# Become an iSHARE Qualified Issuer in six steps

**Version** 1.0-draft · **Date** 7 September 2026 · **Portal** issuer.ishare.eu

One step at a time. You can stop after any step and continue later; everything is saved.

| Step | You do | Takes | You get |
|---|---|---|---|
| 1. Tell us who you are | Legal name, register number (KvK, LEI, VAT or EORI), the person who signs for you | 5 minutes | Your organisation is verified against the register |
| 2. Choose what you will issue | Tick the credentials you want to issue and the iSHARE versions you support | 2 minutes | The list of questions that apply to you |
| 3. Use what you already have | Tell us if you hold ISO 27001, an eIDAS qualified status or a GLEIF QVI qualification | 2 minutes | Questions already covered are pre-filled; you only confirm |
| 4. Answer the questions | One question at a time: answer, attach the document that shows it | A few sessions | A complete dossier |
| 5. Pass the conformance test | Run the test suite in the Conformance Test Tool and paste the test run id | Depends on your software | Green check per version, reference code unlocked |
| 6. Check and submit | See what is still open, sign the declaration, submit | 5 minutes | Your dossier is with iSHARE |

## What happens after you submit

1. **Within 5 working days** iSHARE tells you if anything is missing.
2. **Within 30 days** of a complete dossier iSHARE decides and tells you your assurance level. If something small is missing you get one free re-assessment.
3. **You sign** the Accession Agreement and **pay** the one-time accreditation fee of €3,500. Annual membership follows your revenue tier, at 50% in year 1.
4. **Within 2 working days** of payment your public key and issuer details are on the Trusted Issuers Registry. You can start issuing.

## After that

- Once a year you confirm what changed and refresh expired documents.
- You manage your own public profile, team and keys in the same portal.
- If you want to stop, you give 6 months notice and your customers get 90 days to move.

## The questions

The questions are the 36 questions of the iSHARE Assessment Framework for Certified Parties, plus up to 14 questions on how you issue credentials (keys, status lists, schemas, test run). Data Rights Credential issuers are also asked how they verify that the Data Rightsholder actually holds the rights to the data before issuing (section 5.4). Which ones apply depends on step 2:

| You issue | From the framework | On credential issuance | Total |
|---|---|---|---|
| Participant Credentials (the Participant Registry role) | 35 (sections 1–4; question 14 was withdrawn) | 11 | 46 |
| Data Rights Credentials only (the Authorisation Registry role) | 21 (section 4) | 13 | 34 |
| Identity Credentials (the Identity Provider role) | 35 (sections 1–4) | 10 | 45 |

The framework applies sections 1 to 3 (enrolment, identification means, authentication) to the Identity Provider and the Participant Registry, and section 4 (management and organisation) to every certified party.

Each question has one answer (Yes/No, or Low/Substantial/High) and at least one attached document.