Home β€Ί Logistics β€Ί Road Freight
Back to Logistics
eFTI Β· eIDAS Β· eCMR Protocol

Road Freight: The Missing Identity Layer for eCMR

40 countries ratified. <1% digital. The document is solved β€” the identity isn't.

A truck leaves Hamburg bound for Istanbul. At loading, the German dispatcher signs the eCMR. At the border, the driver confirms receipt. At delivery in Istanbul, the receiver acknowledges the cargo. Three signatures. Three countries. One question: who are these people?

40
eCMR countries
<1%
digital today
10M+
docs/day 2027
Jul '27
eFTI mandatory
Hamburg β†’ Istanbul: Who Signs?
πŸ‡©πŸ‡ͺ
Hamburg
Loading
Dispatcher signs β†’ EUDI βœ“ available
πŸ‡§πŸ‡¬
EU Border
Transit
Driver confirms β†’ EUDI stops here
πŸ‡ΉπŸ‡·
Istanbul
Delivery
Receiver signs β†’ No EUDI. No digital ID. Now what?
The Scale

A €1 Billion Problem Hiding in Plain Sight

The European Commission estimates that digital freight documents will save the EU transport sector up to €1 billion per year. But that savings requires actual adoption β€” and today, less than 1% of consignment notes are digital.

The eCMR platforms exist β€” dozens of providers across Europe have built functional eCMR software. The legal framework exists: 40 countries ratified, eFTI mandatory from July 2027.

So why is adoption below 1%?

Because every eCMR needs a verified signatory β€” and the industry has built excellent digital documents without solving who signs them. The EU's own EUDI wallet covers 27 member states. The eCMR protocol covers 40 countries. That gap of 13+ countries includes some of the busiest freight corridors in Europe.

Identity Fraud in Logistics β€” 2026
4Γ—
growth in 2 years
Identity fraud attempts in logistics grew from 0.53% (2023) to 2.15% (2025) β€” based on 1M+ verification transactions.
3.2%
fraudulent credentials
Of submitted documents were fake or expired β€” 4.5Γ— higher than in hospitality.
Source: IDScan.net "2026 Cargo & Logistics ID Fraud Report"

"With cargo theft and supply chain disruption already costing the industry billions, identity fraud is becoming a critical vulnerability at facility entry points."

Jimmy Roussel, CEO IDScan.net
2026 Cargo and Logistics ID Fraud Report β€” based on 1M+ identity verification transactions
The Corridors

Where the identity gap hits hardest

All three corridors involve non-EU countries that ratified eCMR but whose drivers will never receive an EUDI wallet. All three countries issue NFC biometric passports.

πŸ‡ͺπŸ‡Ί ↔ πŸ‡ΉπŸ‡·

EU ↔ Turkey

Europe's 5th-largest trading partner. Thousands of Turkish trucks cross EU borders daily. Turkey ratified eCMR β€” but drivers have zero access to EU digital identity systems.

πŸ‡ͺπŸ‡Ί ↔ πŸ‡ΊπŸ‡¦

EU ↔ Ukraine

Since 2022, EU–Ukraine transport corridors expanded dramatically. Ukrainian carriers now operate across the EU under liberalized permits. eCMR ratified β€” identity gap remains.

πŸ‡ͺπŸ‡Ί ↔ πŸ‡²πŸ‡¦

EU ↔ Morocco

Spain–Morocco: one of Southern Europe's busiest freight corridors. Textile, agriculture, automotive supply chains. Morocco ratified eCMR β€” same gap as Turkey.

The Missing Piece

The document is digital. The person behind it isn't.

European logistics has made remarkable progress. Today's digital freight documents prove which company issued them β€” but not which person.

What exists today
  • Standardized digital consignment note format
  • Open source β€” freely available to any company
  • Company-level electronic seals (eIDAS compliant)
  • Blockchain-based document integrity
  • Cross-company interoperability
What IdentiGate adds
  • Which person signed this specific document
  • Individual eIDAS Advanced Electronic Signature
  • Every driver worldwide β€” NFC (179 ICAO 9303 countries) + document + face match elsewhere
  • Biometric verification of the signer
  • Cross-platform portable identity
Current Landscape

How does IdentiGate compare?

Several approaches exist for eCMR signing. Here's how they stack up on the identity requirements that matter.

Capability Sign-on-Glass QR / PIN Company Seal EUDI Wallet IdentiGate
Proves who signedβœ—βœ—Company onlyβœ“βœ“
Biometric verificationβœ—βœ—βœ—βœ“βœ“
Non-EU drivers (Turkey, UA, MA)βœ“βœ“βœ“βœ— EU onlyβœ“ Every country
eIDAS compliant signatureβœ—βœ—Seal onlyQESAdES
Legal weight in disputesMinimalMinimalCompanyStrongStrong
Cross-platform portableβœ—βœ—Partialβœ“βœ“
Cost per signatureFreeFree~€0.50€2–5€0.20–2.00

Sign-on-glass is fast but proves nothing. EUDI is strongest but EU-only. IdentiGate bridges the gap: biometric identity + eIDAS signature + every country in the world (NFC or document + face) + affordable at scale.

Four Problems

What's actually blocking eCMR adoption

01

The subcontractor problem

European freight runs on subcontracting. A German shipper β†’ Polish carrier β†’ Turkish driver β†’ delivery in Bulgaria. The Turkish driver handles millions in cargo β€” but in the digital ecosystem, he doesn't exist. He has a biometric passport. He crosses EU borders daily. But no platform can verify his identity digitally.

02

The interoperability problem

The eCMR ecosystem is fragmented across dozens of providers. A driver who signs on one platform in Amsterdam can't carry that identity to another platform in Lyon. A universal identity layer across all platforms would eliminate the biggest friction in adoption.

03

The AdES vs QES confusion

Many companies believe eCMR requires Qualified signatures (QES) at €2–5 each. For most freight documents, Advanced signatures (AdES) are legally sufficient at €0.20–2.00. That's up to 25Γ— cheaper.

04

The eFTI deadline

eFTI becomes mandatory 9 July 2027. All EU authorities must accept electronic freight data via certified platforms. Platforms that integrate identity now will be eFTI-ready.

The Layer

Not just one product. The complete identity layer for road freight.

From driver verification to fleet-wide batch signing β€” what your platform needs today, and the capabilities that set you apart tomorrow.

Solve Today 6 products, ready to integrate
πŸ›‚

Driver Identity

Identity Verification Β· Authentication

Passport scan or document + face match β†’ verified digital identity in 90 seconds. Works for any driver worldwide β€” Turkish subcontractor, Ukrainian carrier, Moroccan driver. Biometric face match + liveness at every signing event.

🏒

Company & Carrier Identity

Company Identity Β· Company Signature

Is this trucking company legitimate? Verify the carrier, the subcontractor, the entire chain. Company-level electronic seals that complement individual driver identity. Anti-fraud from day one.

✍️

eCMR Multi-Party Signing

Multi Signatures Β· Signing Portal

Every eCMR needs 3 signatures: sender at loading, driver at pickup, receiver at delivery. Each party signs independently with eIDAS AdES β€” from any country, on any device, court-ready.

πŸ“‹

Real-Time Compliance

Cert Validity Check Β· Authentication

Is the driver's license still valid right now? Is the carrier's insurance active? Is the ADR dangerous goods certificate current? Real-time status checks β€” not yesterday's paper copy.

⏱️

Timestamped Evidence

Timestamp Β· Digital Evidence Layer

Exactly WHEN was the eCMR signed? Cryptographic timestamp at loading, at border, at delivery. Undeniable proof of timing β€” for disputes, insurance claims, and regulatory compliance.

πŸ“¦

Fleet Batch Operations

Batch Signing Β· Company Signature

Morning dispatch: 50 trucks, 50 eCMRs. Sign all at once. Customs documentation in bulk. Fleet-wide compliance checks in a single API call. Scale without adding headcount.

Anatomy of an IdentiGate eCMR signature

eIDAS AdES Β· ETSI EN 319 122 Β· Court-ready

Every signature on an eCMR through IdentiGate is more than a checkbox β€” it's a cryptographic evidence package that holds up in any EU court, with optional company-level eSeal for institutional accountability. Here's exactly what each signature contains:

01
πŸ›‚
Signatory identity
Identity Verification
Verified name + biometric face match at signing event + cryptographic hash of NFC chip data (when read) or document + face match payload. Liveness anti-spoofing applied.
02
πŸ”’
Document hash
Cryptographic integrity
SHA-256 hash of the exact eCMR content at the moment of signing. Any subsequent change to the document invalidates the signature. Math, not trust.
03
⏱️
Timestamp
RFC 3161 Β· Qualified TSA
Independent cryptographic timestamp from a Qualified Trust Service Provider. Proves when the signature was made β€” to the second β€” and that it has not been backdated.
04
πŸ“
Location
GPS coordinates Β· Geo-anchored
GPS coordinates captured at the moment of signing β€” proves where loading, border crossing, or delivery actually happened. Critical for cross-border eCMR disputes and customs evidence.
05
πŸ“„
Signing context
Document role
Which eCMR field was signed, in which capacity (sender, carrier, driver, receiver), and at which logistics phase (loading, transit, delivery). Disambiguates multi-party signatures.
06
πŸ”
Cryptographic signature
X.509 Β· Dual Key Β· FIPS 140-2 L3
RSA/ECDSA signature using the user's Dual Key β€” half on device Secure Enclave, half in our FIPS 140-2 Level 3 HSM. X.509 certificate chain attached for verification.
07
🧾
Audit trail link
Evidence Layer ID
Reference ID into our Digital Evidence Layer β€” append-only log that captures the full signing event chain. Resolvable via API or court-ordered disclosure.
08
🏒
Company eSealOptional
eIDAS Qualified eSeal Β· QSCD-issued
Where the carrier or shipper holds an eIDAS-issued Qualified eSeal, the individual signature can be wrapped with the company's institutional cryptographic seal. Both the person and the legal entity are bound to the document.
Why this matters in court: EU Regulation 910/2014 (eIDAS) recognises AdES signatures as legally valid electronic signatures. The combination of biometric identity, qualified timestamp, geo-anchoring, and optional eSeal produces evidence that is, in practice, harder to refute than a wet-ink signature on paper.
Tomorrow's Edge The industry isn't here yet. Our architecture already is.
πŸš›

Identity of Things

Trucks Β· Trailers Β· Containers Β· IoT Β· Seals

Our cryptographic identity architecture already extends to physical assets. Trucks, trailers, containers β€” each can receive a verifiable digital identity today.

✦ Deployable today β€” waiting for industry adoption
πŸ”

Zero-Knowledge Compliance

GDPR Β· License verification Β· Insurance Β· ADR

Our Dual Key architecture natively supports zero-knowledge proofs. Prove a driver has a valid license without sharing it. Verify insurance without exposing the policy.

✦ Deployable today β€” waiting for industry adoption
🌐

Unified Pseudo-Identity

Cross-platform Β· Portable Β· Multi-doc

IdentiGate identities are already platform-agnostic by design. One driver, one identity, every eCMR platform and TMS β€” without sharing raw personal data.

✦ Deployable today β€” waiting for industry adoption
Timeline

The eFTI countdown

Jan 2025

eFTI acts in force

Implementing acts entered into force. Member states building IT systems.

Jan 2026

Platforms prepare

eFTI platforms start operations. Authorities may accept digital data.

2026 β€” You are here

Integration window

Platforms choosing partners now. First mover becomes default.

Your next step: 20-min technical call β†’ integration estimate in 48h.
July 2027

eFTI mandatory

All EU authorities must accept electronic freight info. No more optional.

Ready to solve eCMR identity?

Whether you're an eCMR platform preparing for eFTI, a TMS provider adding signatures, or a logistics operator with cross-border subcontractors β€” let us show you the missing identity layer.