01What is the Germany App?
In February 2026, Digital Minister Karsten Wildberger (CDU) mentioned almost in passing at the Handelsblatt Govtech Summit that the federal government was planning a central app for citizen services. This apparently surprised even his own ministry, which had planned a later communications date. By April 2026, it was confirmed: SAP and T-Systems (a subsidiary of Deutsche Telekom) are developing the platform. Schwarz Digits — the IT arm of the Lidl and Kaufland parent company Schwarz Gruppe — is integrating the WireWireAn encrypted messenger originally launched by Skype co-founder Janus Friis. Considered GDPR-compliant and recommended by the BSI. Has been majority-owned by Schwarz Gruppe (Lidl/Kaufland) since 2024. messenger for secure communication between citizens and public authorities.
There is no official brand name yet — internally the project is called the "Deutschland-App" (Germany App). The first deployment phase is intended to cover the following services: child benefit applications, change of registered address, company formation, basic income support applications, and appointment bookings. A pilot has been running since April 2026 in Hamburg, Dresden, Nuremberg, and Wiesbaden, as well as at the Federal Employment Agency.[7] The target launch date according to current planning is January 2027.
The app is part of the Deutschland-Stack, a binding infrastructure framework for federal and state governments agreed by the IT Planning Council on 18 March 2026. And it is intended to be fully integrated with the BundID (the government's citizen account) and the European EUDI WalletEUDI WalletEuropean Digital Identity Wallet — a digital wallet developed by the EU that allows citizens to prove their identity, present documents, and share certificates digitally. Every EU member state must offer a functioning version by the end of 2026., which must be production-ready by the end of 2026.[1]
02Why the way the contract was awarded raises questions
Normally, contracts above a certain value must be put out to Europe-wide tender. Instead, the federal government awarded the contract through existing framework agreements via the "Kaufhaus des Bundes" — an internal federal procurement portal. This is legally permissible, but it excludes all companies that are not already part of these framework agreements.
This concerns the SME sector. KOBIL founder Ismet Koyun already operates a fully functional citizen app solution called "OneApp4All", deployed in Istanbul and Worms. His criticism: the government is ignoring ready-made solutions and instead commissioning corporations that still have to build from scratch.
"This is not supporting SMEs — it is destroying them."— Ismet Koyun, KOBIL founder, quoted by inside-digital.de (April 2026) [2]
IT security researcher Lilith Wittmann — known for uncovering the CDU Connect data breach — sees a structural problem that goes deeper than the procurement question:
"There is no standard whatsoever for how applications in public administration can be represented so that they can be offered by different systems."— Lilith Wittmann, IT security researcher, via social media, quoted by borncity.com (April 2026) [3]
A central app is of limited use as long as the backend systems of the individual authorities are not standardised.
BMDS statement
The Federal Ministry for Digital Affairs and Administrative Modernisation told inside-digital.de that a formal procurement procedure had not yet been concluded at the time of reporting and that an open tender was planned.[2] The precise criteria and timeline for this tender had not been published as of April 2026.
03What is under the bonnet — and what that means
SAP provides the core platform technology: the SAP Business Technology PlatformSAP BTPA proprietary cloud platform from SAP on which enterprise and government applications can be operated. It is not an open-source product — operation and further development lie with SAP. (SAP BTP). T-Systems handles the cloud infrastructure and data storage.[8] This means two private-sector corporations are operating the infrastructure through which citizens will communicate with the state — and on which sensitive data such as welfare applications and identity documents will be processed.
SAP BTP is not an open infrastructure. Whether the actual app code will be published as open sourceOpen SourceSoftware whose source code is publicly visible and auditable. This is particularly important for government software, because independent security researchers can identify vulnerabilities before they are exploited. has not been communicated by the ministry.
The Wire messenger is recommended by the BSIBSIBundesamt für Sicherheit in der Informationstechnik — Germany's Federal Office for Information Security. and technically credible. But according to media reports, Wire has been majority-owned by Schwarz Gruppe — the parent company of Lidl and Kaufland — since 2024. This means a retail conglomerate with its own data interests is providing the communications infrastructure for the government citizen app. Whether and how Schwarz Gruppe has access to communications data is not publicly documented.
04What other countries do better — and worse
Germany is not the first country to have a government citizen app. The experiences of other countries are instructive.
| Country | Solution | Operator | Notable feature |
|---|---|---|---|
| France | FranceConnect + France Identité | Government agency | 45 million users, over 1,000 connected services, no private platform operator |
| Estonia | Eesti App + X-Road | Government-commissioned, open source | Developed in 4 months; decentralised; company registration in under 20 minutes |
| India | Aadhaar | Government | 1.2 billion registered users; technical errors led to denial of welfare benefits and school exclusions |
France demonstrates that a central citizen app with a government operator is possible, without a private-sector corporation as the platform operator.[4] Estonia chose the decentralised approach: the X-Road data exchange protocol is open source, and the app was ready for approximately 12 per cent of the adult population within four months.[5]
India represents the cautionary tale: the Aadhaar system, with 1.2 billion registrations, is the world's largest biometric identity system. India's Supreme Court declared it fundamentally lawful in 2018, but prohibited its mandatory use by private entities. Nevertheless, NGOs documented cases in which technical failures or errors meant that people did not receive food subsidies or were excluded from school.[6]
05 · The Déjà-vu05The Corona-Warn-App: the same constellation, a different outcome
SAP and T-Systems have built a government app together before: the Corona-Warn-App. The outcome is well known. According to Bundestag figures, the project cost the public purse more than 130 million euros, for an app that was discontinued in 2023 once the pandemic subsided and user numbers declined.[3][9]
This does not necessarily mean the Germany App will fail. But the questions remain the same: how much will it cost? Who will oversee expenditure? And what happens to the infrastructure if political interest wanes? The ministry has not yet published any official cost figures. Circulating estimates suggest development costs of around 150 million euros and annual operating costs of 50 million euros, but no primary source exists for these figures.
06 · Open Questions06What the ministry has not yet answered
BfDI
The Federal Commissioner for Data Protection and Freedom of Information had not publicly commented on the Germany App as of April 2026. For a project of this significance, a Data Protection Impact Assessment would be mandatory under GDPRGDPRGeneral Data Protection Regulation — the European data protection law in force since 2018. It prescribes, among other things, when data may be processed and what rights data subjects have. Article 35. Whether such an assessment exists and will be published is not known.
Open source
Will the app code be published? The AusweisApp — also a government app — is available on F-Droid and is open source. The Germany App runs on proprietary SAP infrastructure. Whether the code will be publicly accessible has not been communicated by the BMDS.
Alternative operating systems
Can users of GrapheneOS, CalyxOS, or other privacy-friendly Android systems use the app — or will they be excluded by technical requirements? This is a separate question that we examine in a dedicated article on the EUDI Wallet.
Minister Wildberger has emphasised that use will be voluntary.[7] Voluntary use is not laid down in law. In practice, pressure to use digital services arises whenever they are more convenient than analogue alternatives. And whenever analogue alternatives are being phased out.