B-Trust eID: Bulgarian eID Scheme Peer Review

Project's Background

In late 2025, SpearIT was invited to act as an independent peer reviewer of Bulgaria's B-Trust electronic identification scheme, as the company prepared for EU-wide notification for LoA Substantial and High, under the eIDAS Regulation.

BORICA AD occupies a central role in Bulgaria's digital and payments infrastructure, and its B-Trust brand has become synonymous with qualified trust services in the country, encompassing cloud-based qualified electronic signatures, remote identification, and electronic authentication. With BORICA's ambition to secure notification of the B-Trust eID scheme at both LoA Substantial and LoA High, a thorough and impartial review of the scheme's compliance with the eIDAS Regulation, its Implementing Acts, and the relevant European standards was essential.

Our Contribution

SpearIT brought an independent, multidisciplinary perspective to the peer review process. Our experts conducted a systematic examination of the B-Trust eID scheme's organizational, procedural, and technical components, benchmarking them against the requirements set out in Commission Implementing Regulation (EU) 2015/1502 and the expectations for cross-border interoperability and mutual recognition. This encompassed the review of governance structures, operational security practices, identity proofing and verification processes, authentication mechanisms, and the scheme's overall alignment with European best practices for both assurance levels.

The review required a combination of deep technical knowledge and regulatory fluency — two domains that SpearIT bridges through its extensive experience with national eID notifications, trust service assurance frameworks, and conformity assessment processes across multiple Member States. Our contribution helped ensure that the B-Trust eID scheme was not only technically robust but also well-positioned to meet the expectations of the Cooperation Network and European peer reviewers during the formal notification process.

Project's Outcome

The outcome of this collaboration was the cross-border acceptance of B-Trust eID scheme for LoA Substantial and High, along with a series of technical and procedural improvements that will strengthen the assurance provided by the scheme. Ultimately, .

• For Bulgarian citizens and businesses, successful notification will mean that B-Trust electronic identification can be used to access public and private services across the European Union, reinforcing trust and enabling seamless cross-border digital interactions.
• For BORICA AD, the independent peer review provided an expert validation of the scheme's readiness and a clear roadmap for any refinements needed to satisfy the requirements for EU-wide mutual recognition at both assurance levels.
• For SpearIT, this project further consolidated our expanding role in Europe's digital identity ecosystem. By delivering independent peer review expertise to one of Southeast Europe's most established trust service providers, we demonstrated our ability to support diverse stakeholders — from Member State authorities to private-sector operators — in navigating the eIDAS notification process with confidence and rigour.

For more information regarding B-Trust eID, visit: https://www.b-trust.bg/services/electronic-identification