DVS Trust Framework 1.0 transition note
A short note for Gamma 0.4 certified providers moving to DVS Trust Framework 1.0, in force since 2 September 2026.
What existing providers should check
DVS Trust Framework 1.0 is now in force. Start by checking certificate dates, CAB timing, service roles, evidence and the supplementary codes that apply. The work needed depends on your current service and any new checking routes you plan to offer.
Confirm your assessment timing
Find your next surveillance audit and recertification date, and whether your service is on a two-year or three-year cycle. Those dates set your options.
Scope the work to your service
Look at the changes through your own roles, evidence and supplementary codes. If you are adding use cases or checking routes, expect product and process work, not just paperwork.
Confirm the route with your CAB
Decide with your CAB whether you move at your next audit, at recertification or early through a delta assessment, if you qualify for one.
When 1.0 applies
The transition started on 2 September 2026, when a CAB became accredited to certify against 1.0. Your own dates come from your audit cycle, so agree them with a CAB accredited for your scope.
- 3 March 2026
1.0 pre-release. An early copy of 1.0, published so providers and CABs could start preparing.
- 9 June 2026
Final 1.0 text. The final text replaces the pre-release. The only rule change is on role combinations.
- 2 September 2026
Framework 1.0 and the transition begin. With a CAB now accredited to certify against it, framework 1.0 comes into force, together with DBS code 1.0 and right to work and rent codes 1.1. Gamma 0.4 certificates move across on the transition timetable.
- 25 September 2026
First UK CertifID authorisations. The first services are cleared to show the UK CertifID trust mark. It is for 1.0-certified, registered services only, so Gamma 0.4 services can stay listed but cannot use it yet.
Transition routes
Which route you take depends on whether you are already certified, and on where you are in your audit cycle.
Existing Gamma 0.4 certified services
Your next audit, surveillance or full, is a choice: move to 1.0 then, or take one more year on 0.4. The audit after that is not optional. A service that has not moved by then loses its certification and leaves the register.
Out-of-cycle delta assessment
Want to move sooner? If your service had a full audit to reach 0.4 last year and runs on a three-year cycle, a delta assessment checks just the rules that changed. Your normal audit dates stay as they were.
New or uncertified services
New services now certify against framework 1.0 and the current supplementary codes. If your application was already under way on 2 September, special transition rules may apply, so check with your CAB.
Plan the framework and code uplift together
If you certify against a supplementary code, it moves with the framework. Right to work and right to rent services go straight from Gamma 0.4 to codes 1.1 when they move to framework 1.0, skipping 1.0 altogether, and DBS services go to code 1.0.
The codes also put hard limits on Gamma 0.4. Section 0 of the right to work code allows Gamma 0.4 recertification applications for 15 months from 2 September 2026, and stops recognising Gamma 0.4 certificates altogether after 27 months. A certificate can end sooner, if it expires or you uplift, but these limits never extend one.
And since 1 October 2026, an employer or landlord relying on a DVS for these checks only gets a statutory excuse if the service is certified and registered against the framework and the right code. Our right to work and rent 1.1 guide covers what changed for documents, reports and holder services, and our alcohol proof-of-age guide covers the newest use for certified services.
What changed from pre-release
Version 1.0 is the first framework made under the Data (Use and Access) Act 2025. If you followed the March pre-release, very little moved in June. This list covers that step only, not everything that changed from Gamma 0.4.
- One rule changed: a service can now hold orchestration service provider certification alongside its other roles.
- Component service provider certification still cannot be combined with other roles.
- The supporting documents and codes were unchanged in June. In September, though, right to work and rent codes 1.1 replaced their 1.0 versions before those ever came into force, so plan against 1.1.
The register, the trust mark and the gateway
Once your service is certified against 1.0 and registered, OfDIA can authorise you to show the UK CertifID trust mark. Each mark carries a six-digit number that anyone can check against the register. Showing it is optional; if you do, follow OfDIA's usage guidelines.
OfDIA is also making the register machine-readable, so relying parties can check a service's registration and certified scope automatically: certificates and OpenID Federation between services, and signed trust lists for digital wallets. Testing with registered providers starts in October 2026.
Then there is the information gateway in the Data (Use and Access) Act 2025, which will let registered services ask public authorities for information to verify someone's identity or eligibility, when that person asks them to. It is not live yet: it starts once Parliament approves its code of practice, which OfDIA aims to publish by the end of 2026. Expect it to need both your organisation and the service on the register, a data sharing agreement and requests kept to what is necessary.
So treat register evidence, service scoping, data sharing safeguards and audit trails as part of running the service, not a form to fill in after certification.
Common questions
Has DVS Trust Framework 1.0 come into force?
Yes, since 2 September 2026, together with DBS code 1.0 and right to work and right to rent codes 1.1. Gamma 0.4 certificates stay valid while they move across under the transition rules.
When should an existing Gamma 0.4 provider check its 1.0 position?
Now. Agree your route and dates with your CAB, then work through the changes for your roles, evidence, codes and any new features. Don't judge the effort by how little changed between March and June: the step that matters is Gamma 0.4 to 1.0.
Can every provider use a delta assessment?
No. It is only open to services that had a full audit to reach 0.4 last year and are on a three-year cycle. If your service is on a two-year cycle, you move at a normal audit.
Can a Gamma 0.4 certified service use UK CertifID?
Not yet. The mark is for services certified against 1.0 and on the register. A Gamma 0.4 service keeps its register entry during the transition, and can apply to use the mark once it has moved to 1.0.
Did the final 1.0 release change much from the pre-release?
No. The one rule change is that a service can hold orchestration service provider certification alongside other roles. Component service provider certification still has to stand alone.
Authoritative sources
Use these official and certification-body sources when checking your 1.0 position. We can turn them into an evidence map and CAB work programme for your service.
Check your 1.0 position.
Book a free discovery call. We will confirm your timing and route, and map the evidence your CAB will look for.