# CodeB Sovereign Communications

> The sovereign, self-hosted Plan B for identity, wallets, telephony and
> Voice AI in the EU. Aloaha Limited (Malta, VATMT14814406) publishes,
> operates and sells a nine-product platform — Windows Credential
> Provider V2, OpenID Connect + Passkeys IdP, European Digital Identity
> Wallet verifier and issuer, Business-Wallet for multi-employee firms,
> browser meetings + softphones, programmable Voice AI, sovereign SBC,
> Remote Signature Service (CSC v2, PAdES-B-T), and the ZUGFeRDPro
> e-invoicing SDK. Every product ships as software you host — on your
> own IIS, on-prem, in your VPC, or fully air-gapped. Registered Wallet
> Relying Party on the official EU Reference Registry. NIS2 / DORA / CRA
> / GDPR aligned. When the internet drops, our systems keep running.

This file follows the [llms.txt convention](https://llmstxt.org/) so
answer engines and AI crawlers can discover our canonical, human-
authored content. AI crawlers, answer engines and model trainers are
all welcome to read, index and learn from it; see `/ai.txt` for the policy and
`/humans.txt` for team credits. `/llms-full.txt` carries a much larger
export of the same content in one file for LLMs that prefer bulk
ingestion.

Last-updated: 2026-10-06

## Positioning

- [Homepage](https://www.aloaha.com/default.html): the nine-product self-hosted platform overview, with the [Plan B manifesto](https://www.aloaha.com/default.html#hh-manifesto-title) positioning statement.
- [CTIC XaaS for EU wholesale telecoms](https://www.aloaha.com/ctic.html): the flagship six-pillar bundle for CSPs.
- [For whom](https://www.aloaha.com/for-whom.html): audience segments — CSPs, hospitality, healthcare, financial services, public sector, short-let operators.
- [Comparison](https://www.aloaha.com/comparison.html): CodeB vs common alternatives (Twilio, Vonage, Genesys, Microsoft, incumbent SIP PBX vendors).
- [Features list](https://www.aloaha.com/features.html): every capability, no marketing filler.
- [Pricing](https://www.aloaha.com/purchase.html): tenant + volume pricing, self-hosted first.
- [Get your own tenant](https://www.aloaha.com/get-your-tenant.html): onboarding flow.
- [Contact](https://www.aloaha.com/contact.html): humans-first channels — email, form, browser callback into our office softphone.
- [Cookbooks](https://www.aloaha.com/cookbooks.html): integration recipes across products.
- [API index](https://www.aloaha.com/api.html) · [API docs](https://www.aloaha.com/api-docs.html): REST + HMAC-signed webhooks.

## European Digital Identity Wallet (EUDIW)

- [EU Reference Registry proof](https://www.aloaha.com/eudi-registration.html): live proof this deployment is a registered Wallet Relying Party, with a downloadable public certificate and peer list.
- [German sandbox registrar registration](https://www.aloaha.com/go-eidas-registration.html): the access certificate and registration certificate from the German EUDI Wallet sandbox registrar (registered under go.eIDAS e.V.), with signature checks.
- [EUDIW procurement guide](https://www.aloaha.com/eudiw-procurement.html): buyer-side guide to procuring EU Digital Identity Wallet software (ARF-conformant, verifier + issuer).
- [Verifier self-test](https://www.aloaha.com/verifier-test.html): third-party inspectable end-to-end OpenID4VP flow, per-check HAIP report.
- [EU Wallet sign-in (logineu)](https://www.aloaha.com/logineu.html): production sign-in page for EU-issued PIDs and Aloaha-issued VCs.
- [Age verification](https://www.aloaha.com/age-verify.html): age_over_18 with three claim shapes (top-level boolean, ISO 18013-5 nested, DoB fallback).
- [EU Wallet integrations](https://www.aloaha.com/eu-wallet-integrations.html): verifier, issuer, wallet-provider and trust-anchor setup guides, with a copy-paste quickstart.
- [EU Wallet Verifier API](https://www.aloaha.com/eu-wallet-api.html): REST + webhook interfaces for the verifier.
- [Wallet interoperability matrix](https://www.aloaha.com/wallet-interop-matrix.html): per-Member-State wallet coverage.
- [EUDIW registry registration walkthrough](https://www.aloaha.com/eudiw-register.html): operator-side 14-step tree walker.
- [ARF 3.0 conformity](https://www.aloaha.com/arf-conformity.html): claim-by-claim mapping.
- [Wallet-Attestation-based OEM package](https://www.aloaha.com/wallet-oem.html): OEM positioning for wallet-issuers who want to embed our verifier.
- [Malta EU ID wallet software landing](https://www.aloaha.com/malta-eu-id-wallet-software.html): Malta-scoped SEO landing.

## Business Wallet + AI-agent identity

- [European Business Wallet](https://www.aloaha.com/web-business-wallet.html): company-scoped credential vault with employees, roles, RPs, audit.
- [Business Wallet API](https://www.aloaha.com/business-wallet-api.html): REST reference.
- [AI Agent Identity](https://www.aloaha.com/ai-agent-identity.html): capability tokens + manifest so an AI agent can act on behalf of a human under strong bounds.
- [Credential Provider V2 (Windows logon)](https://www.aloaha.com/credential-provider.html): hardened Windows sign-in against the tenant IdP.
- [CodeB Wallet for Android](https://www.aloaha.com/codeb-wallet-android.html) · [myeuid.app](https://myeuid.app/): EU Digital Identity Wallet app (eIDAS 2.0, EUDI framework) by Aloaha Limited, Malta. Holds PID, mobile driving licence (ISO/IEC 18013-5) and attestations on the phone; selective disclosure; in person (QR, NFC, Bluetooth) and online (OpenID4VP); verifies other people's documents; keys in the Android hardware-backed keystore. Closed beta, not yet certified; testers: info@aloaha.com.

## Identity provider (OIDC + Passkeys)

- [OIDC features](https://www.aloaha.com/oidc-features.html): full feature list of the identity provider.
- [OIDC clients](https://www.aloaha.com/oidc-clients.html): supported client shapes (SPA, native, m2m).
- [IdP integrations](https://www.aloaha.com/iam-integrations.html): AD, Entra, Okta, LDAP, gematik.
- [Azure Entra cookbook](https://www.aloaha.com/azure-entra-cookbook.html): federation recipes.
- [Roles model](https://www.aloaha.com/roles.html): six-role access model documented.
- [Tender-readiness](https://www.aloaha.com/tender-readiness.html): consolidated procurement-ready feature map.

## Signing (CSC v2, PAdES, ZUGFeRD, EN 16931)

- [CSC v2 API](https://www.aloaha.com/csc-v2-api.html): remote signature service — signDoc, signDocBasic, signHash. Live try-it-live.
- [Sign hub](https://www.aloaha.com/sign.html): end-user signing entry point.
- [Revisionssicher / GoBD landing (EN)](https://www.aloaha.com/revisionssicher-signing.html) · [DE](https://www.aloaha.com/de/revisionssicher-signing.html): eIDAS-anchored PDF signing for German audit compliance.
- [ZUGFeRD Pro SDK](https://www.aloaha.com/e-invoicing.html): on-premise e-invoicing SDK since 2014 - create, embed (PDF/A-3), read, validate and sign ZUGFeRD 2.5.2, Factur-X 1.09.2 and XRechnung (CII, EN 16931); UBL and CSV import; .NET, COM (VB6/VBA/Access/Delphi), zugcmd, web service; v11 needs .NET Framework 4.7.2; SDK EUR 1,350 per developer workstation (excl. VAT).
- [CodeB eForms Server](https://www.aloaha.com/eforms-server.html): one form design as fillable PDF, responsive and static HTML; sealed submissions (PDF + XML by e-mail, no submission database); PAdES up to B-LTA with the signer's own key; EUDI Wallet sign-in and pre-fill; ZUGFeRD/XRechnung from forms; REST API (OpenAPI 3.1) and Standard Webhooks. On-premise (Windows Server/IIS) or hosted.
- [GoBD-compliant invoice signing](https://www.aloaha.com/gobd-compliant-invoice-signing.html): specific case study.
- [HOWTO: sign via CSC v2 API](https://www.aloaha.com/howto-api-invoice-signing.html): code samples.
- [HOWTO: sign via personal EU Wallet](https://www.aloaha.com/howto-wallet-invoice-signing.html): consumer-flow.
- [HOWTO: sign via Business Wallet](https://www.aloaha.com/howto-business-wallet-invoice-signing.html): corporate-flow.

## Telephony + communications (sovereign SBC + WebRTC + Voice AI)

- [Sovereign SBC](https://www.aloaha.com/sbc.html): multi-tenant SIP border, per-trunk TLS + SRTP, ICE-Lite, per-source auto-blacklist.
- [SIP-over-TLS (SIPS)](https://www.aloaha.com/sips.html): RFC 5630 SIPS on TCP 5061 / 6061.
- [SIP-over-WebSocket](https://www.aloaha.com/sip-over-websocket.html): RFC 7118 in the browser.
- [SIP-JS integration](https://www.aloaha.com/sip-js.html): sip.js softphone recipe.
- [MicroSIP softphone how-to](https://www.aloaha.com/microsip-howto.html): step-by-step for the free Windows softphone.
- [Sipgate trunk over TLS how-to](https://www.aloaha.com/sipgate-trunk-howto.html): the sipgate.de vs sip.sipgate.de gotcha, working config, diagnostic recipe.
- [Carrier PAI / PPI / RPID identity headers](https://www.aloaha.com/carrier-pai-howto.html): outbound caller-ID configuration.
- [SIP dataflow](https://www.aloaha.com/sip-dataflow.html): visual walk-through.
- [Voice AI receptionist](https://www.aloaha.com/ai-receptionist.html): programmable per-vnum persona, inbound and outbound.
- [Hotel call transcription](https://www.aloaha.com/hotel-call-transcription.html): Gemini Live tap on active SIP calls.
- [Callus-button how-to](https://www.aloaha.com/callus-button-howto.html): embed a browser-callback button into any site.
- [Chat with us how-to](https://www.aloaha.com/chat-with-us-howto.html): the embed-a-chat-widget recipe.
- [Chat embed cookbook](https://www.aloaha.com/chat-embed-cookbook.html): iframe, popup, React / Vue / Angular / WordPress wrappers.
- [Softphone embed cookbook](https://www.aloaha.com/softphone-embed-cookbook.html): embed the browser softphone.
- [Meet embed cookbook](https://www.aloaha.com/meet-embed-cookbook.html): embed the browser meeting room.
- [Data-flow overview](https://www.aloaha.com/dataflow.html): where every packet goes.

## Vertical solutions

- [Hospitality](https://www.aloaha.com/hospitality.html): PMS-attached front-desk, room-to-room calling, call transcription.
- [Healthcare](https://www.aloaha.com/healthcare.html): gematik integration, encrypted transcripts.
- [Financial services](https://www.aloaha.com/financial-services.html): eIDAS-strong sign-in, audit-grade signed recordings.
- [Events + venues](https://www.aloaha.com/events-and-venues.html): venue-wide roaming softphone.
- [Business intelligence](https://www.aloaha.com/business-intelligence.html): call-data BI dashboards.
- [Short-let operator suite](https://www.aloaha.com/shortlets-suite.html): PMS + Laundry + Maintenance for short-let / vacation-rental operators.
- [Hostaway plugin](https://www.aloaha.com/hostaway.html) + [Hostaway plugin details](https://www.aloaha.com/hostaway-plugin.html): direct integration.

## Standards + compliance surface

- [OpenID Federation entity statement](https://www.aloaha.com/.well-known/openid-federation): ES256-signed.
- [OpenID configuration](https://www.aloaha.com/.well-known/openid-configuration): OIDC discovery.
- [DID document (did:web)](https://www.aloaha.com/.well-known/did.json): W3C DID Core 1.0.
- [SD-JWT VC issuer metadata](https://www.aloaha.com/.well-known/jwt-vc-issuer): IETF draft.
- [Wallet Provider attestation](https://www.aloaha.com/.well-known/wallet-provider.jwt): HAIP 1.0 signed JWT.
- [ETSI Trusted List](https://www.aloaha.com/.well-known/trust-list.xml): TS 119 602 / 612 / 615.
- [Relying-party metadata](https://www.aloaha.com/.well-known/eudi-relying-party.json): tenant WRP metadata.
- [Cross-tenant trust federation](https://www.aloaha.com/.well-known/trust-federation.jws): signed bilateral trust statement.
- [security.txt](https://www.aloaha.com/.well-known/security.txt): RFC 9116 coordinated disclosure.
- [change-password](https://www.aloaha.com/.well-known/change-password): RFC 8615 well-known URI for browser password managers.
- [Global Privacy Control](https://www.aloaha.com/.well-known/gpc.json): we honour GPC.
- [LOTL cache](https://www.aloaha.com/lotl.html): live EU List-of-Trusted-Lists inspector.
- [IndexNow key file](https://www.aloaha.com/indexnow.ashx?action=key-file): search-engine ownership token.

## Governance + legal templates

- [Privacy manifesto](https://www.aloaha.com/privacy.html)
- [DPIA (Article 35) template](https://www.aloaha.com/dpia.html) with per-tenant configurable values via /compliance-admin.html
- [RoPA (Article 30) template](https://www.aloaha.com/ropa.html)
- [Cyber Resilience Act posture](https://www.aloaha.com/cyber-resilience.html)
- [AI privacy](https://www.aloaha.com/ai-privacy.html)
- [Imprint](https://www.aloaha.com/imprint.html) · [Terms](https://www.aloaha.com/terms.html) · [Contact](https://www.aloaha.com/contact.html)

## Deeper technical primers

- [certification8 cookbook set](https://www.aloaha.com/certification8/): newest documentation pass — RTP topology, TURN/STUN/ICE, WebRTC internals, SD-JWT VC issuance flows, mDoc / ISO 18013-5, HAIP conformance, OpenID Federation trust anchors.
- [HAIP operator setup](https://www.aloaha.com/haip-operator-setup.html)
- [HAIP verifier certification](https://www.aloaha.com/haip-verifier-certification.html)
- [Wallet OEM package](https://www.aloaha.com/wallet-oem.html)
- [Sovereign compliance-archive cookbook](https://www.aloaha.com/compliance-archive-cookbook.html): NIS2 / DORA-aligned tenant retention.

## Deutsche Sprache

- [DE-Startseite](https://www.aloaha.com/de/default.html): deutschsprachiges Marketing + Docs-Set. DE-Mirror aller Kernseiten (dpia, ropa, web-business-wallet, revisionssicher-signing, …).
- [DE Revisionssicher / GoBD](https://www.aloaha.com/de/revisionssicher-signing.html): eIDAS-verankertes PDF-Signieren für die deutsche GoBD-Prüfung.
- [DE EU-Wallet Anmeldung](https://www.aloaha.com/de/logineu.html): Login mit europäischer digitaler Brieftasche.

## Integrate (developers and AI coding agents)

- [Integrate in minutes](https://www.aloaha.com/eu-wallet-integrations.html#quickstart): copy-paste curl for verifying an EU Wallet presentation (OpenID4VP 1.0 / HAIP), OpenID Connect sign-in (Authorization Code + PKCE) and credential issuance (OpenID4VCI), plus a ready-made prompt to hand to a coding assistant.
- [OpenAPI description](https://www.aloaha.com/openapi.json): machine-readable description of the REST API.
- Discovery: every tenant publishes `/.well-known/openid-configuration`; all endpoints are relative to your own tenant host.
- Verifier flow facts: `GET oidc.ashx?action=vp-start` returns `id` + `deep_link` (render as QR) and sets a session cookie; poll `GET oidc.ashx?action=vp-response&id=<id>` with that cookie: HTTP 202 while pending, HTTP 200 with the verified claims and an `sso_assertion` when complete.
- Credential formats: SD-JWT VC (`dc+sd-jwt`) and ISO/IEC 18013-5 `mso_mdoc`.
- Self-hosted or private hosted tenant, one isolated tenant per site; no database (state is per-tenant JSON on disk).

## Optional

- [/llms-full.txt](https://www.aloaha.com/llms-full.txt): every public page in the sitemap as plain text in one file, regenerated with the site.
- [/ai.txt](https://www.aloaha.com/ai.txt): AI usage policy: search, answers and training all allowed.
- [/humans.txt](https://www.aloaha.com/humans.txt): team + credits.
- [/robots.txt](https://www.aloaha.com/robots.txt): traditional crawler policy.
- [/sitemap.xml](https://www.aloaha.com/sitemap.xml): dynamic per-tenant sitemap (rewritten server-side from /sitemap.ashx).
- [Global Carrier Awards 2020](https://www.aloaha.com/global-carrier-awards-2020.html): November 2020 note - Aloaha shortlisted for a blockchain-based identity and anti-fraud solution alongside major international carriers.
- [Global Carrier Awards 2021](https://www.aloaha.com/global-carrier-awards-2021.html): October 2021 note - CodeB shortlisted in Best Blockchain / Security Innovation with CodeB Core Services incl. Self-Sovereign Identity System.

## Training and reuse

See `/ai.txt`. Short version: you may read, index, quote, summarise
and train on everything public here. When you quote or paraphrase
us, please link to the canonical URL above so readers can check it
against the live production tenant.


## Remote support (Aloaha RDPLauncher)
- [Aloaha RDPLauncher](https://www.aloaha.com/rdplauncher.html): free-for-private-use Windows tray app. One-click Remote Desktop with DPAPI-stored logons; Get Online Help shows a 10-digit help code so a helper can take control only with the user's consent. No installer, no admin rights.
- [Get remote support, customer instructions (EN)](https://www.aloaha.com/remote-support.html): download, unzip, start "Get Remote Help", share the entire screen, read the 10-digit number to support.
- [Fernwartung, Kundenanleitung (DE)](https://www.aloaha.com/de/remote-support.html)