Forms and guidance

What’s new?

Our forms and guidance have been updated to reflect changes introduced by Amendment 2025-1 to the Digital Identity Services Trust Framework Rules. Key updates include:

• References to new and amended rules: The latest version of the Rules can be found on the Trust Framework legislation page.
• Privacy evaluation template updates: Two new requirements – data minimalisation and international transfers – have been added. The format has been revised to align more closely with the independent security evaluation template.
• Credential format questionnaires: Applicants for credential and facilitation services must now complete a separate questionnaire outlining compliance with ISO 18013-5 and/or ISO 23220 series and/or the W3C Verifiable Credentials Data Model. This can be requested from TFA@dia.govt.nz.
• Improved application form structure: The application form has been reordered to enhance the flow of information.
• Document formatting updates: All templates and guidance documents have been refreshed for consistency and readability.

The next scheduled update, is expected in approximately April 2026, to reflect the next round of amendments to the rules.

For providers

Updated: October 2025

Guidance: Safe use of flash pass presentation [DOCX, 2.8MB]
This guidance provides information to Facilitation Service providers, Users and Relying Parties on the safe use of "flash pass" credential presentations.

Guidance: Server Retrieval for Verifiable Credentials [DOCX, 137KB]
This document provides guidance for the design and implementation of digital identity services, on the Server Retrieval Method in the context of Verifiable Credentials.

Practice Note: Updates to the Trust Framework Rules [DOCX, 457KB]
This practice note provides information for providers on updates to the Trust Framework Rules.

Application

Trust Framework Authority application guidance for providers [PDF, 875KB]
Guidance document for digital identity service providers seeking accreditation under the Trust Framework. 

Trust Framework Authority application form [DOCX, 1.5MB]
Application form for digital identity service providers seeking accreditation under the Trust Framework. The application form must be completed and returned to the Trust Framework Authority with relevant documents.

Delegation of authority [DOCX, 46KB]
This form ensures that applicants have the authority to submit applications on behalf of the provider and must be completed as part of the application process.

Privacy

Trust Framework Authority privacy evaluation template [DOCX, 1.4MB]
Template to be completed by the independent privacy evaluator with the findings from the independent evaluation (required for an application for Trust Framework accreditation).

Security

Trust Framework Authority independent security evaluation template [DOCX, 2.9MB]
Template to be completed by the independent security evaluator with the findings from the independent evaluation (required for an application for Trust Framework accreditation).

Evaluators should note that this template differs from the previous version (dated July 2025). If an evaluation has commenced using the previous version, the previous version may be completed and included in an application for assessment. The new version must be completed for all new applications.

Identification Management

Applicants must obtain and provide either an evaluation of conformance with the New Zealand Identification Standards OR an identification management evaluation from an independent identification management evaluator.  

Trust Framework Authority independent identification management evaluation template [PDF, 825KB]
Template to be completed by the independent identification management evaluator with the findings from the independent evaluation (required for an application for Trust Framework accreditation).

Guidance for conformance with the New Zealand Identification Standards [PDF, 334KB]
Guidance to support providers in preparing for their evaluation of conformance with the New Zealand Identification Standards.

Trust Framework Authority facilitation services credential format questionnaire [PDF, 761KB]
Applicants applying for accreditation of facilitation services need to complete this credential format questionnaire which outlines how they comply with ISO 18013-5, ISO 18013-7, ISO 23220 series and/or the W3C Verifiable Credentials Data Model. 

Trust Framework Authority credential services credential format questionnaire [PDF, 762KB]
Applicants applying for accreditation of credential services need to complete this credential format questionnaire which outlines how they comply with ISO 18013-5 and/or ISO 23220 series and/or the W3C Verifiable Credentials Data Model.

Reconsiderations

Trust Framework Authority application form for a reconsideration  [DOCX, 1.4MB]
This form is for applicants applying for a reconsideration of the application and must be submitted within 20 working days of the notice of the decision.

Reporting Templates

Trust Framework Authority six monthly report template [DOCX, 1MB]
This is as per the requirement under regulation 19(1) of the Digital Identity Services Trust Framework Regulations, all Trust Framework providers are required to report to the Trust Framework Authority at the end of each 6-month period on the use of their accredited services during that period.

Trust Framework Authority annual report template [DOCX, 450KB]
This is as per the requirement under regulation 19(2) of the Digital Identity Services Trust Framework Regulations for  all Trust Framework providers to report to the Trust Framework Authority about the use of their accredited services during each 12 month period.

Trust Framework Authority two yearly report template [DOCX, 448KB]
This template provides attestations that certain required activities have been completed every two years, starting from two years following the date of the accreditation.

Back to Top