esatus AG
esatus AG is a German IT security firm specializing in Identity and Access Management and Self-Sovereign Identity, providing the SOWL platform to orchestrate verifiable credentials between digital wallets (including EUDI Wallet) and existing enterprise IAM, KYC, and backend systems for European banks, regulated industries, and public-sector clients.
- Company typePrivate
- Founded1989
- HeadquartersLangen, Germany
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What esatus AG does
esatus AG is a privately held German IT security firm founded in 1989 and headquartered in Langen near Frankfurt, with a wholly-owned Swiss subsidiary (esatus Schweiz AG) in Luzern. The firm specializes in Identity and Access Management (IAM) and Self-Sovereign Identity (SSI) solutions for European enterprises and public-sector organizations, with 35+ years of experience operating in security-critical IT environments. Its flagship product is the SOWL (Secure Open Wallet Layer) platform — a proprietary orchestration layer that connects existing IAM, KYC, and backend systems with digital wallets (including the EUDI Wallet), enabling credential issuance, presentation, and verification without replacing incumbent infrastructure. SOWL supports open protocols (OpenID4VCI, OpenID4VP, SD-JWT, mDoc/mDL, DIDComm) and integrates with Keycloak, Bare.ID, RSA, CyberArk, and Omada. Supporting products include the esatus Wallet App (iOS/Android), the inGo construction-compliance platform (co-developed with Lindner Group), and the GLEIF vLEI Authenticator.
Revenue is generated through a mix of professional services (IAM strategy, integration, CIAM migration, consulting) and SOWL platform licensing/SaaS subscriptions, with on-premises or cloud-hosted deployment options. The go-to-market is high-touch enterprise sales targeting banking and regulated industries, supplemented by channel partnerships with Bare.ID, RSA, Wavestone, and Bridging IT. Customer concentration is heavy in German banking (Deutsche Bank, Commerzbank, DZ Bank, Helaba, Post Finance) and large industrial firms (Siemens, Volkswagen, Daimler, Deutsche Bahn), with the German Federal Chancellery as a flagship public-sector reference. Pricing is fully quote-based with no public tiers, and the sales motion is explicitly non-automated — inquiries route directly to subject-matter experts. The company has no disclosed external funding, appears founder/management-owned, and is actively shaping the eIDAS 2.0 / EUDI Wallet ecosystem through leadership roles in ISO/TC307, OpenWallet Foundation, Trust over IP, IDunion, Gaia-X, and DIDAS.
esatus AG firmographics
Firmographics- Name
- esatus AG
- Legal name
- esatus AG
- Website
- https://esatus.com
- Company type
- Private
- Founded year
- 1989
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- esatus AG is a German IT security firm specializing in Identity and Access Management and Self-Sovereign Identity, providing the SOWL platform to orchestrate verifiable credentials between digital wallets (including EUDI Wallet) and existing enterprise IAM, KYC, and backend systems for European banks, regulated industries, and public-sector clients.
- Ownership category
- akta.pro rank
esatus AG industry classification
Industry- Product category
- Digital Identity Software
- NAICS
- Computer Systems Design Services (541512), Management, Scientific, and Technical Consulting Services (5416)
- akta.pro primary industry
- Identity Verification, Proofing & KYC (IDV) (HDAEAJAI)
- akta.pro secondary industries
- Multi-Factor Authentication (MFA) & Passwordless Authentication (HDAEAJAC), Onboarding, KYC & Account Verification Support (BPAAABAG), API Security & Governance (Policy, Threat Protection) (HDAEAIAI)
Keywords
Where esatus AG is headquartered
LocationHeadquarters
- HQ city
- Langen
- HQ country
- Germany
- HQ region
- Europe
Offices2 records
Markets served
esatus AG business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- SOWL Platform Licensing / SaaS: SOWL can be operated by the customer (on-premises/self-hosted) or hosted by esatus AG as SaaS. The platform generates revenue through software licensing and subscription fees for cloud-hosted deployments. Daily license sync sends metadata (proof count, credential count, revocation count, identity count, error count, warning count, license ID) to esatus AG.
- Professional Services — IAM Integration & Consulting: esatus provides implementation, integration, migration, and consulting services for IAM and credential-based processes. This includes Bare.ID deployment, CIAM migrations, IAM strategy development, and SOWL integration projects. The sales motion is explicitly high-touch and consultative, with direct engagement from technical architects.
- Standards & Governance Consulting: Given esatus's deep involvement in standards bodies (ISO/TC307, OpenWallet Foundation, IDunion, etc.), the company provides advisory services related to digital identity standards, eIDAS 2.0 readiness, and regulatory compliance for wallets and verifiable credentials.
- inGo Platform (SOWL-based SaaS): inGo, a digital compliance platform for construction site credential management built on the SOWL suite, is offered as a managed service to general contractors such as the Lindner Group. Revenue is generated through platform usage fees per subcontractor/project.
Go-to-market motion3 records
Distribution channels5 records
Marketing channels7 records
esatus AG product offering
Product offeringCore offering
esatus AG builds and operates SOWL (Secure Open Wallet Layer), a credential orchestration platform that enables organizations to issue, manage, and verify digital identities and verifiable credentials. The company also delivers enterprise IAM consulting, KYC modernization with EUDI Wallets, and verticalized identity solutions such as inGo for construction compliance and the GLEIF vLEI Authenticator.
Product overview
esatus AG offers a portfolio of products and services centered on the SOWL Platform — its proprietary orchestration layer for Verifiable Credentials in enterprise environments. SOWL sits between existing IAM, KYC, and backend systems on one side, and digital wallets (including the EUDI Wallet) on the other. It comprises modular components: SOWL Core (orchestration), the Issuer Module (converts backend decisions into signed credentials), the Verifier Module (real-time credential validation), and a Wallet Integration Module (connects EUDI and compatible wallets). The esatus Wallet App is the company's own mobile credential wallet for iOS and Android. Supporting products include inGo (a SOWL-based digital compliance platform for construction-site subcontractor management, built with the Lindner Group) and the GLEIF vLEI Authenticator (credential-based corporate identity login integrated with Keycloak via SOWL). esatus also delivers professional services including Enterprise IAM integration and operations (supporting 13 protocols), KYC-to-EUDI Wallet bridging, CIAM migration (to Bare.ID/Keycloak), IAM strategy and governance advisory, and digital credentials implementation.
Differentiator
Problem solved
Functional benefit
Brands
- SOWL: Platform for issuing, verifying, and orchestrating verifiable credentials in enterprise environments. Connects Wallets, IAM, KYC, and specialist systems.
- inGo
- esatus Wallet App
Quantifiable outcome
- Lindner Group reduced credential verification time from 5–10 minutes per person to under 5 seconds; error rate dropped from up to 15% to under 1%; over 1,000 paper documents per project replaced with digital credentials
- +3 more outcomes
Companies that use esatus AG
Customer profileNamed customers21 records
Segments6 records
Ideal customer profiles4 records
esatus AG technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration11 records
AI capability3 records
Feature8 records
esatus AG partnerships and signals
Strategic signalPartnerships
20 partnerships are on record, tiered key, core and secondary.
- Bundesdruckerei (Federal Printing Office)keyBundesdruckerei provided state-level identity assurance for the Federal Chancellery's ID Wallet initiative. esatus provided SOWL as the technical core. Bundesdruckerei and esatus's architecture patterns from this project influenced eIDAS 2.0.
- IBMkeyIBM provided enterprise-grade infrastructure for the Federal Chancellery's ID Wallet initiative. Architecture patterns from the collaboration with IBM were integrated into IBM's portfolio. esatus is also listed as a reference customer on IBM's ecosystem page.
- RSAcoreRSA provides established security solutions for existing IAM landscapes. esatus and RSA collaborate to extend these systems so that digital credentials can be used within them. RSA's security platform is integrated with SOWL as part of esatus's partner ecosystem for credential-based processes.
- GLEIF (Global Legal Entity Identifier Foundation)coreGLEIF provides globally unique legal entity identifiers. esatus and GLEIF co-developed the vLEI Authenticator, enabling cryptographically verifiable organizational identity and authorized representative roles. SOWL serves as the orchestration layer, coordinating credential flow between wallets, verifiers, and IAM systems (Keycloak).
- Bare.IDcoreBare.ID provides an open IAM platform based on Keycloak. esatus and Bare.ID collaborate to connect identity management with digital credentials, creating controllable structures for wallet-based credential processing. Bare.ID is both a technology partner and a channel partner distributing SOWL.
- Lindner Groupkeyesatus and the Lindner Group co-developed inGo, a digital compliance platform for construction site credential management, built on the SOWL suite. Lindner Group is the anchor customer and co-development partner. inGo is positioned as a product offering to the broader construction industry.
- WavestonesecondaryWavestone is an international consulting firm. esatus collaborates with Wavestone as a consulting partner for digital identity and IAM engagements in the enterprise market.
- Bridging ITsecondaryBridging IT is an IT consulting firm listed as a partner. esatus collaborates with Bridging IT on digital identity implementation projects in the DACH market.
- OpenWallet Foundationcoreesatus is a founding member of the OpenWallet Foundation (hosted by the Linux Foundation). The foundation develops open-source software components for wallet ecosystems. esatus contributes directly to the technical governance and development of the OpenWallet Foundation's open wallet ecosystem.
- Linux Foundationcoreesatus is a member of the Linux Foundation and participates in its open standards and digital identity initiatives. The Linux Foundation hosts the OpenWallet Foundation, where esatus holds a founding member role.
- Trust over IP Foundationkeyesatus is an active member and contributor to the Trust over IP Foundation, contributing to the technical governance of open wallet ecosystems and credential trust frameworks.
- IDunionkeyIDunion is a decentralized identity network in Germany. esatus participated as a technical partner, providing the SOWL platform as the connection layer for cross-system credential issuance, verification, and revocation in the IDunion pilot project.
- DIDAS (Swiss)keyDIDAS is the Swiss decentralized identity association. esatus (through its Swiss subsidiary esatus Schweiz AG) participates in DIDAS, contributing to the development of decentralized identity infrastructure in Switzerland.
- DIN (German Institute for Standardization)keyesatus participates in DIN through ISO/TC307 contributions. DIN is the German national standards body, and esatus's work in international standards bodies (ISO, CEN) flows through national representation.
- TeleTrusT (IT Security Association Germany)secondaryesatus is a member of TeleTrusT, a German IT security association that brings together industry, government, and research stakeholders. Participation supports knowledge exchange and industry credibility in the German security market.
- MyData Globalsecondaryesatus participates in MyData Global, an organization promoting human-centered data solutions. This reflects esatus's commitment to privacy-by-design and self-sovereign identity principles in its credential platform.
- T-Systemskeyesatus supported T-Systems in developing the Gaia-X Personal Credential Manager as part of the Gaia-X Federation Services (GXFS) project. The Personal Credential Manager Cloud and Extension 1 are open-source reference implementations for the Gaia-X ecosystem.
- Gaia-Xkeyesatus contributed to the Gaia-X Federation Services project as the technical developer of the Personal Credential Manager. Gaia-X is the European data infrastructure initiative for digital sovereignty, and credential management is a core component.
- OpenCloudkeyOpenCloud provides a sovereign open-source business application for the EUDI Wallet demonstrator. The partnership showcases how SOWL enables verifiable credentials in a real business application on a sovereign cloud infrastructure.
- Better EdgesecondaryBetter Edge provides sovereign cloud infrastructure for the EUDI Wallet demonstrator on a platform for sovereign computing. SOWL runs on this infrastructure as part of the demonstrator.
Scale indicators5 records
Recent moves8 records
Expansion highlights6 records
esatus AG competitors and assessment
Company assessmentDirect peers
- Spruce ID: Spruce ID offers developer tools for decentralized identity, verifiable credentials, and data ownership, including wallet and DIDComm implementations. Its protocol-level focus on OpenID4VCI and SD-JWT overlaps directly with esatus's technical approach.
- Dock Labs: Dock Labs provides a verifiable credentials platform with a focus on portable digital identity and certification use cases. Like esatus, it serves enterprises and governments seeking reusable, cryptographically verifiable credentials.
- MATTR: MATTR is a verifiable credentials and digital trust infrastructure provider with a globally distributed platform supporting OpenID4VCI/VP, SD-JWT, and mDoc. Like esatus, it focuses on enterprise and government adoption of decentralized identity, making it a direct comparable in product scope and protocol alignment.
- Indicio: Indicio (formed from Evernym, the pioneers of Sovrin) provides decentralized identity infrastructure and verifiable credential solutions for governments and enterprises. It is a direct competitor in the SSI ecosystem that esatus addresses through SOWL and Gaia-X PCM.
- Affinidi: Affinidi is a decentralized identity and verifiable credentials platform, originating from Temasek/Infosys, with a focus on consent-based data sharing and portable identity. It targets the same enterprise and consumer identity use cases as esatus SOWL.
- Verimi: Verimi is a German identity platform offering secure digital identity verification and authentication services, with a strong focus on regulated industries and consumer data protection. It overlaps with esatus's KYC and identity verification offerings in the DACH market.
- Scytale: Scytale is a Berlin-headquartered enterprise verifiable credentials platform that helps organizations issue, verify, and manage digital identities. Its product focus and European base make it a closely comparable direct competitor to esatus SOWL in the same addressable market.
- Trinsic: Trinsic provides a verifiable credentials platform with APIs and a wallet infrastructure, enabling organizations to issue and verify digital credentials. It overlaps directly with esatus's SOWL Issuer, Verifier, and Wallet Integration modules in functionality and target buyer profile.
Broad incumbents
- Microsoft Entra Verified ID: Microsoft's Entra Verified ID is a decentralized identity offering within the broader Entra identity platform, integrated with Microsoft 365 and Azure AD. It represents a broad incumbent that bundles wallet-style verifiable credentials into a wider identity and access management suite, competing with esatus's integration-layer positioning at enterprise scale.
- IBM Security Verify: IBM Security Verify is an enterprise IAM and CIAM platform that incorporates verifiable credential capabilities, including prior collaboration with esatus on the Federal Chancellery ID Wallet. As a broad incumbent, IBM competes with esatus for wallet and identity deployments while also being a historical partner.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
esatus AG social profiles
Digital presenceesatus AG compliance and trust
Trust signalCompliance1 record
esatus AG financial estimates
Financial estimateRevenue estimate
Valuation estimate
esatus AG leadership team
Management profileNumber of profiles
Profiles5 records
esatus AG subsidiaries and ownership
Company hierarchySubsidiaries1 record
esatus AG funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
esatus AG M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about esatus AG
What does esatus AG do?
esatus AG builds and operates SOWL (Secure Open Wallet Layer), a credential orchestration platform that enables organizations to issue, manage, and verify digital identities and verifiable credentials. The company also delivers enterprise IAM consulting, KYC modernization with EUDI Wallets, and verticalized identity solutions such as inGo for construction compliance and the GLEIF vLEI Authenticator.
Is esatus AG a public or private company?
esatus AG is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was esatus AG founded?
esatus AG was founded in 1989. It employs 11 to 50 people.
Where is esatus AG based?
esatus AG is headquartered in Langen, Germany, in the Europe region.
How does esatus AG make money?
Four revenue lines are on record. SOWL Platform Licensing / SaaS are the primary driver. The others are professional Services — IAM Integration & Consulting, standards & Governance Consulting and inGo Platform (SOWL-based SaaS).
Who are esatus AG's main competitors?
Direct peers on record are Spruce ID, Dock Labs, MATTR, Indicio, Affinidi, Verimi, Scytale and Trinsic. Broad incumbents are Microsoft Entra Verified ID and IBM Security Verify.
Does esatus AG have an API?
Yes. SOWL provides REST APIs for core integration points. The platform supports OpenID4VCI (OpenID for Verifiable Credential Issuance) for issuing credentials and OpenID4VP (OpenID for Verifiable Presentations) for requesting and presenting credentials. Credential Offers, presentation requests, and status checks follow defined protocols. Versioned APIs ensure existing integrations remain stable as the platform evolves. SOWL also supports SCIM for identity provisioning.
What industry is esatus AG in?
esatus AG's product category is Digital Identity Software. Its primary akta.pro industry code is HDAEAJAI, Identity Verification, Proofing & KYC (IDV), with a secondary code of HDAEAJAC, Multi-Factor Authentication (MFA) & Passwordless Authentication. Its NAICS code is 541512.