Vintegris Revolutionizes with its “All-in-One” Digital Identity Solution
Today, companies are looking for comprehensive technological solutions that allow them to protect the data of their customers, employees and business partners, as well as optimize their internal processes to achieve greater profitability and growth.
In this context, the Spanish company Vintegris has established itself as a Qualified Trusted Electronic Service Provider (PCSC) , by offering an “All in One” digital identity software that allows organizations to meet cybersecurity challenges, maintain an inventory of their digital certificates, and efficiently protect and manage their customers’ digital identities.
Next, Matthew Walsh, CEO and Managing Director of Víntegris, shares more details about the company’s history, its work, and his vision of how this innovative solution has contributed to the growth and development of numerous organizations globally.
How did the idea of creating Vintegris come about?
Víntegris was founded in 2002. It is one of the veteran companies in the sector in Spain. An entrepreneur, Facundo Rojo , created the company with the support of major companies in the insurance sector. At that time, the need to use digital certificates was emerging to simplify approval processes between different departments within an organization and to facilitate communication with public administrations. It was a new field. There was nothing like it. Víntegris started as a company that developed custom applications for its clients in the nascent field of digital identity.
How would you describe the work that Vintegris has been developing over the past 20 years in the field of digital identity?
After many years developing unique systems for each client, the client portfolio grew considerably. The needs for managing digital certificates and signing electronic documents are not very different from company to company. In reality, it’s a matter of minor nuances and a few unique functionalities. 90% of the requirements and the supporting code are identical. Furthermore, these are not applications with which companies compete, as is the case with those related to their products and services.
However, Vintegris had to maintain many different versions of the custom-developed programs, which made it clear that, in order to scale the company, it was necessary to reuse the code, as well as being able to offer all customers the new generic features that were being added.
From this point, in 2016 a project was launched to develop a SaaS version that would replace all the versions developed specifically for each client , maintaining, through configuration, the respective functionalities that gave each client competitive advantages.
Today, this SaaS version, nebulaSUITE , has reached a significant level of maturity and stability, and we have already deployed a second version of the user interface. From now on, we will be adding many new features.
“Vintegris was founded in 2002 as a company developing custom applications for its clients in the emerging field of digital identity. In 2016, a project was launched to develop a SaaS version to replace all the custom-developed versions for each client. Today, this SaaS version, nebulaSUITE, has reached a significant level of maturity and stability, and we have already deployed a second version of the user interface. From now on, we will be adding many new features.”
How did your work experience at IBM influence your business vision and Vintegris’ strategy?
Well, it’s been over 20 years since I left IBM. I was with them from 1979 to 1997. Many of those years were IBM’s “golden years,” and I benefited greatly from the training the company provided its employees. Furthermore, the company’s principles—respect for the individual, excellence in customer service, and fair treatment of suppliers—remained with me.
That stage of my career took place at IBM South Africa, and during nine of those years, we went from being a subsidiary to becoming an agent of IBM, as the company left South Africa during apartheid in 1986 only to buy it back in 1996.
It was during that stage that my professional development and senior management reached its peak, allowing us to develop our own strategies beyond following a common global strategy. That ability to develop your own plan and be responsible for it in every aspect, both in terms of management and results, was very different from simply filling in the boxes in a global corporate model and relying on a central functional structure that does everything except sell products and provide mostly technical services. Examples of that flexibility that came with being independent included: the ability to negotiate win-win contracts with clients from a blank slate, creating independent businesses beyond IBM and operating them as such rather than as a monolith, and developing a local marketing strategy, which included television material for which we won top awards.
We grew tremendously while IBM stagnated; both situations greatly influenced my perspective. Furthermore, I was fortunate enough to manage five different business units within the company and establish new and innovative marketing support structures for all of its divisions. A truly memorable period.
What makes Vintegris’ value proposition different from other similar services in its sector?
We have the best centralized digital certificate management software . I’m not the only one saying this. Some of the largest companies in Spain recognize it, placing their trust in us instead of competitors twice our size. This is crucial, especially for protecting these certificates and for streamlining approval and verification processes.
We are also one of the few companies that offer qualified electronic signatures . This is the highest level of legal and evidentiary validity in digital signatures. Compared to the more basic signatures offered by most providers, it legally places the burden of proof on the signatory to demonstrate that they did not sign. In other types of signatures, it is the other party who must prove that the signatory did sign. Consider the digital signature of a construction contract, a health insurance policy and its coverage, a mortgage, or a commercial contract, and what the consequences would be if it could not be legally proven that the client who signed the contract denied it. Qualified electronic signatures prevent this, as they reverse the burden of proof.
We’ve reached a very high level of software stability (which had given us problems in the past). With this solid foundation, we’ll be adding new features that we believe are necessary for our market over the next nine months.
Furthermore, we’ve shifted the platform’s operation to a “user-centric” approach instead of a “technology-centric” one . In other words, it’s designed to function like a person would use it—logically, according to their work and tasks—rather than structured in modules that require understanding how to navigate it based on its technical architecture. This marks a turning point for our product. You have to see it to appreciate it.
How does Víntegris’ all-in-one digital identity solution contribute to the growth and development of today’s businesses?
The use of technology in general presents two opportunities for companies: productivity and new business models. The use of digital identity can streamline numerous processes, both internal and for the end customer . Once we can reliably verify a person’s identity through a device, many opportunities open up. The first is eliminating distances—I can reliably complete a procedure from the other side of the world. The second is eliminating the need to handle paper documents to approve or ratify things, since we can digitally sign using our identity and send electronic documents instantly. This accelerates processes and eliminates the possibility of loss. Third, electronic processing allows for the creation of files with corresponding backups automatically. The fact that a company can have legal certainty about its documentation, processing speed and secure archiving, presents the opportunity to exponentially multiply the number of operations that can be processed given fixed resources, compared to handling paperwork.
In the realm of new business models, leveraging these new technologies becomes a fundamental pillar that will be highly competitive . A bank, for example, can process a loan in minutes, without the need for the client to hand over all the physical documentation. When documents are available electronically and the client grants permission to access them (for example, in public administrations), the response is practically immediate. This can mean, for example, being able to buy a property before someone else. The house of your dreams, yours, not someone else’s, or taking advantage of a real estate development opportunity before the competition. This different way of doing business—agile, convenient, and precise—not only redefines how business is conducted but also opens the door to new products and services. Who does the client want to go to for a loan? The bank that processes it in minutes or the one that takes a week?
Can you mention some of the main digital identity and electronic security services you offer?
Yes, indeed. Our SaaS product, nebulaSUITE , allows companies to manage the digital certificates of their employees or clients in an integrated way, along with their authorization and electronic signature processes for all types of documents and forms. Furthermore, it allows for the timestamping of any electronic document, such as invoices, contracts, specifications, or certificates, across countless professions and environments. For organizations that wish to issue their own certificates or manage the issuance process, we offer comprehensive support.
The regulations governing the processing of digital identity are very strict, and the technology, which is part of the cybersecurity world, is complex and unique. That’s why many companies ask us to manage these environments, which we also do with operational services to ensure high availability and maximum security.
What do you consider to be the biggest digital security challenges that organizations face today?
Complying with regulations and protecting against cyberattacks are key challenges for businesses . Regulations surrounding digital identity are complex and highly demanding. Companies need security officers with expertise in digital identity, a skill set that is scarce in the market. For example, Víntegris is certified under five international ISO standards, in addition to a national certification, to comply as a Qualified Trust Service Provider. The needs extend beyond common technology; we are talking about specialized legal, procedural, and technological requirements. Hacking is a threat that potentially affects all organizations, and the fewer resources they have to protect themselves, the more vulnerable they are.
How can Víntegris’ solutions help mitigate these risks?
Because this is our specialty. When the work is complex, we leave it to specialists. With 22 years in this sector, we are among the most experienced companies in these matters . Furthermore, our team turnover is fortunately very low, allowing us to maintain a unique capacity in the market compared to others.
In addition to compliance with the eIDAS Regulation, what other certifications or safety standards do Víntegris solutions meet?
As I mentioned earlier, at Víntegris we regularly undergo rigorous audits to obtain certification in five ISO standards, which involves a demanding and costly process . These include ISO 27001 for information security, ISO 27017 for cloud security, ISO 27018 for protecting personal information in the cloud, and ISO 27701 for information privacy management and GDPR compliance. We are also ISO 9001 certified , which guarantees the quality of our products, services, and processes.
Furthermore, we have achieved HIGH LEVEL in the National Security Framework (ENS) . This Spanish regulation was created to safeguard the security and privacy of citizens’ data in their dealings with public administration. The framework comprises 74 controls and five dimensions of information security, classifiable into low, medium, and high levels. Only 8% of public entities and 30% of private entities that apply for ENS certification achieve this level.
What advice would you give to companies that are considering implementing a digital identity solution?
Essentially, two things: first, that they be brave and creative when thinking about its use, as it can radically transform the way they work both internally, as well as with clients, suppliers and even the public; and second, that they use experts and make sure that they are truly experts and have the corresponding certifications that ensure the protection of their identities.
Where is Vintegris headed? Do they have any future plans for the coming years?
Vintegris is moving forward in three directions. The first is to complete our range of features and services, enabling us to offer a comprehensive suite of digital identity solutions. We are just a few months away from achieving this. The second is to
In conclusion, the future of digital security is promising, and Vintegris, with its comprehensive digital identification solutions, is prepared to lead this transformation and establish itself as a strategic partner for organizations seeking to build a safer and more reliable future in the virtual ecosystem.