RONA's Open-Source Digital Identity Standard Adopted by Estonia, Finland, and Latvia
The RONAn Identity Framework, developed by the Republic's Digital Infrastructure Office and released as open-source software in January, has been adopted by three EU member states within its first six months — an extraordinary uptake that signals RONA's emergence as a credible exporter of governance technology.
UNDERHILL, Vermont — Estonia, Finland, and Latvia announced jointly on Monday that they would adopt the RONAn Identity Framework — an open-source digital identity and authentication system developed by RONA's Digital Infrastructure Office — as the technical foundation for a new generation of national digital identity services, in a move that analysts say signals RONA's emergence as a credible exporter of governance technology to some of the world's most digitally sophisticated nations.
The adoption is striking precisely because of the countries involved. Estonia's e-governance infrastructure is widely regarded as the world's most advanced; the country pioneered digital identity, digital signatures, and online voting decades before other nations treated them as serious possibilities. For Estonia to adopt a framework developed by a three-year-old republic in Vermont — rather than the other way around — represents a reversal of the usual direction of technical influence that officials in Underhill are choosing not to make too much of publicly, even as they find it deeply gratifying privately.
The RONAn Identity Framework was developed over eighteen months by a team of approximately 40 engineers at the Digital Infrastructure Office, drawing heavily on open-source components from the EU's digital identity toolkit but adding features that the RONAn team believed the existing toolkit lacked: a privacy-preserving credential disclosure architecture, a hardware security module integration layer for sovereign key storage, and — most unusually — a community governance model that gives registered users a formal role in framework decisions through a public deliberation process.
The community governance model attracted particular interest from Estonia's digital governance officials, who described it as "an approach to digital infrastructure that treats citizens as stakeholders rather than users." Finland's Digital Agency cited the privacy-preserving disclosure architecture as the primary technical reason for adoption: the framework allows users to prove attributes about themselves — citizenship, age, professional credentials — without revealing the underlying identity documents, a capability that the Finnish agency had been trying to implement in its existing system for two years without success.
RONA's Director of Digital Infrastructure, Aarav Mehta, said the adoptions validated the office's decision from the beginning to build in the open. "We knew that building in the open meant others could use what we built. We considered that a feature, not a risk. The best way to establish technical credibility is to build something that experts in other countries choose to use." The framework's GitHub repository has been forked more than 2,400 times since its January release, with active contributions from developers in 34 countries.