Signicat
How Signicat implemented secure self-service Account Recovery for its own workforce, helping employees prove their identity remotely and regain access.
–“It was unfair to place our IT admins in a defenceless position, especially when Signicat supplies deepfake resistant ID verification.”
Challenge
High-assurance recovery for a remote-first workforce
Signicat needed a more reliable way to handle sensitive recovery situations across a distributed workforce.
Remote-first organisation
Signicat has around 600 employees across 16 European countries. For a distributed organisation, relying on office based identity checks is often neither practical nor scalable.
Human judgement was not enough
IT and support teams faced high risk situations where they had to verify an employee's identity during account recovery and authenticator re enrolment. That placed too much responsibility on individual judgement at exactly the point where strong proof of identity was needed.
Recovery without normal login
Employees also needed a secure way to prove who they were when their usual device or authentication method was unavailable. The recovery process therefore had to work remotely, without depending on normal login or requiring the employee to present themselves in person.
Solution
Secure recovery by design
Signicat treated Account Recovery as more than a technical implementation. Fairness, privacy and security principles were agreed before the recovery process was designed and rolled out, including how employees would participate and give consent.
People > Process > Technology
The recovery process was defined first, with security, privacy and HR requirements agreed before implementation. This created a clear framework for how Account Recovery should work across the organisation.
Enrol before access is lost
Employees verify their identity while they still have normal access. This creates a trusted recovery basis before access is lost and avoids having to establish identity from scratch during a high risk recovery situation.
Cryptography protects recovery
ReadID verifies employees' chipped IDs and matches users to their documents, while Signicat Mint orchestrates storing and matching document hashes as custom security attributes in the user directory.
Results
A safer, faster and more scalable way to recover access
The new process gives employees a secure way to prove who they are remotely, while giving IT stronger evidence to act on.
70%+ voluntary enrolment
More than 70% of employees chose to enrol following internal communication, showing strong uptake without making participation mandatory.
Recovery from any suitable device
Employees can verify their identity remotely and request a high priority callback from IT support, helping them get back up and running in minutes.
Reduced reliance on human judgement
Fast, verified identity checks make recovery safer for IT and quicker for employees, without requiring in person verification.