Independent evaluations

The Digital Identity Services Trust Framework Regulations require that an application for accreditation include an independent evaluation in the areas of security, privacy and identification management.

An independent evaluator is an individual or organisation considered by the Trust Framework Authority to have the skills, knowledge, and experience necessary to carry out evaluations in that discipline.

Conformance with the New Zealand Identification Standards

Providers need to demonstrate sufficient competence in identity management. Applicants must obtain and provide either:

  • An identification management evaluation from an independent identification management evaluator (per list of evaluators below)

OR

How to become an independent evaluator

An individual or organisation may apply in writing to the Trust Framework Authority to be named as an independent evaluator for identification management, security and/or privacy (tfa@gdda.govt.nz).

As of 27 November 2025, there is a temporary cessation in the processing of expressions of interest to be recognised as independent evaluators for privacy and security. This will be reviewed in six months’ time.

The Trust Framework Authority will ask for evidence that the applicant has the skills, knowledge and experience necessary to carry out independent evaluations in that area to a reasonable standard.

To view templates for an evaluation, go to the forms and guidance page for providers.

Forms and guidance for providers

Expectations of independent evaluators

Expectations of independent evaluators(PDF, 211 KB)

Independent evaluators

Details of independent evaluators who have been approved by the Trust Framework Authority for security and privacy can be found below (by alphabetical listing).

Independent Security Evaluators

Independent Privacy Evaluators

Independent Identification Management Evaluators

Independent Security Evaluators

Independent Privacy Evaluators

Independent Identification Management Evaluators