B2TrustB2Trust
Abstract gradient map of Europe showing regional density variation across the continent, no labels or flags visible — visual metaphor for fragmentation of business identifier systems across EU member states.
research9 min read · 2,200 words

The Identifier Chaos: Europe's 27+ Business ID Formats

EU-27 runs 27+ different business identifier systems. A look at the formats, the EUID attempt, and Directive 2025/25 — Europe's next wave of harmonisation.

Sebastian Zerniak

Sebastian Zerniak

CEO and Founder, B2Trust

The European Union has no single business identifier. Each of the 27 member states issues its own, often through three separate authorities: a commercial register, a tax administration, and a statistical office. Each format is shaped by local administrative history rather than cross-border design.

The result is a fragmented identifier landscape that any cross-border verification workflow has to navigate from the first API call. A company legally registered in Warsaw has one number at the Krajowy Rejestr Sądowy, a different one at the tax administration, and a third on its VAT invoices. A company in Paris has a SIREN from INSEE, a SIRET for each establishment, and a VAT number derived from the SIREN. A company in Frankfurt has a Handelsregister reference that encodes the district court that issued it. None of these numbers are interchangeable.

Directive (EU) 2019/1151 created a cross-reference layer, the EUID, in 2017 1. It did not replace national identifiers. Eight years in, the EUID sits largely unused outside BRIS search queries, with one exception: DORA, applicable since 17 January 2025, requires financial entities to document their third-party ICT service providers by LEI or EUID 2. A second directive, (EU) 2025/25, entered into force on 30 January 2025. Its transposition deadline is 31 July 2027. Its main operational provisions apply from 31 July 2028 3. The next unified company-law layer is in force on paper and three years out in practice.

2. What "business identifier" actually means

The term is imprecise. In practice, European companies carry four kinds of identifier simultaneously, each issued by a different authority for a different reason.

A legal-entity identifier is the one on the commercial or court register. It ties a legal person to its founding documents, directors, share capital, and filings. In Poland the KRS number serves this role; in Germany the Handelsregister reference; in France the SIREN (paired with an RCS mention); in Italy the Codice Fiscale company variant; in the United Kingdom the Companies House number.

A tax identifier is issued by the tax administration and is used for corporate income tax, withholding, and domestic invoicing. In Poland it is the NIP. In Germany it is the Steuernummer, which varies by Land. In Spain it is the NIF.

A statistical identifier is issued by the national statistical office for economic reporting and sampling. France's SIRET, Poland's REGON, and the SIRENE register entry sit in this category. These identifiers are often the richest on a company's activity profile and the most useful for classification, yet they are rarely canonical for legal purposes.

A VAT identifier is the pan-EU format exposed through VIES. In most member states it is derived from or identical to the tax identifier, prefixed with the two-letter country code.

The same legal entity therefore routinely holds three to five identifiers at once. Each is valid. None can be substituted for another without losing a specific regulatory meaning.

3. The EU-27 format catalog

A look across eight representative member states makes the fragmentation visible.

Three patterns emerge from the table.

The first is length variance. Legal-entity IDs range from six digits in Ireland to combinations of two register-type letters, a district court name, and a running number in Germany. Tax IDs range from eight digits in Denmark to mixed-letter-digit strings in Spain. A validation routine written for one format will reject valid entries from another without a country-specific branch.

The second is check-digit heterogeneity. France's SIREN uses a Luhn algorithm. Denmark's CVR uses modulus-11. Poland's NIP uses a weighted sum with specific coefficients for each digit position. Spain's NIF uses a control character derived from letters-and-digits arithmetic. Each check-digit scheme protects its format individually; it does not generalise across borders.

The third is authority divergence. In France the legal, tax, and statistical identifiers all derive from or reference the SIREN — one anchor, multiple views. In Germany the legal identifier (Handelsregister) and the tax identifier (Steuernummer) are issued by entirely separate systems, with no shared key between them. The operational cost of a cross-border verification lookup is largely determined by which of these two models each touched jurisdiction follows.

4. The EUID experiment — Article 16 of Directive 2019/1151

In 2017, the EU attempted a cross-reference layer. Adoption is still catching up in 2026.

Article 16 of Directive (EU) 2019/1151 introduced the Unique European Identifier, the EUID 1. Its format concatenates a member-state code, the identifier of the domestic register, the company's domestic register number, and an optional disambiguation element. The Business Registers Interconnection System (BRIS) has been live since June 2017 and covers all EU-27 member states plus Iceland, Liechtenstein, and Norway 4. A company's EUID can be retrieved through the European e-Justice portal by any user with the domestic registration number and the jurisdiction.

What BRIS does not do is replace national identifiers. The EUID is a pointer that resolves to a record in a national register. The national register continues to assign its own primary key on the same timeline and in the same format it used before 2017. Every cross-border verification still begins with a national identifier in local format, and the EUID appears only after the resolution step, not before it.

Adoption outside BRIS search queries sat close to zero for most of the post-2017 period. The substantive exception is DORA (Regulation (EU) 2022/2554), applicable from 17 January 2025, which requires financial entities to maintain a register of third-party ICT service providers and to identify each provider by LEI or EUID 2. That created the first operational pull for EUID use outside BRIS search, and it remains confined to financial-sector counterparty tracking.

5. The LEI parallel — ISO 17442

A separate 20-character global standard covers 2.93 million legal entities — but mostly in financial contexts.

The Legal Entity Identifier, specified by ISO 17442, is a 20-character alphanumeric code issued by Local Operating Units accredited under GLEIF. By the end of 2025, 2.93 million LEIs were active worldwide, after a record year in which more than 355,000 new LEIs were issued and annual growth reached 13.5% 5. The LEI's operational value is its global uniqueness: one LEI, one legal entity, unambiguously, regardless of jurisdiction.

The limit is coverage domain. LEI issuance is driven by financial-market regulation. MiFID II, EMIR, and SFTR reporting obligations require LEIs for counterparties to reportable transactions. DORA extends the LEI footprint into the ICT-provider tier of financial entities. Outside those contexts, a typical European small or mid-size company has no regulatory reason to obtain and maintain an LEI.

The gap between LEI coverage and EU business population is large. Against 2.93 million active LEIs globally, the EU alone has tens of millions of active business entities. LEI penetration in general B2B verification, where most transactions happen, runs in the low single digits of addressable population.

6. What's coming — Directive (EU) 2025/25

The EU's next wave of company-law harmonisation is already in force, with national transposition running to 2027–2029.

Directive (EU) 2025/25 of 19 December 2024 entered into force on 30 January 2025 3. Its stated purpose is to expand and upgrade the use of digital tools and processes in company law, building on the 2019/1151 foundation. Three provisions matter for identifier practice.

First, the directive applies the once-only principle: a company setting up a subsidiary or branch in another member state should not have to resubmit documents already held by the origin registry. Second, it introduces an EU Company Certificate, described in public commentary as a European corporate passport, intended to attest key company data across borders in a common format. Third, it extends digital-by-default treatment of company registration, filings, and amendments, together with identity-fraud safeguards at the point of incorporation.

The rollout is slow. Member states must transpose the directive into national law by 31 July 2027 and apply the resulting measures from 31 July 2028. A specific set of provisions on cross-border digital exchanges must be in force by 1 August 2028 and applied from 1 August 2029 3. Whatever 2025/25 changes about identifier practice, the change lands operationally no earlier than mid-2028, and for some provisions mid-2029.

7. The operational cost

For any cross-border B2B workflow, identifier fragmentation shows up as direct operational cost.

A verification lookup starts with a counterparty name, a country, and often one identifier supplied by the counterparty. The lookup has to resolve which kind of identifier was supplied, whether that identifier is canonical for the verification use case at hand, and what the authoritative source is in the counterparty's jurisdiction. In jurisdictions where legal, tax, statistical, and VAT identifiers all derive from a single anchor, France being the clearest example, that resolution is cheap. In jurisdictions where legal and tax identifiers are issued by unrelated systems, Germany being the clearest example, the resolution involves either a secondary lookup or an accepted gap in the record.

Inside every member state, most legal entities simultaneously hold a commercial-register ID, a tax ID, a statistical ID, and a VAT ID. Four numbers, four authorities, four issuance histories, for one entity. None interchangeable. Multiply the reconciliation burden by 27 and the problem acquires a structural shape rather than an edge-case one.

The knock-on effects are operational. Onboarding latency grows because a verification process that would complete in a single call against a unified identifier has to chain two or three. Sanctions and politically-exposed-person screening produces higher false-negative rates when the screening key is not consistently the authoritative legal-entity identifier in the counterparty's jurisdiction. Payment reconciliation with beneficial-ownership data breaks where identifier choice varies between the payment rail and the ownership register.

B2Trust indexes 29M+ business entities across 32 countries, free and cross-border at b2trust.com. Platform analytics, April 2026.

LEI coverage vs EU active business population

~2.93M LEIs

vs 29M+ indexed entities

The ratio captures the gap in one line. A global standard built for financial counterparties does not cover, and was never designed to cover, the everyday B2B verification surface.

8. Conclusion

Europe has 27+ distinct business identifier schemes, one attempted cross-reference layer with limited adoption, one parallel global standard concentrated in financial-sector use, and one new harmonisation directive whose operational effects arrive no earlier than 2028.

For teams building cross-border verification today, four implications follow. There is no single source of truth for EU business identifiers in 2026. A workflow has to reconcile multiple identifiers per entity, and identifier choice encodes a regulatory purpose, not a naming preference. The EUID is a cross-register pointer, not a primary identifier; it is worth capturing when available and not worth depending on. The LEI is a high-quality standard inside its domain and a low-coverage one outside it. Directive 2025/25 is worth tracking, and worth not betting an architecture on before 2028.

The structural fact is simple. A continent with 27+ identifier systems, each shaped by local administrative history, does not harmonise by publishing a directive. It harmonises one transposition, one registry API, and one cross-border workflow at a time.


Footnotes

  1. Directive (EU) 2019/1151 of the European Parliament and of the Council of 20 June 2019 amending Directive (EU) 2017/1132 as regards the use of digital tools and processes in company law. Verified 2026-04-18 on EUR-Lex at eur-lex.europa.eu. 2

  2. Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector (DORA). Applicable from 17 January 2025. Verified 2026-04-18 on EUR-Lex at eur-lex.europa.eu. 2

  3. Directive (EU) 2025/25 of the European Parliament and of the Council of 19 December 2024 further expanding and upgrading the use of digital tools and processes in company law. Entered into force 30 January 2025. Transposition deadline 31 July 2027; application from 31 July 2028; further provisions applicable from 1 August 2029. Verified 2026-04-18 on EUR-Lex at eur-lex.europa.eu. 2 3

  4. European Commission, Business Registers Interconnection System (BRIS). Operational since June 2017; connects commercial registers of EU-27 member states plus Iceland, Liechtenstein, and Norway. Verified 2026-04-18 at ec.europa.eu.

  5. GLEIF, "The LEI in Numbers: Global Transparency and Digitalization Push Drives LEI Adoption in 2025," published 26 January 2026. Active LEIs reached 2.93 million at end of 2025; 355,000+ new LEIs issued in 2025; annual growth 13.5%. Publisher: gleif.org. Verified 2026-04-18.

About the Author

Sebastian Zerniak

Sebastian Zerniak

CEO and Founder, B2Trust

Sebastian Zerniak is the founder and CEO of B2Trust. He writes about business identity, verification, and the trust mechanics underneath B2B commerce.

LinkedIn →