EU Age-Verification App Moves From Blueprint to Deployment
The Commission's white-label age-verification app is technically ready, with front-runner member states piloting it. Together with the DSA Article 28 minors guidelines, the reasonable bar for age assurance is now defined.
What Changed
On April 15, 2026, the European Commission (EC) announced that its white-label age-verification app was technically ready for deployment by member states and platforms. Built on the same architecture as the European Digital Identity (EUDI) Wallet, the open-source app lets users prove they are over 18 without disclosing any other personal data. Front-runner member states France, Denmark, Greece, Italy, Spain, Cyprus and Ireland are piloting it during 2026. It operationalises the EC's April 29, 2026 Recommendation urging solutions be rolled out by December 31, 2026, and gives platforms a concrete tool for meeting the Article 28(1) Digital Services Act (DSA) minors guidelines finalised July 14, 2025.
Who It Affects
Online platforms accessible to minors, including social media, video-sharing, gaming and adult-content services, excepting micro and small enterprises. Adult-content sites face the most direct pressure, since the app targets the over-18 gate. With the Commission now providing a privacy-preserving reference implementation, platforms can no longer argue that compliant age assurance is impractical; other methods will be measured against this non-intrusive, data-minimising bar.
What to Do
Assess whether your current age gate meets the Article 28 expectation of accurate, reliable, robust and non-intrusive assurance, or still relies on self-declaration. Plan relying-party integration with the EU app where it fits, but recognise the December 2026 target is a floor, not a full compliance strategy. Combine the app's over-18 proof with document-and-liveness checks for higher-assurance contexts and inference for low-stakes signals, each producing a verifiable, privacy-preserving record.
What is deepidv?
Not everyone loves compliance — but we do. deepidv is the AI-native verification engine and agentic compliance suite built from scratch. No third-party APIs, no legacy stack. We verify users across 211+ countries in under 150 milliseconds.
Learn More