THANK YOU FOR SUBSCRIBING
× 
Enterprise Security Mag Weekly Brief
Be first to read the latest tech news, Industry Leader's Insights, and CIO interviews of medium and large enterprises exclusively from Enterprise Security Mag
Enterprise Security Magazine
NDID
Sixty Million Identities, One Trust Framework
Boonsun Prasitsumrit, CEOThe Asia-Pacific region today stands at the intersection of two formidable forces. On one side, digital economies are expanding fast, reshaping how citizens access financial services, and everyday digital interactions. On the other, cyber threats are escalating in both frequency and sophistication, imposing immense pressure on enterprises and governments to secure trust.
In this environment, identity verification has moved from a back-office compliance function to a foundational pillar of enterprise security. It is within this context that Thailand’s National Digital ID Company (NDID) has emerged as a benchmark, earning recognition as the Digital Identity Verification of the Year in APAC 2026 by Enterprise Security Magazine APAC.
Founded in 2018 and headquartered in Bangkok, NDID operates as a consent-driven, federated digital identity network where both public and private-sector institutions can function seamlessly even as they retain full responsibility for their customers and data. That too under their own regulatory frameworks. While NDID itself takes up the painstaking job of governance, rule adherence and trust orchestration.
“NDID was designed as a consent-driven, federated network because we believed this was the only model that could work sustainably at national scale,” “Digital identity is not a product; it is national infrastructure. Our role is to make trust interoperable across industries, while preserving institutional accountability and user consent.” says Boonsun Prasitsumrit, CEO.
In practice, NDID ensures that trust, privacy, and interoperability move together. Personal data within the network is never centralized. It remains securely with the original data owners and is exchanged only when users provide explicit, purpose-based consent. While, Interoperability is achieved through common standards and processes, rather than forcing all participants into a single system or technology stack. When these elements are aligned, consent becomes practical, allowing users to authorize transactions with confidence and institutions to rely on verified outcomes.
High-Trust Transactions minus the Physical Presence
How does NDID enable secure cross-institution identity transactions across Thailand’s digital economy?
The tangible value of this model is most evident in high-trust transactions that traditionally required physical presence. One of the clearest examples is cross-bank digital account opening. Historically, even customers with an established relationship at one bank were required to visit a branch in person to open an account with another institution. This process involved duplicate know-your-customer checks, extensive paperwork, and significant time and operational cost.
NDID fundamentally changes this equation. A customer’s verified identity from their primary bank can now be securely leveraged across the network, allowing them to open accounts at other banks without visiting a branch, while still maintaining full regulatory compliance.
This same trust framework has since been extended to lending, securities and asset management services, electronic tax filing, and access to public services. In each case, the value delivered is not simply speed or convenience. The deeper impact lies in the confidence that digital transactions can be as reliable, compliant, and trustworthy as traditional, in-person processes. That confidence is essential for driving adoption in environments where trust is non-negotiable.
NDID was designed as a consent-driven, federated network because we believed this was the only model that could work sustainably at national scale.
This same trust framework has since been extended to lending, securities and asset management services, electronic tax filing, and access to public services. In each case, the value delivered is not simply speed or convenience. The deeper impact lies in the confidence that digital transactions can be as reliable, compliant, and trustworthy as traditional, in-person processes. That confidence is essential for driving adoption in environments where trust is non-negotiable.
The adoption testifies to the platform’s real-world impact. NDID today supports more than 60 million usable digital identities, representing active identity credentials issued by participating institutions across the network. With over 30 million registered user accounts, the platform processes around 2 million transactions every month across multiple industries.
These figures reflect sustained, daily operational usage in a live national environment, rather than pilot programs or limited deployments.
Equally significant is the breadth of ecosystem participation. With more than 180 member clients as of January 2026, including major financial institutions, telecom providers, government agencies, and regulators, NDID has achieved widespread adoption across Thailand’s digital economy.
Scalability through Governance and Recognition
How is national-scale trust maintained through governance standards and regulatory oversight?
Such impressive scale is not accidental; rather, it emerges as a direct by-product of the consistent standards against which all members are carefully assessed and onboarded. All members are assessed and onboarded against consistent criteria, covering security controls, operational readiness, and ongoing compliance requirements. NDID itself operates under a formal license as a Digital Identity Exchange and remains subject to regulatory oversight, ensuring that its own governance and security standards are continuously enforced.
“A functioning digital economy requires common trust standards for how digital transactions are conducted, and that is exactly what we have to offer” says Prasitsumrit.
NDID’s growing list of accolades reinforces its prominent position within Thailand’s digital landscape and across the broader APAC region. The company has received the ASOCIO Award 2022 as an Outstanding User Organization, the Thailand Top Company Awards 2022, and the Global Economics Awards 2023 for Best Identity Verification and Authentication Platform. These recognitions reflect not only technical excellence, but the platform’s role as a critical enabler of trusted digital interaction across sectors.
Enabling Thailand’s Digital Economy
What role does NDID play in Thailand’s digital infrastructure future?
Moving forward, NDID’s ambition extends beyond individual use cases or industry verticals. The company positions itself as part of Thailand’s core digital infrastructure for identity. It provides the foundational identity layer that enables secure and reliable verification, upon which more advanced digital services, can be built. By reducing friction and uncertainty across the digital ecosystem, NDID is preparing both public and private sectors for more sophisticated digital transactions and supporting Thailand’s long-term digital economy readiness.
In an era where digital trust is both a competitive advantage and a national imperative, NDID’s consent-driven, federated model offers a compelling blueprint for sustainable identity verification at scale. This recognition reflects not just what the platform has achieved, but the role it continues to play in shaping the future of secure, privacy-first digital economies across the region.
Building Trusted Digital Identity Infrastructure Across Asia
Digital identity verification across Asia has moved from pilot programs to national infrastructure. Financial institutions, telecom providers, and government agencies now depend on identity systems that can support remote onboarding, cross-sector transactions, and regulatory compliance without introducing new systemic risk. Executives evaluating digital identity solutions must look beyond user experience and cost efficiency toward long-term trust architecture. Systems built around a single database or central authority may appear straightforward, yet concentration of data and control introduces structural vulnerabilities and limits scalability across industries.
Sustainable identity infrastructure at the country level requires a model that distributes responsibility while maintaining consistent standards. Institutions must remain accountable to their own regulators, yet interoperate under shared rules that enable trusted data exchange. When identity verification depends on central data aggregation, privacy exposure increases and public confidence can erode. A federated framework, by contrast, allows verified attributes to remain with the original data owners and be exchanged only under explicit, purpose-based consent. This design reduces concentration risk while supporting collaboration among banks, securities firms, asset managers, telecom operators, and public agencies.
Interoperability also determines whether digital identity can extend beyond a narrow set of use cases. Common standards and agreed governance processes allow participants to connect without abandoning their existing systems. Trust must be embedded in the rules of participation, onboarding requirements, and compliance monitoring, not improvised at the transaction level. Institutions evaluating providers should examine how members are assessed, how accountability is enforced, and how regulatory oversight is integrated into the platform itself. Without disciplined governance, cross-sector expansion often increases friction rather than reducing it.
Tangible value emerges when identity verification supports high-trust transactions that previously required physical presence. Remote account opening, digital lending, securities trading, and access to public services demand assurance equivalent to in-person verification. The right identity network enables customers who have already been verified by one regulated institution to transact with another without repeating manual checks. This shortens onboarding cycles, lowers administrative costs, and preserves regulatory integrity. Measurable adoption at scale signals that the framework is not confined to controlled pilots but is embedded in daily economic activity. Transaction volumes, the number of usable identities, and the breadth of industry participation offer a clearer indicator of durability than isolated proofof-concept results.
Privacy by design has become central to this evaluation. Fraud sophistication and data misuse continue to rise across the region. Identity platforms that position themselves as data repositories inherit a growing risk surface. A model that orchestrates trust without storing personal data limits systemic exposure and reinforces user confidence. For executives responsible for long-term digital strategy, the question is no longer whether identity verification can be digitized, but whether it can be digitized without creating new concentrations of risk.
Within this landscape, NDID stands out as Thailand’s federated digital identity exchange. It operates under a formal license and regulatory oversight, providing shared governance while allowing each member to remain compliant under its own framework. Personal data remains with originating institutions and is exchanged only through clear user consent, positioning the network as a trust orchestrator rather than a data holder.
The platform supports more than 60 million usable digital identities and over 30 million registered accounts, and processes roughly 2 million transactions per month across banking, capital markets, and public services. For executives building cross-sector digital services in Asia, it represents a mature, consent-driven identity foundation anchored in governance, scale, and sustained ecosystem participation.
...Read more
Company
NDID
Management
Boonsun Prasitsumrit, CEO
Description
National Digital ID Co., Ltd. (NDID), founded in 2018 and headquartered in Bangkok, Thailand, operates a consent-driven, federated digital identity exchange network. As a licensed Digital Identity Exchange, NDID enables secure, privacy-first verification and authentication across banking, capital markets, lending, and public services without centralizing personal data.
