Qualified electronic signing through the CSC v2.2.0 API - qualified and remote signing through Qualified Trust Service Providers now works with either CSC 1.0.4.0 or 2.2.0.0, selected per organisation in the QTSP secure vault
Trusted-list validation aligned with ETSI TS 119 602 - validation now runs against a remote lookup service instead of parsing trusted-list files within the verifier
Direct identity matching for Passwordless Login - operators can now choose an identity-resolution method in the dashboard, resolve the subject directly from a presented credential, and select a claim
Consistent transaction data handling - a schema-driven form now validates TS12 Strong Customer Authentication data for payments, e-mandates, and qualified electronic signatures in the dynamic credential request flow, and non-TS12 Passwordless Login transaction data is now accepted during issuance
Annex C and Digital Credentials API refinements - sandbox organisations can now attach the reader certificate chain when signing Annex C of ISO 18013-7 (ReaderAuth)
Privacy-by-design guidance for verifiers - the Age Verification extension now warns when the holder's exact date of birth is exposed and recommends selective disclosure in line with the GDPR data-minimisation principle
Verification and issuance correctness - SD-JWT PID array claims, including nationalities, now display correctly; verification QR codes and deep links preserve characters such as &, <, and >; and deferred Pre-Authorised credentials can be issued
Trusted-list validation aligned with ETSI - the wallet can now run checks against a remote lookup service and evaluate the certificate chain against the ETSI TS 119 602 and ETSI TS 119 612 trusted lists
Trust checks gate issuance and verification - trust checks complete before the exchange screen appears on both iOS and Android
Capability, standing, and credential scope evaluation - each party is evaluated for its specific role, its current standing based on trust lists, and, where permitted, the exact credential type in play, matched by standards
Native UI on modern native stacks - SwiftUI runs on a single, consistent, more maintainable UI foundation across platforms
Sturdier handling of ISO 18013-5 mdoc credentials - CBOR and COSE checks cleanly reject broken credentials rather than bringing the wallet down
Simpler, more compatible OpenID4VCI issuance - the redundant client assertion has been removed from the token request on iOS and Android; Android retains wallet-attestation client authentication, and batch issuance now resolves cryptographic binding methods
Payments and strong customer authentication metadata - EWC TS12 transaction data is now correctly added when a payment or login is confirmed via the Digital Credentials API path
Backup, restore, and everyday stability - on iOS, the last-backup date reads synchronously and DataPods retain the correct pod credentials through re-authentication; on Android, the restore progress indicator no longer freezes because restore work is now tied to the screen's lifecycle