apple ecosystems

Architectural documentation from the German Federal Ministry of the Interior (BMI) reveals that the country's implementation of the digital identity wallet will effectively require devices certified by Google or Apple.

To comply with the eIDAS 2.0 regulation, which mandates the deployment of the European Digital Identity (EUDI) Wallet across EU member states, the German system utilizes a Mobile Device Vulnerability Management (MDVM) mechanism. Technical analysis indicates that this mechanism currently relies on attestation services exclusive to the two major mobile ecosystems: Google Play Integrity API for Android and Apple's DC DeviceCheck/App Attest for iOS.

This development raises questions regarding digital sovereignty and accessibility, as access to state identification services may become dependent on possessing an account with one of these two technology giants. Similar patterns have been observed in other regions, such as Poland's mObywatel app, which is distributed through these specific app stores.