KOBIL is a German digital identity and security company that gives banks, insurers, public bodies and enterprises a single branded environment in which their users identify themselves, sign, approve and pay. Its SuperApp platform puts these steps behind one verified identity, and the same controls now extend to AI agents acting for those users.
The aim is to replace a scatter of separate apps and logins with “One secure place under your brand”, governed by one security model.
At A Glance
| Vendor | KOBIL |
|---|---|
| Category | Digital identity, authentication and SuperApp platform |
| Identities covered | Customers, citizens, employees, devices and AI agents |
| Deployment | Platform and SDKs that connect to existing back-end systems through APIs |
| Agentic AI | AI Trust: agent identity, deny-by-default permissions, human approval, audit |
| Customers | ING, Airbus, DATEV, Dropbox, Erste Bank |
| Certifications | ISO 27001, with GDPR, PSD2, DORA and eIDAS compliance |
| Founded | 1986 |
| Market classification | Identity Verification |
What KOBIL Does
Organisations that serve customers or citizens through many channels end up with fragmented identity, approvals and payments. KOBIL’s answer is a framework that acts as a secure access and orchestration layer across existing services, with identity, payments, chat and signatures part of the platform from day one. Each extra app means another login for users and another security model for the organisation to maintain. Verified identity holds the KOBIL platform together, so every service inside the branded app relies on the same proof of who is acting and the same access controls.
Products
SuperApp
SuperApp lets an organisation design, brand and launch its own all-in-one app. Application security, file management, notifications and analytics come built in. Third-party and in-house services join as MiniApps, each registered, reviewed and granted only the access to platform services it needs. MiniApp Studio supplies low-code and pro-code tools for building those services. The Digital Workplace SuperApp applies the model to staff: employees, apps and documents share one verified identity with single sign-on and approvals.
Trusted Identity
Trusted Identity answers the question of who is behind each action. It provides digital identity, MFA and SSO, device binding and role-based access control.
Application Security
Mobile and web apps that handle money or personal data are a target for tampering. Application Security adds runtime protection, anti-tampering and API protection.
Secure Messenger, Documents And Payments
Secure Messenger and Documents provides end-to-end encrypted messaging, document sharing and digital approvals, so sensitive conversations and sign-offs stay inside the branded environment. Secure Payments handles transaction approval and strong customer authentication, with PSD2 support for European payment services.
AI Trust
AI Trust is for organisations that want AI agents to act on behalf of users without losing accountability. Every agent is uniquely verified, and its own identity is kept separate from the authority a user has delegated to it. Access is deny-by-default and each tool call is checked against the agent’s permission scope. Sensitive actions go to a designated approver’s device, and the agent resumes only after consent. Audit records capture identity, authorisation decisions and policy outcomes for every agent action, so each step traces back to the agent and the user who authorised it.
How It Works
KOBIL sits in front of an organisation’s existing services rather than replacing them.
| Back-end connection | Existing systems stay in place and connect to the SuperApp through APIs, identity standards, gateways and event-based integrations |
|---|---|
| Rollout | Projects begin with an assessment of the customer’s current app, user journeys and back-end systems |
| AI Trust SDK | Developers install the SDK for Python, TypeScript or Java and wrap their agent’s tool calls, leaving the rest of the agent code unchanged |
Identities And Systems Covered
| Customers and citizens | Banking, insurance, media and city app users authenticating with MFA and device binding |
|---|---|
| Employees | Workforce access through the Digital Workplace SuperApp with single sign-on |
| Devices | Device binding within Trusted Identity |
| AI agents | Each agent receives its own X.509 certificate and OAuth 2.1 credentials |
Company Background
| Founded | 1986 in Germany by Ismet Koyun, initially focused on PC and data security |
|---|---|
| Headquarters | Worms, Germany |
| Offices | San Jose, United States; Istanbul, Türkiye; Zürich, Switzerland |
| Leadership | Ismet Koyun (CEO) |
| Partnerships | A partnership with Deloitte on European digital sovereignty |
| Recognition | Included as a Sample Vendor in five Gartner Hype Cycles in 2023 |
Note: This overview is compiled from KOBIL’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.