Connect
Sign up to receive our monthly newsletter.
Inquiries
Have a question? Contact us here.
Job Opportunities
Learn about job openings.
Digital Public Goods Alliance - 2026
Sign up to receive our monthly newsletter.
Have a question? Contact us here.
Learn about job openings.
X-Road® is open-source software that provides unified and secure data exchange between organisations in a collaborative ecosystem.
Owner
Nordic Institute for Interoperability Solutions (NIIS)
Type
backend, API
Licence
MIT
Last evaluated
28.07.2026
Origin country
Estonia
contact
info@niis.orgRelease date
-
DPG since
09.11.2020
The following repositories were submitted by the solution and included in our evaluation. Any repositories, add-ons, features not included in here were not reviewed by us.
UNDP Digital X
Estonian, Portuguese, Spanish, English
The countries mentioned above where X-Road is actively deployed (except for Japan and Germany with private deployments).
* This information is self-reported and updated annually
To ensure more universal and affordable access to digital services for the population of low- and middle-income countries, X-Road has been introduced in multiple projects around the world. X-Road is open-source software that provides countries with a national data exchange infrastructure without licensing fees. By implementing X-Road, countries avoid a vendor lock-in situation and get multiple channels for support, including a global community of users. Different healthcare platforms can be connected securely with X-Road, which enables data exchange between private and public service providers. The data exchange parties store all the evidence regarding the data exchange locally, and no third parties have access to the data. Energy efficiency, renewables and consumer centricity figure among the lines of action to boost the transition towards cleaner energy systems – ways of producing, delivering and consuming energy in a more sustainable way. The deployment of information technology significantly impacts the feasibility of contemporary policy actions. X-Road is helping electricity grid operators by harmonising access to energy data. Simplifying access to data lets them focus on the solutions to achieve energy and climate goals. X-Road enables the reduction of administrative burdens by the implementation of the Once-Only Principle (TOOP). Streamlined administrative processes support economic growth and enable providing better services for the citizens. For example, in Estonia, X-Road saved 1,134 working years during the previous calendar year. X-Road helps a country to become a hassle-free environment for business and entrepreneurship, which also attracts foreign investments. X-Road provides a national core digital infrastructure for data exchange between organisations across administration sectors and business domains. Typically, the ecosystem is open to all kinds of organisations—both public and private sector organisations. Besides, X-Road can be used to implement cross-border data exchange with other countries. X-Road enables allocating resources for building digital services and fostering innovation instead of integrating services point-to-point. The use of digital services reduces the need to travel between different locations, which reduces traffic in the cities. When travelling is needed, digital services provide information about different transportation and route alternatives and may prioritise the most environmentally friendly alternatives. X-Road is a crucial enabler that's needed to make numerous information systems communicate with each other. By establishing or joining an X-Road environment, cities and municipalities can request up-to-date information from relevant public registers and increase their effectiveness. The Nordic Institute for Interoperability Solutions (NIIS) aims to develop X-Road the most sustainable data exchange solution of its kind. The short-term goal is to focus on the X-Road software's direct and tangible environmental impacts. NIIS conducted research focusing on assessing the current emissions profile across X-Road's operations and services to give targeted recommendations for emissions reduction and sustainable business practices. X-Road is a solution to fight against corruption and helps build trust towards institutions. X-Road provides log records of each message sent between X-Road ecosystem member organisations. The log records provide undeniable evidence of a transaction, and they could be used in process automation to reduce manual work, increase the level of automation in various processes and make things easier for both users of different information systems and citizens. X-Road also provides many features that are required from MyData platform technology.
Nordic Institute for Interoperability Solutions (NIIS)
NGO/ Non Profit
Copyright noticeNo mandatory proprietary dependencies
Yes
Principles for Digital Development, Test Driven Development, Agile, CI/CD, Code Review
PII data is collected and stored but NOT distributed.
Distributed, Peer-to-Peer Data Exchange: All message payload exchanges occur directly between the service consumer's Security Server and the service provider's Security Server. The Central Server manages member identities and address mappings, but no central database or intermediary ever stores or processes business payload data. Granular Access Rights Management: Each service provider maintains complete ownership of its data and must explicitly grant access rights (ACLs) to specific client systems or subsystems before any data exchange can take place. Selective Payload Logging & Data Minimization: Core infrastructure functions rely exclusively on header metadata (such as organization IDs, timestamps, and message hashes) rather than payload contents. System administrators can disable message body logging server-wide or per subsystem to ensure sensitive PII is not retained in local databases. Encryption at Rest: When message logging is enabled, database records and archived log containers can be encrypted at rest using local encryption keys. Mutual Transport Layer Security (mTLS): All communication between Security Servers over public networks is encrypted using bidirectional mTLS, preventing network eavesdropping and traffic interception. Public Key Infrastructure (PKI) & Organization Authentication: Joining an X-Road ecosystem requires onboarding through an approved Certification Authority (CA), which issues authentication and signing certificates. Each connection requires verification of the peer Security Server's authentication certificate against global configurations. Real-Time Revocation Checks (OCSP): Security Servers continually check Online Certificate Status Protocol (OCSP) responses to confirm that peer certificates remain valid and have not been revoked. Hardware Security Module (HSM) Support: Private keys used for digital signatures and authentication can be generated and managed inside physical or cloud-based Hardware Security Modules via PKCS#11. https://x-road.global/security
Content is collected and stored but NOT distributed.
It is the sole responsibility of the governing authorities in each country that deploy the X-Road data exchange layer. NIIS/X-Road has no role regarding the content transferred.
Yes
2026-07-28 04:27:04
System moved X-Road® (12841) to expired because parent application is now DPG.
2026-07-28 04:27:04
System unmarked X-Road® (12841) as a nominee
2026-07-28 04:27:04
Ricardo Torres (L2 Reviewer) submitted their review of X-Road® (152) and found it to be a DPG
2026-07-28 04:26:57
Ricardo Torres (L2 Reviewer) passed 9A. Data Privacy & Security for X-Road® (12841)
2026-07-28 04:26:55
Ricardo Torres (L2 Reviewer) edited 9A. Data Privacy & Security for X-Road® (12841)
2026-07-28 04:23:45
Ricardo Torres (L2 Reviewer) passed Scale of Solution for X-Road® (12841)
2026-07-28 04:23:43
Ricardo Torres (L2 Reviewer) passed 9C. Protection from Harassment for X-Road® (12841)
2026-07-28 04:23:40
Ricardo Torres (L2 Reviewer) passed 9B. Inappropriate & Illegal Content for X-Road® (12841)
2026-07-28 04:19:54
Ricardo Torres (L2 Reviewer) passed 8. Standards & Best Practices for X-Road® (12841)
2026-07-28 04:19:51
Ricardo Torres (L2 Reviewer) passed 7. Privacy & Applicable Laws for X-Road® (12841)
2026-07-28 04:19:49
Ricardo Torres (L2 Reviewer) passed 6. Mechanism for Extracting Data for X-Road® (12841)
2026-07-28 04:19:47
Ricardo Torres (L2 Reviewer) passed 5. Documentation for X-Road® (12841)
2026-07-28 04:19:44
Ricardo Torres (L2 Reviewer) passed 4. Platform Independence for X-Road® (12841)
2026-07-28 04:19:42
Ricardo Torres (L2 Reviewer) passed 3. Clear Ownership for X-Road® (12841)
2026-07-28 04:19:39
Ricardo Torres (L2 Reviewer) passed 2. Open Licensing for X-Road® (12841)
2026-07-28 04:19:37
Ricardo Torres (L2 Reviewer) passed 1. SDG Relevance for X-Road® (12841)
2026-07-28 04:19:35
Ricardo Torres (L2 Reviewer) passed General Information for X-Road® (12841)
2026-07-28 04:19:32
Ricardo Torres (L2 Reviewer) pulled X-Road® (12841) under review
2026-02-05 15:45:22
Luis Sanchez (L1 Reviewer) submitted their review of X-Road® (12841)
2026-02-05 15:45:13
Luis Sanchez (L1 Reviewer) passed Scale of Solution for X-Road® (12841)
2026-02-05 15:45:11
Luis Sanchez (L1 Reviewer) passed 9C. Protection from Harassment for X-Road® (12841)
2026-02-05 15:45:08
Luis Sanchez (L1 Reviewer) passed 9B. Inappropriate & Illegal Content for X-Road® (12841)
2026-02-05 15:45:06
Luis Sanchez (L1 Reviewer) passed 9A. Data Privacy & Security for X-Road® (12841)
2026-02-05 15:45:03
Luis Sanchez (L1 Reviewer) passed 8. Standards & Best Practices for X-Road® (12841)
2026-02-05 15:45:01
Luis Sanchez (L1 Reviewer) passed 7. Privacy & Applicable Laws for X-Road® (12841)
2026-02-05 15:44:59
Luis Sanchez (L1 Reviewer) passed 6. Mechanism for Extracting Data for X-Road® (12841)
2026-02-05 15:44:56
Luis Sanchez (L1 Reviewer) passed 5. Documentation for X-Road® (12841)
2026-02-05 15:44:53
Luis Sanchez (L1 Reviewer) passed 4. Platform Independence for X-Road® (12841)
2026-02-05 15:40:49
Luis Sanchez (L1 Reviewer) passed 3. Clear Ownership for X-Road® (12841)
2026-02-05 15:40:47
Luis Sanchez (L1 Reviewer) passed 2. Open Licensing for X-Road® (12841)
2026-02-05 15:40:44
Luis Sanchez (L1 Reviewer) passed 1. SDG Relevance for X-Road® (12841)
2026-02-05 15:40:42
Luis Sanchez (L1 Reviewer) passed General Information for X-Road® (12841)
2026-02-05 15:38:06
Luis Sanchez (L1 Reviewer) pulled X-Road® (12841) under review
2025-08-08 10:39:24
Ville Sirviö (Applicant) submitted application for X-Road® (12841)
2025-07-14 01:30:05
System created a refresher application for X-Road® (11833)
2025-07-14 01:30:05
System created an autofill refresher application for X-Road® (12841)
2024-09-12 16:56:42
Ricardo Torres (L2 Reviewer) submitted their review of X-Road® (152) and found it to be a DPG
2024-09-12 16:56:39
System moved X-Road® (11833) to expired because parent applcation is now DPG.
2024-09-12 16:56:39
System unmarked X-Road® (11833) as a nominee
2024-09-12 16:56:16
Ricardo Torres (L2 Reviewer) passed Scale of Solution for X-Road® (11833)
2024-09-12 16:56:14
Ricardo Torres (L2 Reviewer) passed 9C. Protection from Harassment for X-Road® (11833)
2024-09-12 16:56:11
Ricardo Torres (L2 Reviewer) passed 9B. Inappropriate & Illegal Content for X-Road® (11833)
2024-09-12 16:56:09
Ricardo Torres (L2 Reviewer) passed 9A. Data Privacy & Security for X-Road® (11833)
2024-09-12 16:56:06
Ricardo Torres (L2 Reviewer) passed 8. Open Standards & Best Practices for X-Road® (11833)
2024-09-12 16:56:03
Ricardo Torres (L2 Reviewer) passed 7. Privacy & Applicable Laws for X-Road® (11833)
2024-09-12 16:56:00
Ricardo Torres (L2 Reviewer) passed 6. Non-PII Data Extraction for X-Road® (11833)
2024-09-12 16:55:57
Ricardo Torres (L2 Reviewer) passed 5. Documentation for X-Road® (11833)
2024-09-12 16:55:54
Ricardo Torres (L2 Reviewer) passed 4. Platform Independence for X-Road® (11833)
2024-09-12 16:55:38
Ricardo Torres (L2 Reviewer) passed 3. Clear Ownership for X-Road® (11833)
2024-09-12 16:55:36
Ricardo Torres (L2 Reviewer) passed 2. Open Licensing for X-Road® (11833)
2024-09-12 16:55:33
Ricardo Torres (L2 Reviewer) passed 1. SDG Relevance for X-Road® (11833)
2024-09-12 16:16:34
Ricardo Torres (L2 Reviewer) passed General Information for X-Road® (11833)
2024-09-12 16:16:30
Ricardo Torres (L2 Reviewer) pulled X-Road® (11833) under review
2024-09-05 02:47:04
L1 Reviewer (L1 Reviewer) submitted their review of X-Road® (11833)
2024-09-05 02:46:40
L1 Reviewer (L1 Reviewer) passed Scale of Solution for X-Road® (11833)
2024-09-05 02:46:36
L1 Reviewer (L1 Reviewer) edited 9C. Protection from Harassment for X-Road® (11833)
2024-09-05 02:46:21
L1 Reviewer (L1 Reviewer) passed 9C. Protection from Harassment for X-Road® (11833)
2024-09-05 02:46:15
L1 Reviewer (L1 Reviewer) passed 9B. Inappropriate & Illegal Content for X-Road® (11833)
2024-09-05 02:46:00
L1 Reviewer (L1 Reviewer) passed 9A. Data Privacy & Security for X-Road® (11833)
2024-09-05 02:45:57
L1 Reviewer (L1 Reviewer) passed 8. Open Standards & Best Practices for X-Road® (11833)
2024-09-05 02:45:50
L1 Reviewer (L1 Reviewer) passed 7. Privacy & Applicable Laws for X-Road® (11833)
2024-09-05 02:45:42
L1 Reviewer (L1 Reviewer) passed 6. Non-PII Data Extraction for X-Road® (11833)
2024-09-05 02:45:36
L1 Reviewer (L1 Reviewer) passed 5. Documentation for X-Road® (11833)
2024-09-05 02:45:28
L1 Reviewer (L1 Reviewer) edited 5. Documentation for X-Road® (11833)
2024-09-05 02:45:21
L1 Reviewer (L1 Reviewer) passed 4. Platform Independence for X-Road® (11833)
2024-09-05 02:45:12
L1 Reviewer (L1 Reviewer) passed 3. Clear Ownership for X-Road® (11833)
2024-09-05 02:44:55
L1 Reviewer (L1 Reviewer) passed 2. Open Licensing for X-Road® (11833)
2024-09-05 02:44:46
L1 Reviewer (L1 Reviewer) passed 1. SDG Relevance for X-Road® (11833)
2024-09-05 02:43:36
L1 Reviewer (L1 Reviewer) passed General Information for X-Road® (11833)
2024-09-05 02:43:31
L1 Reviewer (L1 Reviewer) pulled X-Road® (11833) under review
2024-08-16 10:59:10
Ville Sirviö (Applicant) submitted application for X-Road® (11833)
2024-08-16 10:41:10
Ville Sirviö (Applicant) created a refresher application for X-Road® (10968)
2023-10-09 08:17:03
Ricardo Torres (L2 Reviewer) submitted their review of X-Road® (152) and found it to be a DPG
2023-10-09 08:17:01
System moved X-Road® (10968) to expired because parent applcation is now DPG.
2023-10-09 08:17:01
System unmarked X-Road® (10968) as a nominee
2023-10-09 08:16:54
Ricardo Torres (L2 Reviewer) passed Scale of Solution for X-Road® (10968)
2023-10-09 08:16:51
Ricardo Torres (L2 Reviewer) passed 9C. Protection from Harassment for X-Road® (10968)
2023-10-09 08:16:43
Ricardo Torres (L2 Reviewer) passed 9B. Inappropriate & Illegal Content for X-Road® (10968)
2023-10-09 08:16:40
Ricardo Torres (L2 Reviewer) passed 9A. Data Privacy & Security for X-Road® (10968)
2023-10-09 08:16:36
Ricardo Torres (L2 Reviewer) passed 8. Open Standards & Best Practices for X-Road® (10968)
2023-10-09 08:16:32
Ricardo Torres (L2 Reviewer) passed 7. Privacy & Applicable Laws for X-Road® (10968)
2023-10-09 08:16:28
Ricardo Torres (L2 Reviewer) passed 6. Non-PII Data Extraction for X-Road® (10968)
2023-10-09 08:16:25
Ricardo Torres (L2 Reviewer) passed 5. Documentation for X-Road® (10968)
2023-10-09 08:16:22
Ricardo Torres (L2 Reviewer) passed 4. Platform Independence for X-Road® (10968)
2023-10-09 08:16:18
Ricardo Torres (L2 Reviewer) passed 3. Clear Ownership for X-Road® (10968)
2023-10-09 08:16:15
Ricardo Torres (L2 Reviewer) passed 2. Open Licensing for X-Road® (10968)
2023-10-09 08:16:11
Ricardo Torres (L2 Reviewer) passed 1. SDG Relevance for X-Road® (10968)
2023-10-09 08:16:08
Ricardo Torres (L2 Reviewer) passed General Information for X-Road® (10968)
2023-10-09 08:16:03
Ricardo Torres (L2 Reviewer) pulled X-Road® (10968) under review
2023-10-03 22:47:04
System remove tag Late from X-Road® (10968)
2023-10-03 22:47:04
L1 Reviewer (L1 Reviewer) submitted their review of X-Road® (10968)
2023-10-03 18:00:04
System add new tag Late to X-Road® (10968)
2023-10-03 17:14:26
L1 Reviewer (L1 Reviewer) passed Scale of Solution for X-Road® (10968)
2023-10-03 17:14:03
L1 Reviewer (L1 Reviewer) passed 9C. Protection from Harassment for X-Road® (10968)
2023-10-03 17:05:44
L1 Reviewer (L1 Reviewer) passed 9B. Inappropriate & Illegal Content for X-Road® (10968)
2023-10-03 17:05:42
L1 Reviewer (L1 Reviewer) edited a note on 9B. Inappropriate & Illegal Content for X-Road® (10968)
2023-10-03 10:28:31
L1 Reviewer (L1 Reviewer) passed 9A. Data Privacy & Security for X-Road® (10968)
2023-10-03 10:27:50
L1 Reviewer (L1 Reviewer) passed 8. Open Standards & Best Practices for X-Road® (10968)
2023-10-03 10:20:08
L1 Reviewer (L1 Reviewer) passed 7. Privacy & Applicable Laws for X-Road® (10968)
2023-10-03 10:20:07
L1 Reviewer (L1 Reviewer) passed 7. Privacy & Applicable Laws for X-Road® (10968)
2023-10-03 10:19:15
L1 Reviewer (L1 Reviewer) passed 6. Non-PII Data Extraction for X-Road® (10968)
2023-10-03 10:18:35
L1 Reviewer (L1 Reviewer) passed 5. Documentation for X-Road® (10968)
2023-10-03 10:16:14
L1 Reviewer (L1 Reviewer) passed 4. Platform Independence for X-Road® (10968)
2023-10-03 10:08:26
L1 Reviewer (L1 Reviewer) passed 3. Clear Ownership for X-Road® (10968)
2023-10-03 10:07:44
L1 Reviewer (L1 Reviewer) passed 2. Open Licensing for X-Road® (10968)
2023-10-03 10:07:32
L1 Reviewer (L1 Reviewer) passed 1. SDG Relevance for X-Road® (10968)
2023-10-03 10:05:55
L1 Reviewer (L1 Reviewer) passed General Information for X-Road® (10968)
2023-10-03 09:57:43
L1 Reviewer (L1 Reviewer) pulled X-Road® (10968) under review
2023-10-02 11:13:37
Ville Sirviö (Applicant) submitted application for X-Road® (10968)
2023-10-02 11:01:13
Ville Sirviö (Applicant) created a refresher application for X-Road® (10188)
2023-01-10 15:08:12
Admin (Admin) update Tags for X-Road (10129)
2023-01-10 15:08:06
Admin (Admin) over ride decision for X-Road (10129)
2023-01-05 10:56:46
Admin (Admin) update Tags for X-Road (10129)
2023-01-05 10:41:54
Admin (Admin) over ride decision for X-Road (10129)
2022-11-30 04:13:24
Nathan Baleeta (L2 Reviewer) submitted their review of X-Road® (153) and found it to be a DPG
2022-11-30 04:13:22
System moved X-Road (10188) to expired because parent applcation is now DPG.
2022-11-30 04:13:22
System unmarked X-Road® (10188) as a nominee
2022-11-30 04:13:10
Nathan Baleeta (L2 Reviewer) passed 4. Platform Independence for X-Road® (10188)
2022-11-30 04:11:44
Nathan Baleeta (L2 Reviewer) passed 5. Documentation for X-Road® (10188)
2022-11-30 04:11:40
Nathan Baleeta (L2 Reviewer) edited 5. Documentation for X-Road® (10188)
2022-11-30 04:11:25
Nathan Baleeta (L2 Reviewer) passed 8. Open Standards & Best Practices for X-Road® (10188)
2022-11-30 04:10:24
Nathan Baleeta (L2 Reviewer) edited 8. Open Standards & Best Practices for X-Road® (10188)
2022-11-30 04:09:18
Nathan Baleeta (L2 Reviewer) passed 9B. Inappropriate & Illegal Content for X-Road® (10188)
2022-11-30 04:08:57
Nathan Baleeta (L2 Reviewer) passed 7. Privacy & Applicable Laws for X-Road® (10188)
2022-11-30 04:08:28
Nathan Baleeta (L2 Reviewer) passed 6. Non-PII Data Extraction for X-Road® (10188)
2022-11-30 04:05:42
Nathan Baleeta (L2 Reviewer) passed 3. Clear Ownership for X-Road® (10188)
2022-11-30 04:05:21
Nathan Baleeta (L2 Reviewer) passed 1. SDG Relevance for X-Road® (10188)
2022-11-30 02:58:04
Nathan Baleeta (L2 Reviewer) passed 2. Open Licensing for X-Road® (10188)
2022-11-30 02:57:15
Nathan Baleeta (L2 Reviewer) passed 9A. Data Privacy & Security for X-Road® (10188)
2022-11-30 02:48:00
Nathan Baleeta (L2 Reviewer) passed 9C. Protection from Harassment for X-Road® (10188)
2022-11-30 02:47:50
Nathan Baleeta (L2 Reviewer) passed Scale of Solution for X-Road® (10188)
2022-11-30 02:47:46
Nathan Baleeta (L2 Reviewer) edited Scale of Solution for X-Road® (10188)
2022-11-30 02:46:58
Nathan Baleeta (L2 Reviewer) passed General Information for X-Road® (10188)
2022-11-30 02:41:59
Nathan Baleeta (L2 Reviewer) pulled X-Road® (10188) under review
2022-11-23 10:58:47
Ricardo Torres (L1 Reviewer) submitted their review of X-Road® (10188)
2022-11-23 10:58:43
Ricardo Torres (L1 Reviewer) passed Scale of Solution for X-Road® (10188)
2022-11-23 10:58:19
Ricardo Torres (L1 Reviewer) passed 9C. Protection from Harassment for X-Road® (10188)
2022-11-23 10:58:15
Ricardo Torres (L1 Reviewer) passed 9B. Inappropriate & Illegal Content for X-Road® (10188)
2022-11-23 10:57:56
Ricardo Torres (L1 Reviewer) passed 9A. Data Privacy & Security for X-Road® (10188)
2022-11-23 10:57:33
Ricardo Torres (L1 Reviewer) passed 8. Open Standards & Best Practices for X-Road® (10188)
2022-11-23 10:57:05
Ricardo Torres (L1 Reviewer) passed 7. Privacy & Applicable Laws for X-Road® (10188)
2022-11-23 10:56:58
Ricardo Torres (L1 Reviewer) passed 6. Non-PII Data Extraction for X-Road® (10188)
2022-11-23 10:56:35
Ricardo Torres (L1 Reviewer) passed 5. Documentation for X-Road® (10188)
2022-11-23 10:50:50
Ricardo Torres (L1 Reviewer) edited a note on 4. Platform Independence for X-Road® (10188)
2022-11-23 10:42:26
Ricardo Torres (L1 Reviewer) passed 4. Platform Independence for X-Road® (10188)
2022-11-23 10:42:22
Ricardo Torres (L1 Reviewer) passed 3. Clear Ownership for X-Road® (10188)
2022-11-23 10:42:01
Ricardo Torres (L1 Reviewer) passed 2. Open Licensing for X-Road® (10188)
2022-11-23 10:41:44
Ricardo Torres (L1 Reviewer) passed 1. SDG Relevance for X-Road® (10188)
2022-11-23 10:40:05
Ricardo Torres (L1 Reviewer) passed General Information for X-Road® (10188)
2022-11-23 10:36:24
Ricardo Torres (L1 Reviewer) pulled X-Road® (10188) under review
2022-11-22 19:49:16
Ville Sirviö (Applicant) submitted application for X-Road® (10188)
2022-11-16 01:12:36
Ville Sirviö (Applicant) created a refresher application for X-Road (10129)
2022-11-01 07:56:35
Application imported by admin
Data Exchange