What TrustCB does

TrustCB B.V. is a Netherlands-headquartered, ISO/IEC 17065:2012-accredited commercial Certification Body specializing in high-assurance security certification for IT security products, processes, sites, and services. Founded in 2018 by Wouter Slegers (CEO) and Denise Cater, the company operates a portfolio of more than 12 dedicated certification schemes built on Common Criteria methodology, including EUCC and the legacy NSCIB for IT product security, eIDAS for qualified electronic signatures and seals, JPKI-MD for Japanese mobile device infrastructure, MIFARE and FAST for global ticketing/contactless payment, SESIP and PSA Certified for IoT platforms, CCC-DK for automotive digital key, MDSCert and GSMA eSA for mobile device security, and ADA for application security. The company's core methodology — branded "Trust and Verify" — combines trust-based process optimization with rigorous verification to deliver predictable, accelerated certification timelines while maintaining high assurance.

TrustCB generates revenue primarily through professional services fees charged to product developers and scheme sponsors for evaluating and certifying security products against international standards (Common Criteria/ISO/IEC 15408 and related), with pricing published per scheme and structured around assurance levels. The go-to-market is enterprise B2B: the company works directly with developers and sponsors, coordinating with a network of licensed evaluation laboratories (ITSEFs) such as SGS Brightsight, TÜV Informationstechnik, Keysight/Riscure, Applus+, and Serma to perform technical evaluations, with TrustCB retaining the certification decision authority. Exclusive scheme owner appointments — MIFARE (NXP), FAST (FeliCa Networks), JPKI-MD (Government of Japan), CCC-DK (Car Connectivity Consortium), PSA Certified (GlobalPlatform) — anchor the business, complemented by EUCC and ADA AL2 services. The customer base spans semiconductors, networking, telecom, government, and automotive security standards bodies, with multi-year contract structures.

The business is founder-controlled, privately held, and operates with a very small core team (firmographic range 1-10) supported by an external ITSEF network — a structure typical of high-leverage niche certification bodies. No external funding rounds, acquisitions, or public listing have been disclosed; the firm appears to be self-sustaining and profitable on its existing scheme portfolio.

Name

TrustCB

Legal name

TrustCB B.V.

Website

https://trustcb.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

1–10 employees

Short description

TrustCB B.V. is a Netherlands-headquartered, RvA-accredited commercial Certification Body providing high-assurance Common Criteria-based security certifications (EUCC, MIFARE, FAST, PSA Certified, CCC-DK, JPKI-MD, eIDAS, and others) to IT security product developers across semiconductors, IoT, mobile, automotive, and government sectors.

Ownership category

akta.pro rank

Product category

IT security certification services

NAICS

Testing Laboratories and Services (541380), Professional, Scientific, and Technical Services (541)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Legal, Governance, Privacy & Audit Certifications (EDAAANAN)

Keywords

• IT security certification
• Common Criteria evaluation
• IoT platform security
• Mobile device certification
• Automotive digital key

Headquarters

HQ city

Hoofddorp

HQ country

Netherlands

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Product Certification Services: TrustCB generates revenue through certification fees charged to developers for evaluating and certifying IT security products, processes, and services against international standards. Fees vary by scheme (EUCC, MIFARE, FAST, SESIP, PSA Certified, etc.) and assurance level.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels3 records

Core offering

TrustCB is a Netherlands-based commercial Certification Body that evaluates and certifies IT security products, associated sites, processes, and services against Common Criteria (ISO/IEC 15408 and ISO/IEC 18045) and other international or industry standards. It operates dedicated certification schemes across global ticketing, IoT, mobile devices, applications, and automotive digital keys, coordinating licensed evaluation laboratories (ITSEFs) throughout the assessment. The service is structured to deliver high-assurance certification with accelerated and predictable timelines while maintaining rigorous verification.

Product overview

TrustCB is a commercial Certification Body providing high-assurance, unquestionable certification services for IT security products and associated sites, processes, and services. The company operates as a platform of multiple dedicated certification schemes built on the foundations of Common Criteria methodology, with the core motto of 'Trust and Verify' enabling accelerated and predictable certification timelines. The portfolio includes EUCC (European Cybersecurity Certification Scheme on Common Criteria) and legacy NSCIB for Common Criteria evaluations; eIDAS for electronic signatures and seals; JPKI-MD for Japanese mobile device infrastructure; Site Certification for development and manufacturing facilities; MIFARE and FAST for global ticketing solutions; SESIP and PSA Certified for IoT platform security; CCC-DK for automotive digital key solutions; ADA for application security; and MDSCert and GSMA eSA for mobile device security. TrustCB is accredited by the Dutch Accreditation Council (RvA) against ISO/IEC 17065:2012 and leverages over 50 years of collective experience in certification and evaluation.

Differentiator

Problem solved

Functional benefit

Brands

• EUCC Scheme: European Cybersecurity Certification Scheme on Common Criteria for ICT product security evaluation and certification.
• eIDAS Certification
• JPKI-MD Scheme
• Site Certification Scheme
• MIFARE Security Certification
• FAST (FeliCa Approval for Security and Trust)
• SESIP Scheme
• PSA Certified Scheme
• NSCIB Scheme
• CCC-DK Scheme
• MDSCert Scheme
• ADA Certification

Products and services

• European Cybersecurity Certification (EUCC) Certification scheme for evaluating and certifying the security aspects of ICT products based on Common Criteria (ISO/IEC 15408 and ISO/IEC 18045), covering High and Substantial assurance levels and authorized by the Dutch Authority for Digital Infrastructure (RDI).
• eIDAS Certification Certification scheme for qualified means of creating electronic signatures and seals under EU Regulation 910/2014, administered through the Dutch Conformity Assessment Process (DCAP) and often combined with Common Criteria certifications.
• JPKI-MD Certification Security certification scheme for mobile devices with eSE and JPKI Applets for the Japanese market, based on the JPKI Protection Profile under CC:2022 Release 1, with EAL4 augmented assurance.
• NSCIB Certification The legacy Dutch Common Criteria certification scheme for evaluating IT product security aspects; as of 2025-02-27 it is maintenance only and no longer accepts new applications or re-certifications.
• Site Certification Scheme Assessment and certification of development and production sites involved in Common Criteria and EUCC product certifications, covering security processes, configuration management, and vulnerability handling.
• MIFARE Security Certification Centralized certification body designated by NXP for the MIFARE Security Certification scheme, demonstrating that products protect MIFARE-compliant assets against state-of-the-art attackers.
• FAST Certification Certification scheme for FeliCa contactless IC card technology products, administered on behalf of FeliCa Networks, covering IC cards and crypto libraries with EAL4+ or EAL5+ assurance.
• SESIP Evaluation IoT platform evaluation scheme allowing functionality assessment at five hierarchical assurance levels (SESIP1-SESIP5), enabling platform evaluation once with reuse across multiple products.
• PSA Certified Security evaluation scheme for Platform Security Architecture (PSA)-based IoT systems, providing L1, L2, and L3 assurance for chips containing Root of Trust components and operated on behalf of GlobalPlatform.
• CCC-DK Certification Security certification scheme for SE/Digital Key Applet implementations used in CCC-Digital Key recognized end-user devices, mandated by the Car Connectivity Consortium.
• ADA Certification Security certification scheme for mobile, web, and cloud applications with three assurance levels, where TrustCB provides certification for the AL2 (Lab Tested) level requiring independent third-party evaluation.
• MDSCert Certification GSMA-aligned certification scheme for mobile device security based on the ETSI TS 103 732 series, covering hardware, firmware, OS, pre-loaded software, and in-life updates.
• GSMA eSA Certification Certification scheme for eUICC and secure elements designed according to GSMA specifications, addressing SIM and embedded SIM security for mobile devices.

Quantifiable outcome

• Certification within short and predictable timeframes, avoiding substantial financial losses from missed deadlines
• +1 more outcomes

Named customers7 records

Segments5 records

Ideal customer profiles6 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature2 records

Partnerships

14 partnerships are on record, tiered core.

• NXP SemiconductorscoreStrategic or Co-development PartnerTrustCB was chosen by NXP as the centralized Certification Body for the MIFARE Security Certification scheme. TrustCB is entrusted by NXP to make decisions on its behalf about the capability of products to protect assets against state-of-the-art attackers, and to maintain a high assurance level of the labs, methodologies and security analyses.
• FeliCa NetworkscoreStrategic or Co-development PartnerTrustCB was chosen by FeliCa Networks as the centralized Certification Body for the FeliCa™ Approval for Security and Trust (FAST) security certification scheme. TrustCB is entrusted to determine whether evaluation activities demonstrate TOE meets required security vulnerability analysis standards.
• Digital Agency of the Government of JapancoreStrategic or Co-development PartnerTrustCB has been engaged by the Digital Agency of the Government of Japan as the Certification Body for the JPKI Security Certification Scheme for Mobile Devices (JPKI-MD). The scheme is specifically designed for manufacturers of eSE and JPKI Applets used in mobile phones for the Japanese market.
• Car Connectivity Consortium (CCC)coreStrategic or Co-development PartnerTrustCB has been appointed by the CCC as Certification Body for the CCC-DK certification scheme for SE/Digital Key Applet security evaluation. This scheme enables product implementing CCC-DK Technology to demonstrate protection against state-of-the-art attacks.
• GlobalPlatform (PSA Certified)coreStrategic or Co-development PartnerTrustCB serves as the Certification Body for the PSA Certified scheme, founded by Arm and now operated by GlobalPlatform. PSA Certified is the independent security evaluation scheme for Platform Security Architecture (PSA) based IoT systems.
• GSMAcoreStrategic or Co-development PartnerTrustCB operates the TrustCB MDSCert scheme for Mobile Device Security Certification, aligned with GSMA requirements and based on ETSI TS 103 732 series of Protection Profiles. TrustCB serves as scheme owner responsible for direction and operations.
• App Defense Alliance (ADA)coreStrategic or Co-development PartnerTrustCB has been selected by ADA to provide certification services for its AL2 security validation level. ADA has established security criteria for assessment of mobile, web and cloud applications, with TrustCB providing independent third-party evaluation and certification.
• Dutch Ministry of Economic AffairscoreStrategic or Co-development PartnerTrustCB B.V. is designated by the Dutch Ministry of Economic Affairs as certifying body of qualified means for creating electronic signatures and seals under Article 30 of REGULATION (EU) No 910/2014 (eIDAS Regulation).
• SGS BrightsightcoreTechnology or IntegrationLicensed evaluation laboratory (ITSEF) for TrustCB certification schemes including EUCC, eIDAS, MIFARE, FAST, SESIP, and JPKI-MD evaluations.
• TÜV InformationstechnikcoreTechnology or IntegrationLicensed evaluation laboratory (ITSEF) for TrustCB certification schemes including EUCC, NSCIB, MIFARE, FAST, SESIP, and JPKI-MD evaluations.
• Keysight Technologies Netherlands Riscure B.V.coreTechnology or IntegrationLicensed evaluation laboratory (ITSEF) for TrustCB certification schemes including EUCC, MIFARE, FAST, SESIP, and CCC-DK evaluations.
• Applus+ LaboratoriescoreTechnology or IntegrationLicensed evaluation laboratory (ITSEF) for TrustCB certification schemes including EUCC, GSMA eSA, PSA Certified, TrustCB SESIP Scheme, and SESIP evaluations.
• Serma Safety & SecuritycoreTechnology or IntegrationLicensed evaluation laboratory (ITSEF) for TrustCB certification schemes including JPKI-MD, CCC-DK, MIFARE, and FAST evaluations.
• Dutch Accreditation Council (RvA)coreTechnology or IntegrationNational Accreditation Body of the Netherlands that provides official accreditation for TrustCB's certification activities under ISO/IEC 17065:2012.

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• TÜV Informationstechnik: German-based evaluation and certification body operating Common Criteria, EUCC, and scheme-specific certifications; directly comparable to TrustCB in scope, technical depth, and accreditation footprint across EU.
• SGS Brightsight: One of the world's largest dedicated IT security evaluation laboratories (ITSEF), performing Common Criteria, payment, and IoT security evaluations; operates as both an ITSEF for TrustCB schemes and as a competing certifier for smartcard/payment schemes.
• Riscure (Keysight Technologies): Leading security evaluation lab specializing in smartcards, mobile payments, and embedded device security; licensed ITSEF under TrustCB schemes and direct competitor in security testing for the same verticals (MIFARE, FAST, SESIP, CCC-DK).
• Applus+ Laboratories (IDIADA): Global testing and certification network covering Common Criteria, GSMA eSA, PSA Certified, and SESIP schemes; operates as both a TrustCB-licensed ITSEF and a competing certification body in adjacent markets.
• atsec information security: Independent IT security consulting and evaluation firm offering Common Criteria, FIPS 140-3, and PCI certification services; comparable niche player with similar accreditations and customer base.
• Serma Safety & Security: European IT security evaluation laboratory performing Common Criteria, JPKI-MD, CCC-DK, MIFARE, and FAST evaluations; functions both as TrustCB-licensed ITSEF and as a competing evaluation provider in similar scheme markets.

Broad incumbents

• TÜV Rheinland: Large global testing, inspection, and certification conglomerate offering Common Criteria and product security certification among a broad portfolio of services; competes in adjacent certification markets but is not specialized in TrustCB's niche verticals.
• Bureau Veritas: Global testing, inspection, and certification (TIC) major offering product certification across multiple industries including cybersecurity; broader portfolio player with overlap in IT security certification but not specialized in TrustCB's high-assurance smartcard/IoT niche.
• UL Solutions: Global safety science and certification company offering cybersecurity testing, Common Criteria, and product assurance services; broad incumbent competing for similar enterprise customers in product security certification.
• BSI (Bundesamt für Sicherheit in der Informationstechnik): German federal cybersecurity agency that operates its own Common Criteria certification scheme and accredits commercial certifiers; comparable in function to RDI in the Netherlands and a structural counterparty in the EUCC ecosystem.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/in/wouterslegers

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about TrustCB