Credentials that verify themselves.

SAPIO lets schools, universities and training providers issue tamper-proof digital credentials. Learners keep them in their own wallet. Employers check them in seconds, without contacting the issuer.

  • Winner HR Tech Jungle 2025, Berlin
  • Finalist FIDES Global Digital Trust Awards 2026, Geneva
  • Finalist Zuger JungUnternehmerpreis
Swiss Made Software
Example University of Applied SciencesCertificate of Advanced Studies
SD-JWT VC
Holder
Anna Muster
Programme
CAS Digital Transformation
ECTS credits
15
Completed
30 June 2026
Final grade
5.5Ki2aO5Mtl3Hq_9fN0y7rVb1uXe4c…
Date of birth
14 March 1994pQ8wZs3LmH0dYt6nA2kVx9RfEj1u…
Verified
  • Issuer signature valid
  • Issuer: did:webvh:…:example.edu
  • Status: not revoked
Example credential Selective disclosure: the verifier sees only the claims the holder chooses to share. Undisclosed claims stay salted hashes.
Built on
  • SD-JWT VC
  • OpenID4VCI
  • OpenID4VP
  • did:webvh
  • EDC / ELM
  • swiyu · EUDI

One credential, three parties, no phone calls.

A verifiable credential carries its own proof of origin. Nobody has to call the registrar to confirm it is real.

  1. 01OpenID4VCI

    IssueInstitutions

    Design a credential template once, then issue to a whole cohort from the SAPIO dashboard. Every credential is signed with your organisation’s key.

  2. 02Wallet

    HoldLearners

    Recipients claim the credential into a compatible wallet on their phone. It belongs to them, not to a portal they lose access to after graduation.

  3. 03OpenID4VP

    VerifyEmployers

    The holder presents it with a QR scan. Signature, issuer and revocation status are checked in real time.

Share the proof, not the whole record.

A PDF shows everything to everyone and proves nothing. A SAPIO credential proves where it came from and lets the holder decide which details a verifier sees.

  • Selective disclosure

    Each claim can be revealed or withheld on its own, using SD-JWT VC.

  • Your issuer identity

    Credentials are bound to your organisation through did:webvh, not to our platform.

  • Revocation as status

    Withdrawing a credential is a traceable status change, not a silent deletion.

  • Shared semantics

    Content aligned with the European Learning Model (ELM) so others can read it.

Everything an institution needs to run digital credentials.

Live dashboard

Follow issuance, claims and verifications as they happen.

Credential templates

Define fields, design and validity once. Reuse them for every cohort.

Presentation templates

Decide exactly which claims a verifier may request, per use case.

Cohort issuance

Import recipients from a structured file and issue in one run.

Verify other issuers

Check credentials from other trusted schools, academies and companies too.

No technical expertise needed

Built for registrars, programme managers and HR teams.

Built on the standards Europe is converging on.

SAPIO issues and verifies with the open specifications behind the EU Digital Identity Wallet and the Swiss trust ecosystem. Your credentials are not locked into our platform.

  • SD-JWT VCCredential format with selective disclosure
  • OpenID4VCIIssuing credentials into a wallet
  • OpenID4VPPresenting and verifying credentials
  • did:webvhIssuer identity anchored in your own domain
  • EDC / ELMEuropean learning semantics
  • swiyu · EUDISwiss and EU wallet ecosystems
  • WE BUILD consortium partner

    EU large-scale pilot for the EUDI Wallet, use case on micro-credentials and verified skills.

  • DIDAS member

    Swiss digital trust association. SAPIO leads its Education Working Group and co-authored its education trust flows.

    See the trust flows
  • 24 December 2026

    Deadline for every EU member state to offer at least one EUDI Wallet under Regulation (EU) 2024/1183.

Academic achievements that cross borders.

In the EU.ACE university alliance, SAPIO ran the complete credential journey with real learners: from structured credential design to issuance, wallet storage and independent verification.

Read the pilot story
verifiable credentials issued to learners
15
of learners claimed their credential
74%
universities in the EU.ACE alliance
10

Ready for swiyu.

SAPIO has issued its first verifiable credential to swiyu, the wallet of the Swiss Confederation, in the federal sandbox. Swiss schools and training providers can prepare now for certificates that sit next to the e-ID.

How SAPIO issues to swiyu
  • Own issuer identity in the swiyu trust infrastructure
  • SD-JWT VC over OpenID4VCI
  • Same standards as the EUDI Wallet

From first call to production in four weeks.

  1. Week 1

    Define the credential

    What it says, who issues it, when it expires. About two hours of your time.

  2. Week 2

    Set up your issuer

    Issuer identity, template and design. You approve the layout.

  3. Week 3

    Test with a small cohort

    Trial issuance and verification in a real wallet.

  4. Week 4

    Go live

    Production issuance, handover and onboarding for your team.

Questions we hear often.

Something else? Write to us.

Background: guides and glossary

What is a verifiable credential?

A digital certificate that is cryptographically signed by the issuing organisation. Anyone can check that it is authentic, unchanged and still valid, without contacting the issuer. It is stored in the holder’s wallet, not in a central database.

Does SAPIO use blockchain?

No. SAPIO uses the SD-JWT VC credential format with OpenID4VCI for issuance and OpenID4VP for verification. The issuer’s identity is published with did:webvh, which is anchored in the issuer’s own web domain. No blockchain, tokens or cryptocurrency are involved.

Which wallets can hold SAPIO credentials?

Wallets that support OpenID4VCI and SD-JWT VC. We build on the same open standards as the EU Digital Identity Wallet and the Swiss trust ecosystem, and we test interoperability as a consortium partner in the WE BUILD large-scale pilot.

What does a verifier need?

A browser and the SAPIO verification flow. The holder scans a QR code, chooses what to share, and the verifier sees the result with signature, issuer and revocation checks. No integration is needed on the verifier’s side.

How long does a pilot take?

Typically four weeks from the first working session to production issuance. Your team spends about two hours defining the credential, then approves the layout and names a small test cohort.

Who is responsible for the personal data?

The issuing organisation decides what goes into a credential and acts as controller. SAPIO processes the data on its behalf under a data processing agreement. Details are in our privacy policy.

Ready to issue credentials that verify themselves?

A first call takes 30 minutes. We look at your credential type and tell you honestly what it takes.