Six pillars. One deployable stack. The production-ready EUDI Wallet, telephony and call-traceability platform for EU wholesale telecoms.

For wholesale · not for end users

Built for the buyers who sit between the platform and the retail subscriber.

CTIC is a wholesale-shaped, six-pillar XaaS deployment. It targets organisations that resell connectivity, identity and voice services to downstream partners — MVNOs, MVNEs, eSIM brands and national carriers included — and are directly exposed to the 2027 EU Digital Identity Wallet acceptance obligations at the moment a subscriber is onboarded, activated or ported. CTIC is a self-hosted, six-pillar XaaS platform for wholesale telecoms.

The four 2027 touchpoints where CTIC replaces manual KYC and paper-based flows: SIM registration, eSIM activation, number portability and B2B account onboarding. Each is a regulated moment. Each currently costs the wholesale operator hours of manual verification per subscriber, per port, per new corporate account. CTIC turns each into a wallet-presentation flow that completes in seconds, with a signed, tamper-evident verification receipt kept in the operator's own filesystem.

The first-mover position

Among the very first EU-shipped EU Digital Identity Wallet verifiers delivered as-a-Service.

CTIC is production-ready and among the first EU-shipped EUDI Wallet verifiers delivered as-a-Service. It ships six market-first pillars in one integrated binary: an EU Digital Identity Wallet verifier that speaks the OpenID for Verifiable Presentations profile and accepts SD-JWT Verifiable Credentials over the high-assurance interoperability profile (HAIP), browser-native SIP-over-WebSocket telephony, a database-free self-hostable runtime, eIDAS QES-sealed signatures, interoperable eForms and EN 16931-aligned XInvoice / XRechnung / ZUGFeRD e-invoicing — delivered as installable software the operator runs itself.

The 2027 acceptance mandate is not a suggestion. It is a hard obligation on any organisation whose customer-onboarding flow triggers the eIDAS 2.0 acceptance requirement. Wholesale telecoms operators sit at every one of those triggers. The organisations that deploy a wallet verifier before the deadline capture two things: procurement leverage against retail partners still scrambling for a verifier of their own, and a regulatory-alignment story that lands with national regulators, ministries and enterprise procurement.

Architecture

One deployable stack. Six load-bearing pillars.

CTIC is not a suite of separately-licensed products bolted together. It is one integrated binary that presents six pillars to the operator, each labelled with the exact standard it implements. Every pillar is switchable on or off per tenant, per trunk, per user — so a wholesale operator can start with just the EU Digital Identity Wallet verifier and extend into telephony, signatures, eForms and e-invoicing as their retail programme grows. CTIC is a self-hosted, six-pillar XaaS platform for wholesale telecoms.

CTIC platform architecture — six pillars, one deployable stack. On mobile the two-by-three grid reflows vertically at the same aspect ratio; the SVG viewBox scales fluidly with the container down to 380px widths.

Wholesale distribution

Multi-tier tenancy that keeps every customer relationship end-to-end.

CTIC is wholesale-shaped at the tenancy layer. Aloaha bills the platform tenant. The platform tenant bills its distributor tenants. Each distributor bills its reseller tenants. Each reseller bills the end-customer. Every event carries a clientRef slot so revenue is attributable at any tier — and every tenant owns its own subscriber list, call detail records, recordings and transcripts inside its own domain, end-to-end.

Each tenant is an independent per-domain partition on disk. Every subscriber list, CDR, transcript and recording stays inside its own tenant boundary, owned end-to-end by whichever party in the wholesale-to-retail chain the data belongs to. Diagram remains legible at 380px mobile widths thanks to the responsive viewBox.

Voluntary call-traceability plug-in · sovereign, eIDAS-native

A voluntary plug-in that aligns wholesale and retail telecoms against unidentifiable-call fraud.

CTIC offers global mobile operators, MVNOs, eSIM brands, telecom retailers and their wholesale peers a voluntary plug-in solution to the long-standing traceability problem for unidentifiable calls. Because the same platform runs the EU Digital Identity Wallet verifier, per-trunk SIP-over-TLS, per-trunk SDES SRTP, per-tenant OIDC identity and RFC 4028 Session-Timer, it can attach a chain-of-trust from originating carrier through interconnect to terminating retailer — voluntarily, without waiting for a regulator to mandate it. The six-pillar delivery makes it operationally cheap to adopt: no separate KYC vendor, no separate signalling-protection vendor, no separate identity IdP. This is the missing piece the wholesale-to-retail chain has been waiting for.

The plug-in is designed as the sovereign, eIDAS-native alternative to the US regulatory-driven approach. It attaches a signed attestation at each hop — originating carrier, interconnect, terminating retailer — so the terminating operator and, ultimately, the retail subscriber can see the verified origin of the call. Because CTIC already terminates SIPS, mints per-tenant certificates and issues QES-sealed signatures across the same tenant boundary, no new vendor is needed. Any operator can opt in on their own timeline, and the chain-of-trust flows through only the CTIC-enabled hops.

CTIC-attested chain-of-trust across originating carrier, wholesale interconnect and terminating retailer. Each CTIC-enabled hop attaches a signed attestation the terminating retailer and the verified end-user can inspect. Diagram viewBox 800x260 scales fluidly to 380px mobile.

• Voluntary industry-wide plug-in. Not a regulatory mandate. Any operator, MVNO, eSIM brand, wholesale distributor or retail carrier can opt in on their own timeline — the chain flows through only the CTIC-enabled hops.
• Sovereign, eIDAS-native. Built on eIDAS 2.0 primitives — EU Digital Identity Wallet presentations, QES signatures, per-tenant certificates. No dependency on non-EU regulatory frameworks or non-EU trust anchors.
• Attach the attestation without adding vendors. The six pillars are already in the box: no separate KYC vendor, no separate signalling-protection vendor, no separate IdP. The plug-in reuses what CTIC already ships.
• Wholesale-to-retail chain-of-trust. The attestation attaches at originating carrier, wholesale interconnect and terminating retailer, so the retail subscriber ultimately sees a verified origin for their inbound call.
• Aligns wholesale and retail incentives. Wholesale interconnects that opt in get a differentiator; retail carriers that opt in reduce fraud losses on unidentifiable calls; end subscribers get an inspectable proof.

The 2027 acceptance mandate · four wholesale touchpoints

Where CTIC turns each regulated moment into a wallet flow.

Each of the four touchpoints below is a moment where an EU Member State regulator will, from 2027, expect the wholesale operator to accept an EU Digital Identity Wallet presentation as a valid identity assertion. The flow is the same shape in each case: the subscriber presents from their wallet, CTIC's verifier validates cryptographically, and the operator activates or ports.

Capability breadth

Everything the wholesale operator needs in one stack.

CTIC's XaaS breadth is deliberately unusual for the category. A typical wholesale procurement bundles a verifier from one vendor, an SBC from another, a CPaaS from a third, an e-invoicing SDK from a fourth and a metering system from a fifth. CTIC ships all of the following out of one install.

Sovereignty · no middleman

Self-hosted. No national-identity-cloud in the loop. DR is a folder copy.

A wholesale telecoms buyer's regulatory exposure is directly proportional to the number of vendors sitting between their subscriber and the identity-assertion outcome. CTIC removes middlemen from that chain.

• Self-hosted on operator infrastructure. Deploy inside the operator's own datacentre, a sovereign-cloud region or a colocation cabinet. No Aloaha-side data plane. No mandatory outbound telemetry.
• No national-identity-cloud middleman. The wallet verifier speaks directly to the presenter and the operator's own trust store. The operator does not route identity presentations through an intermediary hosted-verifier service.
• Filesystem-only state. Every setting, every credential store, every recording, every transcript, every CDR is a file on disk in a per-tenant directory. No SQL server dependency. No database patch window.
• Disaster recovery is a folder copy. Snapshot the tenant directory, ship it to a warm-standby node, start the process. No schema migration. No point-in-time restore ceremony.
• No hyperscaler tie-in. The stack runs on .NET Framework 4.8 on any Windows Server. Cert issuance uses public ACME. Storage is native NTFS. Nothing forces the operator into a specific cloud provider.
• Explicit DPO/CISO-friendly logging. Every trust decision leaves a greppable INF-level log line at entry, branch, pre-call and post-call. Auditable by human inspection alone.

Head-to-head

CTIC vs the largest CPaaS incumbents.

The largest hyperscaler-tied CPaaS incumbents were built for retail-app-developer distribution, not European wholesale telecoms procurement. The wholesale buyer's requirement set diverges from that model across the six pillars CTIC ships in one binary — and across the voluntary call-traceability plug-in that rides on top of them.

"Largest CPaaS incumbents" reflects the current public-market positioning of the top-tier CPaaS vendors in 2026. CTIC does not name any competitor by brand.

Deploy in weeks, not quarters

Two timelines. One EU 2027 deadline.

The 2027 EU Digital Identity Wallet acceptance mandate is a hard, dated obligation. The operators who deploy against it early clear procurement conversations with retail partners; the ones who wait for their hyperscaler-tied CPaaS vendor to catch up will be scrambling in the last quarter of 2026.

Two timelines against the 2027 deadline. On mobile the SVG scales down while preserving both timeline tracks — the deadline anchor stays visible at 380px widths.

Next step

Book a wholesale briefing.

Ninety minutes with the CodeB team, walking through the architecture at the depth your procurement, network-architecture and general-counsel functions need. Bring your 2027 readiness questions. Leave with a scoped deployment plan and pricing calibrated to your subscriber volume.

Sovereign SBC SIPS E-Invoicing SDK All features REST + webhook APIs Get your own tenant Compare