Scaling trust: from Digital Proof-of-Life to a UN Digital Identity ecosystem

For 70 years, the UN Pension Fund relied on paper forms mailed through 192 postal services to 80,000 beneficiaries to confirm they were still alive. This process was plagued by delays, lost forms, and anxiety among retirees who risked having their payments suspended if the signed form was not received by year-end. The Digital Certificate of Entitlement was developed to replace this cumbersome manual process with a secure digital solution.

The paper-based process involved mailing forms through 192 postal services to 80,000 recipients and was frequently affected by delays and lost forms . Beneficiaries faced anxiety because failure to return the form by the end of the fiscal year mandated suspension of their pension payments .

The oversight and governing bodies of the UN consistently challenged the pension fund on how it could prove the absence of fraud in such a manual, paper-based process. Since proving a negative is impossible, the pension fund responded by creating a system that proves a positive through biometrics and blockchain. This shift from a reactive to a proactive fraud-prevention model was a key driver of the DCE's development.

Governing bodies repeatedly questioned the pension fund about its ability to demonstrate there was no fraud in the manual process . The response was to create a system that proves a positive by using facial recognition biometrics and a blockchain to create an immutable ledger of all steps taken during the process .

The DCE combines facial recognition biometrics with a blockchain-based immutable ledger to record every step of the proof-of-life process, from onboarding to verification. As AI-generated deepfakes became a mass-adoption threat, an AI algorithm was added in 2023 specifically to detect and prevent such fraud. This layered technology stack ensures both security and independent auditability.

The system uses biometrics, specifically facial recognition, and a blockchain to create an immutable ledger of all steps taken during the process . An AI algorithm was added in 2023 to detect and prevent potential deepfakes as AI became more widely adopted and posed a new threat .

The DCE has achieved significant uptake, with more than 60% of the pension fund's beneficiary base now regularly using the digital proof-of-life process. Over 36,000 beneficiaries used the application in a single year, demonstrating that the solution genuinely responds to the needs of its users. These figures confirm the viability and scalability of the digital identity approach.

By 2026, more than 60% of the user base regularly conducts the proof-of-life process digitally . More than 36,000 beneficiaries used the application in a single year, in addition to the overall onboarding rate exceeding 60% .

The DCE is positioned not merely as a technical tool but as a foundational element of digital identity infrastructure, aligned with the WSIS Action Line C1 for public governance. By resolving the most urgent challenge of verifying legitimate users through digital identity, the pension fund has created a platform that can be expanded to additional use cases. This strategic framing situates the DCE within the broader global agenda for digital public governance.

The pension fund identified and resolved the most urgent challenge of ensuring they are dealing with a legitimate user through digital identity, aligning with WSIS Action Line C1 for public governance .

Having established a secure and auditable biometric identification system, the pension fund is now exploring how to expand the range of transactions beneficiaries can perform through the app. These include updating personal and financial information such as address, household composition, marital status, and bank details. There is also a future possibility of enabling beneficiaries to receive payments via digital assets, potentially reducing costly banking fees.

The pension fund is looking at expanding the portfolio of biometric transactions to include updating addresses, household composition, marital status, and payment structures when beneficiaries change banks . A future possibility also includes receiving payments via digital assets on a voluntary basis, which could reduce significant banking fees faced by many retirees in various parts of the world .

The success of the DCE for retirees prompted recognition that a similar digital identity solution was needed for UN staff across more than 25 organisations. The UN Digital ID programme aims to create a digital wallet that consolidates information currently fragmented across multiple ERP systems, reducing complications when staff move between organisations. This programme extends the same foundational logic and technology platform established by the DCE.

The UN Digital ID programme was conceived to apply the same concept and technology used in the DCE to all UN staff members across 25-plus organisations, enabling them to have a digital wallet that manages information currently residing in several fragmented ERP systems . This fragmentation causes issues when staff move between organisations, and the digital wallet aims to resolve this .

The pension fund pursued ISO certifications in security, data privacy, and responsible AI use to provide concrete, independently auditable evidence of its compliance with recognised international standards. This approach was particularly important for overcoming beneficiary scepticism about how their biometric and personal data were being used. The pension fund is noted as the first and possibly only entity in the entire UN system to obtain ISO certification for the responsible use of artificial intelligence.

Significant effort was invested in obtaining ISO certifications for security, data privacy, and the responsible use of AI . The pension fund is described as the first and, as far as the speaker knows, the only entity in the entire UN system to have obtained ISO certification for the responsible use of artificial intelligence .

When the DCE was first introduced, beneficiaries had significant misconceptions about biometrics and blockchain, with some associating the latter with cryptocurrency and its environmental impact. The pension fund found that the first and most important challenge was to communicate clearly and in plain language exactly what technologies were being used and how. This communication effort was foundational to building user trust and driving adoption.

At the outset, there was scepticism because people did not understand how biometrics were being used, and some immediately associated blockchain with cryptocurrency and concerns about its environmental impact . The pension fund's response was to demystify these concepts and communicate in plain English exactly which technologies were being used and how .

As a UN entity, the UNJSPF is not legally bound by any specific national data protection jurisdiction, but it works closely with the UN Secretariat through memoranda of understanding to align with UN-wide policies. These policies, issued through Secretary-General Bulletins and administrative instructions, cover data privacy, information security, and business continuity. This internal framework provides a coherent governance structure that operates across the diverse jurisdictions in which the fund's beneficiaries reside.

The UNJSPF is not directly mandated to comply with any specific national jurisdiction or regulation, but aligns its policies with the UN Secretariat through memoranda of understanding, using Secretary-General Bulletins and administrative instructions in the areas of data privacy, information security, and business continuity .

Although the UN is not legally required to comply with national regulations such as the EU's GDPR, its internal policies are designed to reflect the same underlying principles. This means that the pension fund's data governance practices are effectively aligned with internationally recognised standards, even in the absence of a formal legal obligation. This alignment provides reassurance to beneficiaries and stakeholders across different jurisdictions.

The UN's internal data privacy and security policies are described as very much aligned with the principles reflected in national jurisdictions around the world, most notably the GDPR in the European Union .

Because ISO certifications must be renewed on an annual basis, they provide a continuous and independently verifiable demonstration that the pension fund's practices remain compliant with internationally recognised standards. This ongoing certification process serves as practical evidence that the fund adheres to principles embedded in many national data protection and security frameworks. It thus bridges the gap between the UN's internal policy framework and the expectations of external regulators and stakeholders.

ISO certification needs to be maintained on a yearly basis, providing ongoing proof and evidence of compliance with principles that are embedded in many national jurisdictions .

Once a staff member's digital wallet is populated with their HR data, the UN Digital ID system can power a wide range of practical use cases from that single identity. These include single sign-on for digital platforms, applying for jobs with pre-verified credentials, accessing UN premises, and potentially sending and receiving payments in the future. This 'one identity, many journeys' model demonstrates the scalability and versatility of the digital identity infrastructure.

The system enables single sign-on so staff can scan a QR code to be automatically identified instead of managing multiple passwords . It also supports building access , job applications with pre-verified credentials eliminating the need for background checks , and a future possibility of sending and receiving payments from the wallet .

The UN Digital ID programme has experienced rapid horizontal expansion, growing from six organisations to eleven already implementing the system, with four more having pledged to join, totalling fifteen. This represents more than 100% growth in under a year, and the programme may ultimately reach up to 35 organisations given the level of interest being expressed. This trajectory demonstrates that the value proposition of digital identity is being widely recognised across the UN system.

A year prior, the programme had six organisations; at the time of the session, eleven organisations had already signed up and were implementing Digital ID, with four more pledged to join, totalling fifteen . This represents more than 100% growth in less than a year, and the speaker indicated the programme could potentially reach 35 organisations .

The first use case implemented by UN Digital ID was enabling soon-to-be retirees to share their data with the pension fund in an automated, digital format at the point of off-boarding. This eliminates the need for manual data reconciliation, freeing up significant time and resources for the pension fund. It represents a seamless bridge between the staff identity system and the DCE used by retirees.

The pension off-boarding use case was the first step, allowing staff to share data with the pension fund in an automated fashion, which the pension fund is happy to receive in digital format as it completely eliminates the necessity for manual reconciliation .

The UN Digital ID programme must address two distinct dimensions of trust simultaneously: trust between organisations that need to share and accept each other's data, and trust from individual staff members who must be confident the system is secure, fair, and user-friendly. Without inter-organisational trust, data cannot flow reliably when staff move between agencies. Without individual trust, staff will not engage with the system or consent to data sharing.

The programme is described as an interagency programme where trust between agencies needs to be established first, ensuring that data held by one organisation is trusted by another . Trust also relates to staff themselves, who need confidence that the system is secure, fair, and easy to use .

Rather than treating trust as an afterthought, the UN Digital ID programme was built with security and data privacy embedded from the very beginning, described as 'trust by design' rather than 'trust by paper'. The system incorporates a mobile-first experience, strong biometric authentication, distributed decentralised verification, full user visibility and consent, blockchain-based immutable records, and open-source technology. This comprehensive approach ensures that every aspect of the system can be independently verified and trusted.

The system was created as a 'trust by design' system, starting with security and data privacy from inception . It features a mobile-first user experience, strong biometric authentication to eliminate deepfakes, a distributed decentralised verification system, full visibility and consent for staff, immutable and auditable records via blockchain, and open-source technology .

A defining feature of the UN Digital ID system is that staff members are participants in any transaction involving their data, rather than passive subjects. For the first time in the speaker's 25 years of experience, staff can see exactly what data is being shared with another organisation and can choose to withhold certain information if they deem it unnecessary. This user-centric approach to data consent is central to building genuine trust in the system.

For the first time, staff are asked to be part of the transaction when their data is shared with another organisation . They are able to see what is being shared and control whether they want to share all information, for example choosing not to share a birth date if it is not relevant .

Recognising that not all beneficiaries have access to smartphones or reliable internet connectivity, UNDP partnered with the pension fund to deploy kiosk-based access points in 18 countries. This initiative ensures that geography, technology constraints, or connectivity challenges do not prevent any beneficiary from completing the proof-of-life process. It is presented as a concrete example of digital inclusion in practice.

Through the deployment of kiosk-based access points in 18 countries, the partnership with UNDP is helping ensure that no beneficiary is left behind simply because of geography, technology constraints, or connectivity challenges .

The United Nations International Computing Centre (UNICC) has been the technical implementer of the UNJSPF's digital identity solutions from the very beginning, playing an indispensable role in turning the pension fund's vision into a functioning, secure, and stable system. This partnership demonstrates how digital public infrastructure can be designed around user needs while maintaining the highest standards of security, accountability, and trust. Without UNICC's technical expertise, the DCE would not have been achievable.

UNICC is recognised as the outstanding technical partner that has been the implementer of the UNJSPF digital identity solutions from the very beginning, helping transform an ambitious vision into a secure, stable, and innovative reality . Together, they demonstrated how digital public infrastructure can be designed around user needs while maintaining the highest standards of security, accountability, and trust .

UNDP was the first organisation to step forward and support efforts to extend the DCE's benefits to those facing barriers to digital services, particularly through the deployment of kiosks in 18 countries. This collaboration is highlighted as a concrete example of how partnerships can bridge digital divides and bring innovation to those who need it most. It embodies the principle that digital transformation must actively reach the most vulnerable populations.

UNDP was the first organisation to support efforts to extend the benefits of the solution to those facing barriers to digital services . Through the deployment of kiosk-based access points in 18 countries, the partnership is described as a concrete example of how collaboration can bridge digital divides and bring innovation to those who need it most .

The Inter-American Development Bank's adoption of the DCE solution as the first non-UN entity to do so is presented as a powerful validation of the model developed by the pension fund and its partners. It demonstrates that solutions designed within the UN system can be adapted and applied to other international organisations, contributing to broader ecosystems of trust, efficiency, and service delivery. This external adoption signals the scalability and transferability of the approach.

The Inter-American Development Bank became the first non-UN entity to adopt the solution for its own beneficiaries, which is described as a powerful validation of the model developed . It demonstrates that solutions born within the UN system can create value far beyond its own institutions and contribute to broader ecosystems of trust, efficiency, and service delivery .

The overarching lesson drawn from the DCE initiative is that digital transformation achieves its greatest impact when it is built on collaboration across institutional boundaries and remains firmly centred on the needs of people. Success depends not only on technological innovation but also on governance, ethics, and cooperation between organisations. The DCE and its partnerships are presented as a living example of translating shared aspirations into concrete, scalable results.

The partnerships illustrate that digital transformation is most successful when it is collaborative and people-centred . Success depends not only on innovation but also on governance, ethics, and cooperation, requiring organisations to work across institutional boundaries to translate shared aspirations into concrete results .

The pension fund approached the DCE as an iterative product, acknowledging from the outset that the first version would not be perfect and that continuous improvement based on user feedback was essential. Early feedback revealed issues such as poor lighting affecting facial recognition, which were addressed in subsequent versions. The result is a solution that even the oldest retirees, some aged 90 or 100, find surprisingly easy to use.

The first version of the DCE was not perfect; for example, retirees had difficulty because their lighting was not ideal for facial recognition . Feedback was incorporated to improve the system iteratively, and the current version receives very few complaints, with retirees aged 90 or 100 reporting that it was surprisingly easy to use .

The DCE has had a profound humanitarian impact, particularly for beneficiaries in conflict-affected or remote areas. Before the digital solution, some retirees in countries such as Afghanistan had to travel for days through extremely difficult and dangerous security conditions simply to complete the proof-of-life process. The DCE now allows them to do this safely from their own communities using a mobile phone, transforming the experience from a burden into a matter of dignity and duty of care.

A colleague in Sudan shared a story illustrating why the partnership matters: before the DCE, some retirees in Afghanistan travelled for days through extremely difficult security conditions simply to prove they were alive . Today, once enrolled, they can complete the same process safely from their own communities using a mobile phone .

The experience of UNDP country offices highlights that technology alone is insufficient for successful digital transformation; human support and empathy on the ground are equally critical. In Indonesia, UNDP colleagues patiently helped retirees create email accounts, recover forgotten passwords, and build confidence with digital tools. This human dimension of the rollout fostered not only faster service but also greater empathy and patience among HR teams.

In Indonesia, UNDP colleagues patiently helped retirees create email accounts, recover forgotten passwords, and build confidence using digital tools, providing first-hand support on the ground . Colleagues spoke not only about faster service and lower costs but also about the empathy and patience the initiative fostered among HR teams .

UNDP's contribution to the discussion emphasises a fundamental principle: technology is a tool to improve people's lives, not an end in itself. This philosophy, embedded in UNDP's People First 2030 vision, calls for designing solutions around people's realities, removing barriers rather than creating them, and ensuring that digital transformation reaches those who need it most. The DCE is presented as an example of this people-centred approach in action.

For UNDP, technology has never been the destination; it is the means to serve people better, which is exactly what the People for 2030 vision calls for . This vision calls for designing solutions around people's realities, removing barriers rather than creating them, building trust rather than complexity, and ensuring digital transformation reaches those who need it most .

When the Inter-American Development Bank sought to modernise its own proof-of-life process, it chose to adopt the UN's DCE solution rather than develop a new platform from scratch. The key rationale was that the DCE had already been successfully designed and implemented within the UN system, offering proven security and saving significant time and resources. This decision reflects a pragmatic approach to digital transformation through partnership rather than duplication of effort.

The IDB had previously attempted to develop its own app but it did not work due to security issues . Upon learning about the DCE at a seminar, the decision was made to leverage the existing partnership rather than start from scratch . A major factor was that the UN solution had already been successfully designed and implemented, offering significant advantages over developing a new platform .

The IDB is introducing the DCE as a voluntary additional option for its retirees rather than mandating a switch away from paper forms, ensuring that those who prefer traditional methods are not excluded. The bank is conducting extensive outreach through multiple channels, including retiree associations, instructional videos, open houses at the bank, and WhatsApp groups, to encourage uptake. This inclusive strategy prioritises meeting beneficiaries where they are and presenting the digital solution as a benefit rather than a burden.

The IDB will continue the current paper process and provide the digital solution as an additional option rather than making it mandatory . Outreach is being conducted through retiree associations, videos, open houses at the bank and local offices across Latin America, and WhatsApp groups, encouraging beneficiaries to use the platform while keeping the paper form available for those who prefer it .

When the IDB began its deployment of the DCE, the application initially only supported English and Spanish, which was insufficient for the bank's trilingual beneficiary population. Working with the UN, Portuguese was added as a third language to ensure that all beneficiaries could use the application in their own language. This adaptation underscores the importance of linguistic accessibility as a component of digital inclusion.

Initially the application only had English and Spanish, but the IDB worked with the UN to add Portuguese, as the bank operates in three languages . Having the feature available in the beneficiary's own language was considered super important to meeting them where they are .

Mirko Montuori frames the session as an exploration of how a real-world operational problem gave rise to a tangible digital solution. The discussion is positioned not merely as a technology showcase but as a broader conversation about trust, digital inclusion, interoperability, and partnerships in the digital age. This framing situates the DCE within the wider WSIS agenda.

Over the next 45 minutes, the session aims to explore how a practical operational challenge transformed into a very concrete solution for United Nations beneficiaries and beyond . The Digital Certificate of Entitlement is described as a secure mobile solution combining biometrics, artificial intelligence, geolocalization, and blockchain . The conversation is explicitly positioned as being about responsible AI, digital inclusion, interoperability, and partnerships in the context of WSIS .

Mirko Montuori underscores that the most important takeaway from Emily Chakavarika's contribution is the reminder that technology exists to serve people, not to impose itself upon them. He presents this as a guiding principle that must be kept in mind throughout the design and implementation of digital solutions. This reflects a broader ethical stance on the role of technology in public service delivery.

Mirko Montuori explicitly states that one point Emily makes is paramount to the discussion, which is that technology is there to serve humanity and not the other way around, and that it is very important to keep this in mind when developing and implementing solutions .

When reflecting on Luciana Barbosa's adoption strategy for the IDB, Mirko Montuori highlights that digital solutions must be actively brought to people rather than expecting users to come to them. He affirms that not reaching out to people is a fundamental problem for any digital rollout. This observation reinforces the importance of proactive communication and engagement strategies in achieving scale.

Mirko Montuori states that if you do not reach out to people, that is a problem, and he commends the IDB's outreach plan as great and inspiring .

Mirko Montuori observes that the path begun with a single proof-of-life use case has expanded significantly, both in terms of the range of applications and the number of organisations involved. He presents this trajectory as inspiring and as evidence of the scalability of digital identity solutions. This observation connects the specific DCE experience to the broader vision of a UN digital identity ecosystem.

Mirko Montuori notes that it is absolutely very interesting and inspiring to see how this path started with one use case and is now expanding beyond that use case and also with many more organisations .

An audience member from Medici Framework Corporation raises the concern that elderly retirees, who may be less comfortable with digital technologies, could face significant barriers when switching from a familiar paper-based process to a digital one. The question probes whether the pension fund encountered such difficulties and how it managed the transition. This concern is directly relevant to the digital inclusion dimension of the DCE initiative.

The audience member asks whether the pension fund faced problems in accessing the system due to elderly people who were less friendly with technologies, and whether there were difficulties in letting them switch between the paper-based world and the digital one .

A second audience member, an international trade and digital regulations consultant, raises the issue of regulatory and policy challenges encountered when deploying a digital identity solution that spans different national jurisdictions with varying privacy laws and standards for digital recognition. This question highlights the complexity of operating a global digital identity system within a fragmented international regulatory landscape. The question invites reflection on how the pension fund navigated these challenges.

The audience member asks about the regulatory and policy challenges faced during implementation, specifically noting that the system deals with different jurisdictions when it comes to privacy, trust, and digital recognition .