This page contains privacy and security reviews/audits of the IRMA platform.

• Stress test of the IRMA infrastructure (backbone), which is hosted by SIDN, aug. 2020. Brief conclusion: IRMA is ready for wide-scale deployment.

• Code audit of the irmago and gabi source code repositories (which implement a.o. the IRMA server, the core of the IRMA app, and the IRMA cryptography). Performed by Stef Marsiske and Jonathan Levin of Radically Open Security (see also their notes). Accompanying reaction by Sietse Ringers.

• Dataprotection Impact Assessment, carried out by PhD students Katerina Demetzou and Tim Walree of the Law faculty at Nijmegen, and reviewed by Koen Versmissen of Privacy Management Partners, Dec. 2018.