Corporate digital identity: the forgotten pillar of the digital ID discussion
*Please note that these thought leadership pieces represent the views of the contributing companies and do not necessarily reflect techUK’s own position.
The year 2025 is a turning point for digital identity in the United Kingdom. The January announcement of the GOV.UK Wallet and the upcoming Mobile Driving Licence initiative demonstrate the government’s intent to accelerate adoption and embed digital credentials into daily life.
While most attention is directed toward personal digital identity, the corporate dimension is too often overlooked. Yet without a reliable means of establishing and protecting corporate digital identity, markets and supply chains remain exposed to fraud, manipulation, and forgery.
This article argues that corporate digital identity secured through electronic sealing is a backbone for trust in digital services.
The eIDAS framework: a foundational legal and technical benchmark
Although eIDAS is a European Union regulation, the UK adopted it into domestic law after Brexit through the UK eIDAS Regulations. These rules set the standards for trust services such as timestamping, e-signatures, e-seals and archiving, with the Information Commissioner’s Office (ICO) as supervisory authority. While UK and EU eIDAS are no longer reciprocal, the EU framework continues to serve as a benchmark in the UK, particularly for cross-border operations where EU recognition remains decisive.
How corporate digital ID differs from personal digital ID
A personal digital identity authenticates an individual, typically through mechanisms such as an eID card, mobile ID, or wallet. A corporate digital identity, by contrast, authenticates a legal entity. It attests to the origin and integrity of documents issued by that entity.
Both are governed by eIDAS rules, but they serve distinct purposes: one protects individuals, the other protects companies and their ecosystem.
Are the challenges the same?
Personal and corporate digital identities are vulnerable to phishing, credential theft, data breaches, and AI-driven impersonation like deepfakes.
Corporations face broader risks: counterfeit invoices and contracts, fraudulent investor communications, manipulated compliance documents… When such frauds succeed, the consequences extend beyond immediate financial loss. They undermine partner confidence, cause reputational harm, and can destabilise confidence across entire markets.
Corporate risks linked to digital ID fraud
The scale of the problem is well documented. The Regula Deepfake Trends 2024 report found that more than 90% of companies worldwide reported financial losses from deepfake attacks, while over half had experienced fraud through falsified or modified documents.
Recent UK cases highlight the danger. In 2024, Arup, the British engineering firm, disclosed that it had fallen victim to a major deepfake fraud. An employee was deceived into transferring the equivalent of £20 million following a video call in which criminals impersonated senior executives using deepfakes video and audio. The fraud demonstrated how convincingly false digital identities can be deployed to trigger substantial financial transactions.
The same year, WPP’s CEO Mark Read was targeted in an attempted deepfake impersonation. Criminals used a cloned voice and public footage to create a false presence in a Teams meeting and on WhatsApp. The attack was foiled, but it confirmed that even the most security-aware organisations are now in the sights of identity fraudsters.
Together, these incidents show that corporate digital identity is vulnerable to manipulation both through advanced AI tools and through falsified documents with potential high damage.
The role of electronic sealing in corporate digital ID
The electronic seal, recognised under eIDAS, is the digital equivalent of a corporate stamp. When applied to a document, it guarantees both
the origin (authenticity) of a document, meaning which legal entity issued the document.
And the integrity meaning that the document has not been altered since sealing.
A seal combines two elements:
a digital corporate certificate (X.509 file) issued by an accredited Certification Authority (CA)
a qualified timestamp, which anchors the seal to a specific date and time.
The result is a PDF document whose authenticity can be verified instantly, using common tools such as Adobe Acrobat Reader.
Beyond operational assurance, a sealed document using an eIDAS-qualified provider enjoys a presumption of authenticity and integrity. In litigation, the burden of proof is reversed: it is for the opposing party to prove that the document is invalid. For companies, this can provide a decisive procedural advantage in disputes or regulatory reviews.
Towards a resilient and transparent digital economy
In the UK, 2025 marks a decisive moment for digital identity, with government initiatives such as the GOV.UK Wallet and the Mobile Driving Licence reshaping how citizens authenticate themselves online. But corporate digital identity deserves equal attention. Electronic sealing is an effective way for organisations to safeguard the authenticity and integrity of their documents and strengthen their defences against fraud and impersonation.
Solutions already deployed by trust service providers such as Evidency demonstrate that these tools are practical, scalable, and legally recognised.
Integrating corporate digital ID into the national conversation is a strategic step toward building a more resilient, transparent, and trustworthy digital economy.
