Buypass

Buypass is a Norwegian company providing digital identity, electronic signing, and payment solutions for public and private sectors. Founded in 2000, the firm operates within the Scandinavian information and communications technology landscape, interacting with institutions across Europe and global standards bodies. Its offerings intersect with national infrastructure projects, financial networks, and security frameworks used by enterprises and governmental agencies.

History

Buypass was established in 2000 during a period of rapid expansion for public key infrastructure initiatives influenced by projects in Norway, Sweden, Denmark, and the broader European Union digital policy developments. Early collaborations involved Norwegian agencies such as Statens vegvesen and Helsesektoren-adjacent institutions, and the firm engaged with pan-European initiatives like the eIDAS Regulation discussions and interoperability pilots alongside entities from Germany, France, and the United Kingdom. Throughout the 2000s and 2010s Buypass integrated with national identity schemes similar to those in Estonia and technology partnerships seen with companies like Telenor, Equinor (formerly Statoil), and telecom operators in the Nordic countries. The company expanded services in response to directives and frameworks shaped by bodies such as the European Commission, NIST, and the International Organization for Standardization. Strategic milestones included certifications aligned with standards promoted by ISO committees, and participation in consortiums alongside firms like Microsoft, IBM, Oracle, Cisco Systems, and Thales Group.

Services and Products

Buypass offers a portfolio comprising electronic identification, qualified electronic signatures, two-factor authentication tokens, and payment solutions for tolling and point-of-sale operations. Key product types mirror services used in projects by Statkraft, DNB ASA, SpareBank 1, and municipal services in Oslo and Bergen. The company provides digital certificates compatible with browsers and operating systems from Apple, Google, Mozilla Foundation, and enterprise platforms from Red Hat and Canonical. Its eID and signature services are utilized in workflows alongside enterprise software from SAP, Sage Group, Salesforce, and public administration systems used by authorities like Skatteetaten and healthcare providers influenced by regulations in World Health Organization-aligned frameworks. Payment and tolling offerings resemble deployments by transport agencies such as Autostrade per l'Italia and integrate with payments infrastructures used by Visa, Mastercard, PayPal, and regional clearinghouses like Nets.

Technology and Security

The firm leverages public key cryptography, hardware security modules, and protocols compliant with standards promulgated by IETF, W3C, and ETSI. Implementation details reference cryptographic algorithms and protocols common to deployments by RSA Security, Entrust, DigiCert, and research outputs from MIT and ETH Zurich. Deployments often use HSMs and secure elements supplied by vendors such as Gemalto (now part of Thales Group), and integrate with cloud platforms from Amazon Web Services, Microsoft Azure, and Google Cloud Platform while aligning with guidance from CIS and ENISA. Incident response and threat intelligence practices correspond with frameworks advocated by CERT-EU, NCSC UK, and national Computer Security Incident Response Teams like NorCERT. Security audits and penetration testing are performed in reference to methodologies used by SANS Institute and academic centers at University of Oslo and NTNU.

Market Position and Partnerships

Buypass occupies a regional market niche comparable to providers operating in the Nordics and competing or collaborating with firms like Signicat, GlobalSign, Comodo, and Let's Encrypt in different segments. The company has formed partnerships with financial institutions such as Nordea, technology vendors including Capgemini and Accenture, and systems integrators active in public sector digital transformation like CGI Group and KPMG. Cross-border interoperability efforts link the firm with European projects involving EUDI Wallet pilots, and cooperative arrangements reflect patterns similar to alliances between European Commission initiatives and private sector consortia including GSMA and EEMA. Market dynamics involve interactions with central banks and regulators such as Norges Bank and supervisory authorities in the European Central Bank area.

Regulatory Compliance and Certifications

Operations adhere to regulatory regimes and certification schemes comparable to those required under eIDAS Regulation and standards developed by ETSI, ISO/IEC, and guidance from national authorities such as Datatilsynet in Norway. Certifications and compliance audits reference criteria similar to those applied by Common Criteria evaluations and assurance profiles endorsed by ANSSI-level security authorities. The firm aligns with payment industry requirements analogous to PCI DSS and cooperates with financial regulators including Finanstilsynet and supervisory practices observed by European Banking Authority-influenced regimes. Consumer protection and privacy work reflect standards propagated by the European Data Protection Board and national data protection agencies.

Category:Companies of Norway