Hanze Staffing places workers, and from 2027 it may only do so if the NAU has admitted it. Karin de Wit is the one who has to arrange that: a register extract from the KVK, a certificate of conduct from Justis and a tax declaration from the Belastingdienst — three authorities that used to mean scans, e-mail and waiting. This playground puts her Henkilötodistus in your wallet. With it she collects all three into the business wallet, and the NAU answers her application while she waits.
Näin tämä toimii
Kaikki tällä sivulla noudattaa eurooppalaisia digitaalisen identiteetin standardeja. Alla olevat termit ovat samat kuin määrittelyissä, joten voit yhdistää näkemäsi lukemaasi.
Myöntäjä
The party that states something about you and signs it. Here there are four: the KVK issues the register extract, Justis the certificate of conduct, the Belastingdienst the tax declaration and the NAU the admission itself.
Haltija
Sinä. Todistuksesi ovat lompakossa puhelimessasi, eivät meidän tietokannassamme. Päätät joka kerta erikseen, jaatko ja mitä.
Todentaja
The party that asks for proof. The NAU is the verifier that matters: it checks that all three attestations are valid, unrevoked and about the same company before it decides. FlexGate then verifies only the NAU's conclusion.
Myöntäminen: OpenID4VCI
Skannaat todistustarjouksen. Lompakkosi noutaa todistuksen myöntäjältä ja tallentaa sen kryptografisesti sidottuna avaimeen, joka on vain sinun puhelimellasi.
Esittäminen: OpenID4VP
Todentaja lähettää kyselyn, joka kuvaa mitä se tarvitsee. Lompakkosi näyttää sinulle pyynnön, ja vain hyväksymäsi lähtee takaisin allekirjoitettuna.
Miksi todentaja saa tietää vähemmän kuin luulisi
Credentials in SD-JWT VC format support selective disclosure. The NAU does not ask which people Justis screened, and it does not ask for the loonheffingennummer: it asks whether the obligations were met. A paper VOG cannot leave those out; this can.
Vaihe 1
Tarvitset lompakkosovelluksen todistusten vastaanottamiseen ja jakamiseen. Mikä tahansa OpenID4VCI:tä ja OpenID4VP:tä puhuva lompakko voi säilyttää ne, mutta sen on myös hyväksyttävä todistuksia myöntäjältä, jota se ei vielä tunne, eikä sitä tee jokainen lompakko.
Vaihe 2
Scan the QR code with your wallet to receive the Henkilötodistus. The data is fictional: you are receiving Karin's Henkilötodistus, so nothing about you is stored anywhere.
Todistuksesi
0 / 1
Henkilötodistus (SD-JWT VC)
Issue the Henkilötodistus first: it is what identifies Karin at each of the four portals.
Henkilötodistus (SD-JWT VC)
Karin's name, date of birth, nationality and address. It shows who she is when she signs in at the portals that issue Hanze Staffing's attestations.
Aloita tästä
Vaihe 3
Issuing a credential is only half the story. The KVK, Justis, the Belastingdienst, the NAU and FlexGate are live portals; together they take Hanze Staffing from a registration to an assignment.
Karin gets Hanze Staffing admitted
Karin de Wit signs for Hanze Staffing, a company that places workers with other employers. The last time she arranged this it took three authorities, a scanner and a fortnight of waiting. From 1 January 2027 the Wtta closes the market to anyone the NAU has not admitted, and admission means proving who the company is, that its directors were screened and that it meets its tax obligations. In this demo you are Karin: you collect the three proofs into the business wallet, apply once, and register for an assignment with the admission you get back.
What happens next
Get Karin's Henkilötodistus
Issue the Henkilötodistus above and store it in the wallet app on your phone. It is what identifies Karin when she signs in; the attestations about Hanze Staffing go into the business wallet.
Collect the register extract at the KVK
At mijnkvk.acc.credenco.com Karin collects the company registration (EUCC) into Hanze Staffing's business wallet: the name, the KVK number, the legal form and who may sign for it.
Apply for the VOG rechtspersonen at Justis
At justis.acc.credenco.com Karin shares the registration and applies for a certificate of conduct for the company. Justis screens the directors and issues the VOG into the same wallet, stating the purpose: admission to the labour-hire market.
Get the tax declaration from the Belastingdienst
At belastingdienst.acc.credenco.com Karin shares the company's identity and receives the Verklaring nakoming fiscale verplichtingen: payroll tax and VAT, assessed over the past year, with no amounts in it.
Apply for admission at the NAU
At nau.acc.credenco.com the three attestations go across in one request. The NAU checks signature, origin and validity in seconds, judges the application and issues the admission back into the same wallet.
Register for an assignment at FlexGate
FlexGate is the inlener. It asks only for the admission and the register extract: the NAU already weighed the VOG and the tax declaration, and an inlener that asked for them again would be redoing an authority's work.
You are missing Henkilötodistus (SD-JWT VC). You can continue, but signing in at the portals will stop when they ask for it.
If something goes wrong
Kokeile lisää
Sama lompakko, eri tarina. Jokainen käyttötapaus myöntää sen mitä tarvitsee ja vie omaan toiminnassa olevaan palveluunsa.