01 · The Project

What is the Germany App?

In February 2026, Digital Minister Karsten Wildberger (CDU) mentioned almost in passing at the Handelsblatt Govtech Summit that the federal government was planning a central app for citizen services. This apparently surprised even his own ministry, which had planned a later communications date. By April 2026, it was confirmed: SAP and T-Systems (a subsidiary of Deutsche Telekom) are developing the platform. Schwarz Digits — the IT arm of the Lidl and Kaufland parent company Schwarz Gruppe — is integrating the WireWireAn encrypted messenger originally launched by Skype co-founder Janus Friis. Considered GDPR-compliant and recommended by the BSI. Has been majority-owned by Schwarz Gruppe (Lidl/Kaufland) since 2024. messenger for secure communication between citizens and public authorities.

There is no official brand name yet — internally the project is called the "Deutschland-App" (Germany App). The first deployment phase is intended to cover the following services: child benefit applications, change of registered address, company formation, basic income support applications, and appointment bookings. A pilot has been running since April 2026 in Hamburg, Dresden, Nuremberg, and Wiesbaden, as well as at the Federal Employment Agency.[7] The target launch date according to current planning is January 2027.

ℹ️
The app is not a standalone project. It is part of the Deutschland-Stack — a binding infrastructure framework for federal and state governments agreed by the IT Planning Council on 18 March 2026. And it is intended to be fully integrated with the BundID (the government's citizen account) and the European EUDI WalletEUDI WalletEuropean Digital Identity Wallet — a digital wallet developed by the EU that allows citizens to prove their identity, present documents, and share certificates digitally. Every EU member state must offer a functioning version by the end of 2026., which must be production-ready by the end of 2026.[1]
02 · The Procurement

Why the way the contract was awarded raises questions

Normally, contracts above a certain value must be put out to Europe-wide tender. Instead, the federal government awarded the contract through existing framework agreements via the "Kaufhaus des Bundes" — an internal federal procurement portal. This is legally permissible, but it excludes all companies that are not already part of these framework agreements.

This concerns the SME sector. KOBIL founder Ismet Koyun already operates a fully functional citizen app solution called "OneApp4All", deployed in Istanbul and Worms. His criticism: the government is ignoring ready-made solutions and instead commissioning corporations that still have to build from scratch.

"This is not supporting SMEs — it is destroying them."— Ismet Koyun, KOBIL founder, quoted by inside-digital.de (April 2026) [2]

IT security researcher Lilith Wittmann — known for uncovering the CDU Connect data breach — sees a structural problem that goes deeper than the procurement question:

"There is no standard whatsoever for how applications in public administration can be represented so that they can be offered by different systems."— Lilith Wittmann, IT security researcher, via social media, quoted by borncity.com (April 2026) [3]

A central app is of limited use as long as the backend systems of the individual authorities are not standardised.

ℹ️
BMDS statement: The Federal Ministry for Digital Affairs and Administrative Modernisation told inside-digital.de that a formal procurement procedure had not yet been concluded at the time of reporting and that an open tender was planned.[2] The precise criteria and timeline for this tender had not been published as of April 2026.
03 · The Technology

What is under the bonnet — and what that means

SAP provides the core platform technology: the SAP Business Technology PlatformSAP BTPA proprietary cloud platform from SAP on which enterprise and government applications can be operated. It is not an open-source product — operation and further development lie with SAP. (SAP BTP). T-Systems handles the cloud infrastructure and data storage.[8] This means two private-sector corporations are operating the infrastructure through which citizens will communicate with the state — and on which sensitive data such as welfare applications and identity documents will be processed.

SAP BTP is not an open infrastructure. Whether the actual app code will be published as open sourceOpen SourceSoftware whose source code is publicly visible and auditable. This is particularly important for government software, because independent security researchers can identify vulnerabilities before they are exploited. has not been communicated by the ministry.

⚠️
The Wire messenger is recommended by the BSIBSIBundesamt für Sicherheit in der Informationstechnik — Germany's Federal Office for Information Security. and technically credible. But according to media reports, Wire has been majority-owned by Schwarz Gruppe — the parent company of Lidl and Kaufland — since 2024. This means a retail conglomerate with its own data interests is providing the communications infrastructure for the government citizen app. Whether and how Schwarz Gruppe has access to communications data is not publicly documented.
04 · International Comparison

What other countries do better — and worse

Germany is not the first country to have a government citizen app. The experiences of other countries are instructive.

Country Solution Operator Notable feature
France FranceConnect + France Identité Government agency 45 million users, over 1,000 connected services, no private platform operator
Estonia Eesti App + X-Road Government-commissioned, open source Developed in 4 months; decentralised; company registration in under 20 minutes
India Aadhaar Government 1.2 billion registered users; technical errors led to denial of welfare benefits and school exclusions

France demonstrates that a central citizen app with a government operator is possible — without a private-sector corporation as the platform operator.[4] Estonia chose the decentralised approach: the X-Road data exchange protocol is open source, and the app was ready for approximately 12 per cent of the adult population within four months at a cost of around 12 per cent of the adult population.[5]

India represents the cautionary tale: the Aadhaar system, with 1.2 billion registrations, is the world's largest biometric identity system. India's Supreme Court declared it fundamentally lawful in 2018, but prohibited its mandatory use by private entities. Nevertheless, NGOs documented cases in which technical failures or errors meant that people did not receive food subsidies or were excluded from school.[6] A system that ties government services to an app must function flawlessly — for everyone.

05 · The Déjà-vu

The Corona-Warn-App: the same constellation, a different outcome

SAP and T-Systems have built a government app together before: the Corona-Warn-App. The outcome is well known. According to Bundestag figures, the project cost the public purse more than 130 million euros — for an app that was discontinued in 2023 once the pandemic subsided and user numbers declined.[3][9]

€130m+
Corona-Warn-App
cost per Bundestag
~€150m
Germany App
development (estimate, unconfirmed)
~€50m
Per year operating
(estimate, unconfirmed)

This does not necessarily mean the Germany App will fail. But the questions remain the same: how much will it cost? Who will oversee expenditure? And what happens to the infrastructure if political interest wanes? The ministry has not yet published any official cost figures. Circulating estimates suggest development costs of around 150 million euros and annual operating costs of 50 million euros — but no primary source exists for these figures.

06 · Open Questions

What the ministry has not yet answered

BfDI: The Federal Commissioner for Data Protection and Freedom of Information had not publicly commented on the Germany App as of April 2026. For a project of this significance, a Data Protection Impact Assessment would be mandatory under GDPRGDPRGeneral Data Protection Regulation — the European data protection law in force since 2018. It prescribes, among other things, when data may be processed and what rights data subjects have. Article 35. Whether such an assessment exists and will be published is not known.
Open source: Will the app code be published? The AusweisApp — also a government app — is available on F-Droid and is open source. The Germany App runs on proprietary SAP infrastructure. Whether the code will be publicly accessible has not been communicated by the BMDS.
Alternative operating systems: Can users of GrapheneOS, CalyxOS, or other privacy-friendly Android systems use the app — or will they be excluded by technical requirements? This is a separate question that we examine in a dedicated article on the EUDI Wallet.

Minister Wildberger has emphasised that use will be voluntary.[7] That is a self-declaration — not a law. In practice, pressure to use digital services arises whenever they are more convenient than analogue alternatives. And whenever analogue alternatives are being phased out.

Sources
1
IT Planning Council: Resolution B-2026/03-IT — Deutschland-Stack (March 2026)
Binding infrastructure resolution for federal and state governments; basis for embedding the Germany App
it-planungsrat.de
2
inside-digital.de: Deutschlandapp — SAP and Telekom: KOBIL criticism (April 2026)
Procurement criticism from SME provider KOBIL; allegation that ready-made solutions are being ignored
inside-digital.de
3
Borns IT Blog: Contract for Germany App awarded to SAP and Telekom (April 2026)
Wittmann's criticism of missing backend standardisation; Corona-Warn-App context
borncity.com
4
FranceConnect — official French government website
45 million users, over 1,000 connected services; government-operated without a private platform provider
franceconnect.gouv.fr
5
it-daily.net: Digital public administration — what Germany can learn from Estonia
Eesti App, X-Road protocol, development timeline, user numbers
it-daily.net
6
Access Now: Supreme Court of India rules to restrict Aadhaar (2018)
Supreme Court ruling; documentation of exclusions caused by technical failures
accessnow.org
7
Heise Online: SAP and Telekom develop central citizen app for Germany (April 2026)
Technical details, Wildberger statements, pilot operation
heise.de
8
Deutschland-Stack overview — deutschland-stack.gov.de (official)
Technical architecture, timeline, layer model
deutschland-stack.gov.de
9
Bundestag: More than 130 million euros spent on the Corona-Warn-App
Official statement on total costs of the Corona-Warn-App (hib press release)
bundestag.de