Why it exists

Every website asks you to create an account, and every account wants more data than it needs — your full name, birthdate, address — to do things like verifying you're an adult. Yivi flips the model with attribute-based credentials: verified facts (attributes) live only on your phone, and you reveal the minimum needed for each interaction. Buying cinema tickets? Prove "over 18" without sharing your date of birth. Booking a GP appointment? Share only your email. Voting in a municipal survey? Share your postal code. Nothing more.

It grew out of the IRMA project by the Dutch Privacy by Design Foundation, and is now operated by Caesar Groep, a Dutch family business — with contractual guarantees that Yivi cannot be sold to foreign parties, and that in case of discontinuation everything falls back to the foundation.

Main features

• Passwordless login — scan a QR code with the app and securely share verified data; no accounts, no passwords to remember or leak.
• Selective disclosure — share one attribute instead of a whole profile; the core privacy-by-design idea.
• Verified data, not self-declared — Dutch users load attributes via DigiD (the national login); recently, face verification against your passport, ID card or driver's license enables international identity proof. A VOG (Dutch certificate of conduct) card is also supported.
• Digital signing — your verified data act as a digital stamp; sign or approve as a citizen or in a business role.
• eIDAS 2.0 readiness — Yivi is positioning as a European ID wallet and building a European Business Wallet for companies and public bodies.
• Trust architecture — trademark held by the Privacy by Design Foundation; hosted in Amsterdam (Scaleway & TransIP); no foreign investors or tech giants.

Who it's for

• Dutch residents: the smoothest path — collect citizen attributes via DigiD in ~5 minutes and start using Yivi with government and participating organizations.
• European organizations: energy, healthcare, government, insurance and other sectors looking for a privacy-friendly login and identity-verification layer, aligned with eIDAS 2.0.
• Privacy-minded people anywhere who care about the "minimal disclosure" identity model — it's one of the few production deployments of this technology (it builds on IBM's Idemix cryptography lineage).

How it works (user's view)

1. Download the free Yivi app (iOS/Android).
2. Choose a PIN, enter your email.
3. Load your data via DigiD (for Dutch citizens) or passport/ID verification.
4. Scan QR codes to log in, prove attributes, or sign — data stays on your phone.

How it compares

Useful links

• Website: https://yivi.app/en/
• How it works: https://yivi.app/en/how-yivi-works
• Developer ecosystem & knowledge base: https://yivi.app/en/developers
• GitHub (Privacy by Design Foundation): https://github.com/privacybydesign

Notes

• Formerly known as IRMA (I Reveal My Attributes) — rebranded to Yivi; the underlying privacy research tradition spans more than a decade.
• A rare example of digital-identity infrastructure governed by a foundation instead of an ad-tech or big-tech company.
• Worth watching even outside the Netherlands: the selective-disclosure UX (prove over18, not birthdate) is where regulation (eIDAS 2.0) and privacy engineering are converging.