European identity, out of the box.
DigiD, eHerkenning, and eIDAS aren't a plugin you hunt for — they're first-class brokers. Run HelixIAM in your own cloud or data centre, keep your signing keys, and satisfy the regulator.
The EU/NL eIDs
Let citizens and businesses sign in with the credentials they already trust. HelixIAM brokers DigiD, eHerkenning, and cross-border eIDAS with the right assurance levels.
- DigiD (NL citizen)
- eHerkenning (NL business)
- eIDAS (EU cross-border)
- Assurance-level enforcement
Sovereign deployment
Run where your data must live — your cloud, on-prem, or air-gapped. No dependency on a foreign SaaS control plane.
- Self-hostable (Docker / Helm)
- EU data residency
- No third-party control plane
- HA topology + benchmarks
Your keys, your control
Every realm has its own signing keys with zero-downtime rotation. Keys are generated and held where you run — never handed to a vendor.
- Per-realm KMS / HSM keys
- Zero-downtime key rotation
- Realm Keys management UI
- PKCS#11 support
Compliance built in
Per-realm branding, Dutch localization, GDPR rights tooling, and a searchable audit trail make regulated deployments straightforward.
- Per-realm login theming
- nl-NL localization
- GDPR rights tooling
- Searchable audit log + SIEM
See HelixIAM on your own stack.
A 30-minute demo: realms, agents, workload identity, and a live migration off Keycloak — mapped to your use case.
No credit card. Self-hostable. Engineered in Europe.