Age verification · EU Digital Identity · .NET
Age and identity verification,
on the EU Digital Identity Wallet.
Tessio Cloud is a hosted verification API. You ask whether someone is over 18, they confirm it from their wallet, and you get back a signed yes or no. No documents, no selfies, and no personal data kept. It runs on our open source .NET verifier, which passes the OpenID Foundation HAIP conformance tests.
Live at cloud.tessio.eu. Built for iGaming, age-restricted retail, dating and adult platforms that have to meet UK OSA and EU DSA age rules.
The Tessio Cloud dashboard: verification outcomes over time and every age check, with no personal data stored.
Two products, one core
The hosted product for teams who want it run for them, and the open source verifier for teams who want to run it themselves.
Hosted · live now
Tessio Cloud
A hosted API and dashboard for age and identity checks on the EU Digital Identity Wallet. You get API keys, webhooks and usage analytics. You can start building today against the sandbox.
Open source · Apache-2.0
Tessio.Verifier
The ASP.NET Core verifier that Tessio Cloud runs on. It does OpenID4VP 1.0, SD-JWT VC and mdoc (mDL), and it passes the OpenID Foundation conformance suite for HAIP verifiers in both formats. Four run modes let you build before wallets ship. It is on NuGet for .NET 8 to 10, so you can run it yourself.
A small REST API with keys, webhooks and copy-paste examples in your language.
Free tools in Tessio Labs
Five free validators for EU digital identity and trust, on the same engine as Tessio Cloud. Nothing you paste is stored.
SD-JWT VC Validator
Decode a verifiable credential and check its disclosures bind to the signed digests.
Open →mdoc / mDL Validator
Validate an ISO 18013-5 mobile document, its Mobile Security Object and its IACA chain.
Open →eIDAS Signature Validator
Check a PAdES, CAdES or JAdES signature, its timestamp, and its EU trusted-list qualification.
Open →EU Trusted List Checker
See whether a certificate is a qualified CA on an EU trusted list, and which national list.
Open →EUDI Trusted Entity Checker
See whether the EU wallet ecosystem trusts a certificate, as a PID, WRPAC or public EAA provider.
Open →Age verification in three calls
You get the claim you asked for, not the identity behind it.
01
Call the API
POST a check to /v1/age-checks. You get back a hosted verification link. No SDK to install, no documents to handle.
02
The user confirms
The person confirms one claim, like being over 18, from their EU Digital Identity Wallet. No ID scan, no selfie.
03
You get a yes or no
A signed result lands on your webhook. You store the answer you need, and nothing else.
Why now
Regulation (EU) 2024/1183 makes all 27 member states issue a Digital Identity Wallet, and makes relying parties in regulated sectors accept it by December 2027. UK OSA and EU DSA age rules already apply today.
Most of the reference verifier work is in Kotlin and Rust, so .NET teams end up porting it. There are a lot of those teams in EU public sector and finance. Tessio gives them a verifier that fits, hosted or self-run.
Timeline
-
Now
Tessio Cloud is live and Tessio.Verifier 0.4 is out. It passes the OpenID Foundation conformance suite for OpenID4VP 1.0 HAIP verifiers, in both SD-JWT VC and mdoc formats. You can build against the sandbox today.
-
Dec 2026
Member states have to make the EUDI Wallet available under Regulation (EU) 2024/1183. Real wallets, real credentials to verify.
-
Dec 2027
Acceptance becomes mandatory. Regulated relying parties need a verifier in production.
Pricing
You pay for what you verify.
Tessio Cloud is usage-based. You pay a platform subscription for the dashboard, API keys and support, plus a per-check rate on top. The rate drops as your volume grows, and age checks are priced for high volume.
Early access is invite only, and design partners get preferential pricing while we build out. Tell us the volume you are planning and we will send a quote.
Request access and a quote →Frequently asked
What is Tessio Cloud?
A hosted API for age and identity checks on the EU Digital Identity Wallet. You send a check, the person proves a claim such as being over 18 from their wallet, and you get a signed yes or no back. You never handle documents, and we keep no personal data.
How does the age verification API work?
Your app calls the /v1/age-checks endpoint and gets a hosted verification link. The person confirms the claim from their EU Digital Identity Wallet, and the result comes back on your webhook. You can build against the sandbox today. Going live then needs two things beyond your integration: member states shipping the wallet, and us holding the relying party access certificate that wallets check before they release any data. We do not hold one yet, and no production wallet will accept a verifier without it.
Do you store personal data?
No. The result is an over-18 yes or no, not a date of birth or an ID document. There is no selfie and no ID scan, and we keep no personal data. You get the answer your compliance needs and nothing more.
Is it GDPR compliant?
We check one claim and store no personal data, which is the posture GDPR and the EU Digital Identity framework are built for. If you need the verifier inside your own boundary, you can self host it.
Is there an open source or self hosted option?
Yes. Tessio Cloud runs on Tessio.Verifier, our open source ASP.NET Core verifier for OpenID4VP, SD-JWT VC and mdoc. It is on NuGet under Apache-2.0, so you can build and run it on your own .NET stack.
Does Tessio pass the OpenID Foundation conformance tests?
Yes. Tessio.Verifier passes every applicable module of the OpenID Foundation conformance suite for OpenID4VP 1.0 verifiers under the High Assurance Interoperability Profile (HAIP), in both SD-JWT VC and mdoc formats. The suite plays the wallet and attacks the verifier: tampered credentials, replayed proofs, stale keys and broken session bindings all have to be rejected for the right reason. Passing it is our bar for a verifier release. We have not yet submitted for the official OpenID certification listing.
When must businesses accept the EU Digital Identity Wallet?
Member states have to make the wallet available by December 2026 under Regulation (EU) 2024/1183, and regulated relying parties have to accept it by December 2027.
Working on age or identity verification?
Let's talk.
Tessio Cloud is invite only while we onboard design partners. We are talking to operators running age-assurance pilots, integrators planning their 2027 rollout, and member state teams looking for an EU-aligned reference stack. If that is you, get in touch.
hello@tessio.eu