ModuleLive
EAA Conformance
ETSI TS 119 472-1 (v1.2.1)
Scope
Covers the SD-JWT VC profile of Electronic Attestations of Attributes (EAA), with parallel coverage of cross-cutting requirements that apply regardless of profile. Both Issuer and Verifier roles are exercised, across Ordinary EAA, QEAA, and PuB-EAA tiers. Around 90 individually-numbered controls are extracted directly from the underlying ETSI specs, each linked back to its clause and page.
Controls overview
332 controls catalogued.
Each row in the catalogue links to a public, stable URL. Filter by profile, role, tier, or requirement level below, or open the full catalogue.
Total controls
332
Shall
259
Mandatory
Should
10
Recommended
May
63
Optional
159 of 332 controls are auto-tested when you run an assessment. The rest are documented in the catalogue for reference.
By profile
By role
What we test
Every normative rule, mechanically.
- Every normative requirement in ETSI TS 119 472-1 clauses 4 and 5 that the engine can verify against an EAA artefact (payload, JOSE header, issuer certificate, status list, or type metadata).
- Cross-cutting controls in clause 4 that apply uniformly across both SD-JWT VC and mdoc, surfaced once in the catalogue rather than duplicated per profile.
- Tier-aware scoring: the same EAA is checked against Ordinary, QEAA, and PuB-EAA rule sets in a single pass, with a gap analysis for the tiers it would not yet meet.
What we add beyond ETSI
The bits the spec leaves implicit.
- Plain-English explanations and a curated list of common mistakes for every control. The ETSI specification carries the normative text only; the rest is iGrant.io editorial.
- Open-source check functions you can drop into your own CI, rather than only consume through a hosted assessment.
- A live, public catalogue page per control with stable URLs, so spec IDs are linkable from issue trackers, design documents, and audit reports.