Estonia launches digital passports for AI agents: a revolution in access management
Estonia once again confirms its status as a global leader in digitalization. The Eesti.ai Council under Prime Minister Kristen Michal has approved an ambitious project to create an official digital identity for AI agents — AI-isikukood. This represents a fundamentally new approach: artificial intelligence receives a legally significant "passport" that allows it to perform limited actions on behalf of an individual, company, or government institution.
The idea is simple and elegant: instead of granting an AI assistant unlimited rights to all of one's digital operations, the user will be able to issue strictly regulated powers. The agent will be able to view data, prepare reports, process payments, or interact with information systems, but only within a set limit and with full accountability. As the Prime Minister emphasized, these are "limited, controlled, and auditable powers."
Why is this needed?
The main problem with modern AI agents is excessive access. For an assistant to complete a task, it often needs to be given overly broad rights, which creates enormous security risks. The Estonian AI-isikukood model solves this problem by creating a transparent system where it is always clear: who is acting, on whose behalf, with what rights, and who is responsible for potential losses. The technical architecture and launch timeline have not yet been disclosed, but the direction of movement is obvious.
Infrastructure and Ecosystem
The project relies on Estonia's already powerful digital infrastructure. Starting in 2026, each agency will be able to use its own personalized AI agent as part of a unified cooperative network called Bürokratt. In parallel, the Aruait project is being developed — a sovereign management layer for AI agents in the public sector, which will define the technical architecture and collaboration models.
This is a logical continuation of the country's strategy, which has already introduced electronic IDs for citizens and the e-Residency program for foreigners. Estonia is consistently building a digital state, and AI-isikukood is the next, extremely important step.
My expert assessment: Estonia's initiative could become a global standard for regulating AI agents. If the project is successfully implemented, we will see how the concept of "limited digital trust" transforms not only public administration but also the corporate sector. This is potentially a more significant step than any current debates on AI regulation — it creates a working, legally sound model for human-AI interaction.