Buypass

Name: Buypass
Brand: Buypass

Safe & easy identification cross national borders, and secure online payments.

Est 2001|20 Ref Customers

LinkedIn 2K|Web traffic 9K|FTEs 68|HQ Oslo, Oslo, NO

MarketseSignature Identity Provider (IdP) & SSO

Published Oct 15, 2026

01Common complaints

- If primary needs are public TLS/SSL certificates for websites - Buypass discontinued the sale of TLS/SSL certificates on October 16, 2025; new orders/renewals/replacements are no longer available. Organizations should consider alternatives (e.g., Let’s Encrypt, ZeroSSL, commercial CAs). - If the requirement is the most universally accepted consumer eID in Norway - Community sentiment indicates BankID remains functionally essential for many daily workflows; Buypass ID may not be a complete substitute for those specific workflows. - If the organization cannot handle smartcard operational overhead - Smartcards introduce physical distribution, replacements, reader support, and helpdesk burden. - If procurement depends heavily on large-scale third-party review platforms - Buypass has limited visibility on G2/TrustRadius/Gartner Peer Insights in this research snapshot (either absent, not easily discoverable, or inaccessible), which can affect vendor shortlisting. - If transparent, public enterprise pricing is required before engaging sales - Several Buypass offerings appear to be quote-based or require direct contact/order forms rather than published tier pricing. - Current limitations acknowledged by the vendor - TLS/SSL certificate issuance discontinued - Buypass publicly states that TLS/SSL certificates can no longer be ordered, renewed, or replaced as of October 16, 2025. - Buypass states revocation and certificate status services will operate normally for existing certificates during their validity period. - Roadmap / future features - Not enough public roadmap detail was found in the accessed sources. - Scale limitations - No explicit scale ceilings were found in public sources. - Security or compliance gaps - SOC 2 was not found in public disclosures reviewed. - Detailed data residency and hosting disclosures were not found. - Technical debt / operational incidents (from public ecosystem sources) - Mozilla Bugzilla has entries related to Buypass TLS certificate revocation timing ("Delayed revocation of TLS certificates"), indicating at least one historical compliance/process issue surfaced publicly. - Community posts show at least one mass revocation event for Buypass ACME certificates (Dec 2023), requiring customers to renew/replace impacted certificates. - API limitations or integration constraints - Not enough public material was identified to assess API completeness or common integration pitfalls.

Deal disqualifiers

Organizations seeking a simple, purely cloud-based, low-administration identity tool with minimal device logistics.
Organizations with predominantly mobile-only users where smartcard readers or desktop client components cannot be supported.
Procurement processes that require large volumes of independent SaaS-style reviews and benchmarks prior to vendor engagement; Buypass currently has limited visibility on mainstream review platforms.

02Why they buy

- Competitive advantages supported by available evidence - Evidence is limited due to lack of third-party review coverage. - Notable signals include: - Named customer testimonial on the Buypass site emphasizing a security/UX balance in a smartcard-based environment. - Community indications that Buypass can be easier to obtain than BankID in some edge cases. - Unique features and capabilities - The combination of workplace issuance/management tooling, smartcard/mobile credentials, and qualified certificates and signing, delivered within a Norway-integrated ecosystem, is a specific positioning characteristic. - Differentiation from competitors based on reviews - Not enough third-party review data was accessible to claim strong differentiation based on independent reviews. - Areas where competitors have advantages - Commfides - Lower published consumer price for private e-ID and inclusion of card reader/distribution in that published price. - BankID - Wider acceptance and everyday usability across Norwegian services.

03Field reports

Important scope note about reviews availability - Buypass is not a typical SaaS tool with abundant G2/TrustRadius/Capterra reviews. In this research session, credible volume on major B2B review platforms for Buypass itself was limited. - Some "Buypass" review results found on consumer review sites appear to relate to different entities/domains (e.g., a similarly named alternative domain) and not Buypass AS (official vendor website). These are included only as potentially relevant signals but should be treated cautiously. - Vendor-published testimonial (quoted) - From a Buypass product overview page, a customer quote attributed to Akershus fylkeskommunale tannhelsetjeneste: - "We wanted a solution that matched together the opposite poles of user experience and security. This means that smart cards control all access and rights on everything from doors to IT tools." - Community/social feedback (mixed) - ACME/TLS operational disruption and revocation communications (negative/neutral) - Reddit /r/sysadmin repost of a Buypass notice about ACME certificate revocations: - "Please renew your Buypass ACME certificates issued before a specified cutoff… all still active… must be revoked." - This reflects an operational compliance incident requiring mass replacement/renewal, which can be painful for operators. - ACME/TLS product retirement (negative/neutral) - Reddit /r/sysadmin thread about Buypass retiring TLS/SSL issuance discusses the impact of discontinuation and migration needs. - Norway eID alternative discussions (mixed) - Reddit /r/norge thread titled "Buypass ID eller Commfides" includes at least one user stating they chose Buypass and found the process easier than obtaining BankID. - In contrast, other Norway community threads suggest Buypass is not a full substitute for some workflows where BankID remains essential; others mention constraints around ordering/using eID when not residing in Norway. - Review platforms (Gartner Peer Insights, G2, TrustRadius) — attempted but limited/inaccessible - Gartner Peer Insights: a generic Gartner Peer Insights page was accessible, but no Buypass product listing/reviews were located during this run (possible naming/category mismatch or access limitations). - G2 reviews: no clear Buypass AS listing/reviews were found; searches returned unrelated products. - TrustRadius reviews: no Buypass AS profile/reviews were identified; TrustRadius site was accessible, but Buypass did not surface as a reviewed product in sources retrieved. - Consumer review site signal (likely different entity; negative) - A consumer review page for a similarly named entity contains very low review volume and a mixed rating. The lone visible review criticized the UI, accuracy, and responsiveness of the service. - This appears unrelated to Buypass AS (official vendor website) and should not be treated as representative of Buypass AS’ eID/trust services.

Case Studies

#### Vendor-published customer stories (vendor-curated) - Buypass Access Solution page includes: - A named quote from Akershus fylkeskommunale tannhelsetjeneste emphasizing balancing security and UX with smart cards controlling access. - A claim that a set of Norwegian municipalities were among early adopters to offer secure patient information sharing across local government borders (details require examining the full case study; the snippet alone does not provide metrics). #### Critical evaluation of case study strength - Metrics and methodology - The surfaced case snippets are narrative and do not provide independent verification, baseline comparison, or quantified ROI. - Transferability - These stories are likely most applicable to Norwegian municipalities/public entities with similar regulatory and infrastructure constraints.

04Best fit

Organization sizes

Likely fit:
- Mid-market to large organizations with regulated access requirements, especially those with many staff requiring strong authentication and signing.
- Public sector organizations and municipalities.

Industries and verticals where adoption is strongest

Norwegian public sector and local authorities (Buypass vendor materials emphasize reduction of password proliferation and enabling shared login across security zones).
Organizations requiring eIDAS-qualified certificates and services (e.g., contexts requiring qualified signing/seals).

Roles and personas

Decision makers
- CIO / CISO
- Head of IAM / Security Architecture
- IT Operations lead for endpoint/thin-client environments
- Compliance/Risk officers in regulated contexts
End users
- Employees needing secure login, signing, and encryption
- Citizens/individuals needing higher-assurance login and qualified signing for Norwegian services

Pain points and challenges the product addresses

Higher-assurance authentication and identity proofing aligned with eIDAS High assurance descriptions.
Reduction of password proliferation (vendor messaging emphasizes replacing the "jungle of passwords").
Need for qualified certificates for signing/sealing and cross-system trust.

Qualification criteria

Organizations that require smart-card or high-assurance credentialing tied to regulated services.
Organizations with internal resources to operate PKI and smartcard lifecycle processes.
Organizations that need integration with Norwegian public services that accept Buypass ID.

05The pitch

What the product does (core value proposition in objective terms)

- Buypass is a Norwegian provider of digital trust services and digital identity products. - Core offerings (as positioned by Buypass) span: - Electronic ID (eID) for individuals (smart card and mobile) for strong authentication and qualified e-signatures. - Enterprise/workplace identity and access via smart cards/mobile (Buypass Access Solution / ID@Work) enabling login, signing, and encryption across internal systems and Norwegian public services. - Qualified trust services under eIDAS (e.g., qualified certificates for electronic signatures and seals; Buypass is a Qualified Trust Service Provider / QTSP). - Historically, Buypass also issued public TLS/SSL certificates (including ACME “Go SSL” DV certs), but Buypass discontinued selling TLS/SSL certificates in 2025.

Target market and market positioning

Primary market appears Norway-centric and regulated-industry heavy (public sector, municipalities/local authorities, healthcare-adjacent workflows, and enterprises needing higher-assurance authentication and qualified signing).
Buypass positions its offering with emphasis on "strict security requirements" for government and private enterprise, with smart card/mobile credentials used to access services like Altinn and other high-assurance systems in Norway.

Get a comprehensive analysis of Buypass including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →