Introduction
In 2018, Nuria Kutnaeva was asked by Prime Minister Sapar Isakov to leave her post overseeing the anticorruption division of Kyrgyzstan’s Security Council and to lead a new state enterprise. The goal of the new institution was to drive the government-wide adoption of Tunduk, an interoperable data exchange platform built on X-Road.
“Tunduk” referred to the circular opening at the apex of a traditional yurt – a well-known symbol of unity and home that was fitting for a system designed to unite disparate government databases under a single, secure framework. The government had acquired the system in 2016, yet after two years, few agencies had actually implemented it.
Kutnaeva was an appropriate choice to lead the Tunduk State Enterprise, as Tunduk was envisioned as an anticorruption instrument. In 2015, Kyrgyzstan ranked 123 out of 168 countries assessed in Transparency International’s Corruption Perceptions Index. Citizens and businesses seeking government services had to deliver paper applications and certificates to ministries and agencies. Processing was opaque, and officials often demanded bribes in order to fulfil requests.
With leaders in the government feeling rising public pressure to act, digitalisation emerged as a key way to bring about transparency and standardisation and limit the opportunities for rent-seeking. The president’s office had convened a small working group composed of government officials and technical experts from civil society and the private sector to recommend an interoperable data exchange solution.
Two leading options emerged. One was a system built by a foreign vendor. Aziz Soltobaev, a government advisor and technical expert who sat on the working group, recalled that it was interoperable and affordable, but it used cryptography standards that were out of step with most of the world, and, most importantly, the source code was proprietary. That raised alarms about strategic dependence and the potential existence of back doors that would leave data vulnerable.
The second solution was X-Road. “It was good technically and open source, and it really checked the box for digital resiliency,” said Soltobaev. “We could see all the source code and manage and control the data.” And despite being open source, the platform was secure. “I remember literally sitting down with security officials who were concerned about it being open source and going through the code and explaining why it was secure,” said Soltobaev.
Kyrgyzstan adopted the X-Road software and christened the platform Tunduk. The government had made a conscious and strategic choice to build its foundational government data platform on open-source software and open standards. This approach was seen as the way to ensure digital sovereignty, prevent vendor lock-in, and maintain control over the nation’s data and development path.
The concept of a unified digital government platform was a compelling one for Kyrgyzstan, but its promise remained largely theoretical until 2018. The real turning point came with the official establishment and launch of the Tunduk State Enterprise. Under the strategic direction and leadership of Kutnaeva, the enterprise began the essential work of transitioning this theoretical DPG into a functioning cornerstone of the nation’s DPI. This launch marked the start of the difficult yet critical process of adoption—moving from mere existence to widespread, practical use by government agencies and, eventually, citizens. Only then could Kyrgyzstan truly begin to experience and realise the tangible benefits—such as increased efficiency, reduced corruption, and improved service delivery— that this foundational digital backbone was designed to afford the country.
Implementation
Adopting the Foundation
Tunduk’s primary function was to serve as the foundational data exchange layer for all government databases and services. In addition, it was the gateway to the national identity system and civil registry, via the Unified Identification and Authentication System (ESI), a single-entry point for citizens and businesses to access state e-services portals. Authentication was performed securely using a citizen’s national ID card or a cloud-based electronic signature. This architecture eliminated the need for citizens to manage multiple usernames and passwords for different government services and to apply for and receive repeated civil status certificates (e.g., for birth, marriage, or death) without ever visiting a government office.
For this all to work, government agencies had to adopt the platform and connect their databases. The core challenge was not technical. As part of the transfer of the X-Road technology from Estonia, that country’s e-Governance Academy had conducted extensive training for at least 260 Kyrgyz civil servants, IT specialists, developers, and lawyers in the technical, legal, and managerial aspects of the platform. This international support, along with aid from other partners like the EU, UN, and Korea, had helped build in-house capacity.
Rather, public agencies resisted adopting the new platform. The establishment of a new Tunduk State Enterprise was a crucial and strategic step. Had an existing ministry been in charge of implementing Tunduk, then other ministries might have felt they could ignore it, Kutnaeva recalled. But the Tunduk State Enterprise was a new entity that reported directly to the Prime Minister’s Office, imbuing it with the high-level authority needed to enforce compliance across the entire government.
In order to fully leverage the “top-down” mandate provided by the highest levels of government, Kutnaeva’s team embarked on the critical task of formalising their vision. They drafted a special action plan that was endorsed by both the Prime Minister’s Office and the President’s Office. The plan officially directed that all public agencies and government bodies connect to the Tunduk system.
This was not merely a suggestion but an order, explicitly designed to dismantle the fragmented and inefficient digital landscape that had plagued the government for years. Kutnaeva recalled the previous state of affairs as a “zoo” of disconnected, proprietary systems. This “zoo” was characterised by different agencies operating on isolated, incompatible IT architectures, built using a confusing array of different programming languages and standards. This pervasive incompatibility made inter-agency data exchange slow, unreliable, and often impossible, creating significant bottlenecks in public service delivery and hindering unified governance. The Tunduk mandate was the necessary political and technical hammer to unify these disparate systems into a single, cohesive, and interoperable digital backbone.
At the same time, the team waged a “bottom-up” campaign to demonstrate the value of the platform and persuade the IT staff within agencies to start using it. Kutnaeva’s team was small – at the start, just around 10 “enthusiasts”, as she called them, who worked without pay for the first six months of their tenure while the enterprise was being established. To prove the concept, they secured a quick win, using Tunduk to connect the database of the state procurement portal with that of the tax service and obviating the need for a paper certificate.
Armed with that demonstration case, the team delivered hundreds of presentations and engaged in extensive outreach across all levels of government – from IT staff to ministers, deputy ministers, and other senior officials. The team encountered persistent resistance from officials who were not ready to share data: for many, the process was new and unclear, raising concerns and reluctance to embrace changes, recalled Kutnaeva. The most difficult agencies to persuade were not those with no technology, but those that already had a proprietary solution and were locked into existing vendor contracts.
The persistence of the Tunduk implementation team proved instrumental in overcoming initial resistance and bureaucratic hurdles. As a result of this concerted effort, the Tunduk platform saw a steadily growing adoption rate across the public sector. The successful rollout and impact of the Tunduk system did not go unnoticed on the international stage. In May 2019, just over a year after the establishment of the Tunduk State Enterprise, the project received an award from the Republic of Estonia’s e-Governance Academy, a globally respected authority in digital state-building. This accolade celebrated the country’s timely and effective implementation of the Tunduk platform, acknowledging its transformative potential for public service delivery and governance.
Expansion and Scaling
The 2020 COVID-19 pandemic served as an unprecedented stress test for Kyrgyzstan’s public services. The sudden imposition of national lockdowns and social distancing measures rendered traditional, in-person service delivery impossible. This crisis, however, also acted as a powerful accelerator for the operationalisation of the Tunduk platform. Almost overnight, Tunduk was repurposed from a tool of administrative efficiency into an essential lifeline for crisis management and social protection. The Tunduk State Enterprise rapidly deployed specific emergency services, including an “electronic permission for a vehicle to move around the city of Bishkek” during the state of emergency and a “system to support the activities of medical professionals”.
The platform’s most critical function during this period was as the backbone for digital social protection. Tunduk became the only viable mechanism for the Ministry of Labour and Social Development to manage the surge in assistance requests. For instance, an electronic application for citizens to apply for food assistance was launched directly on the Tunduk portal. This service was instrumental in the government’s effort to identify and support vulnerable populations with basic food staples.
The platform’s success was not in isolation; it demonstrated the value of an interoperable ecosystem. To identify families in need, Tunduk functioned as the secure data pipeline. A citizen application via the Tunduk portal would be routed to the Ministry of Labour, which in turn interoperated with the “Sanarip Aimak” (Digital Aimak) platform, a system used by local governments that provided up-to-date data needed to verify vulnerability and eligibility for aid. This multiplatform mechanism—Tunduk for access, Sanarip Aimak for verification—was a clear demonstration of a mature digital government architecture forged under crisis.
Leveraging the widespread adoption and validation forced by the pandemic, the government’s post2020 strategy shifted to scaling the citizen-facing components of Tunduk. The primary vehicle for this was the Tunduk mobile application, a one-stop portal designed to consolidate all government interactions into a single, authenticated interface. The app’s user base was built upon the foundation of the Unified Identification System (ESI), the single-entry point for all state services, which counted 1.5 million registered users. The primary “pull factor” for this registration was a free, cloud-based electronic signature, which was required to access services and grew to 2.45 million issued signatures by August 2025.
This authenticated user base enabled a massive expansion of the platform’s service catalog. While 60 services were available in the initial post-2020 phase, by August 2024, the Tunduk portal offered 165 distinct public services. Engagement data showed a shift from simple registration to active use: in the first six months of 2024 alone, the portal’s services were used more than 2 million times.
The app’s definitive feature, however, was its function as a legally valid digital document wallet. By digitalising the most essential, high-frequency-use credentials— like the national ID and driver’s license—and giving them full legal equivalency, the state created an immediate, high-value “pull factor” that compelled citizens to register with the ESI. With a captured and authenticated user base of 1.5 million, the government could then successfully “push” new, lower-frequency services (such as benefit applications or vaccination records) to an existing and engaged audience. By early 2025, this digital wallet was populated with at least 10 key digital documents, effectively replacing a citizen’s physical wallet.
At the same time, Tunduk evolved from a Government-to-Government (G2G) tool into a true Government-to-Business (G2B) and public-private digital public infrastructure. As early as January 2020, 16 of the country’s 25 commercial banks were already connected to the Tunduk system. Initially, this was for simple use cases like identity verification for know-your-customer (KYC) requirements.
However, this integration with financial services providers deepened significantly. One example was the “My O!” mobile app, a private-sector financial services and e-wallet application that integrated Tunduk’s open API to allow its users to access their official digital documents and a range of government services directly within the private-sector app. This and other commercial tie-ins demonstrated Tunduk’s role as a “platform of platforms,” in which the state provided the foundational infrastructure for private-sector innovation.
This public-private integration also expanded into the legal-technical sector. Notaries were granted access to the State Registration Service’s Unified Population Register (UPR) via the Tunduk platform to securely verify customer identities. As of late 2025, this arrangement was being formalised and expanded; the Ministry of Justice was tasked with developing a complete electronic notary system to be integrated with Tunduk for verifying the validity of digital powers of attorney. Furthermore, a new system for issuing remote “apostilles”—a form of international document certification—was being launched and would be integrated with the Tunduk platform for automatic data exchange.
These integrations were part of a deliberate, state-led industrial policy to create a domestic fintech market. Tunduk (as the DPI) provided the two essential foundational layers: (1) universal, state-backed digital identity (the ESI) and (2) a secure, universal data exchange layer (the Tunduk platform). Building on this foundation, the National Bank of the Kyrgyz Republic approved “Recommendations for Implementation of Unified API Standards” in September 2025. These standards explicitly included a “Payment Initiation API Standard” and an “Open API Standard”. Following this, the central bank and the World Bank held a workshop for payment system participants to develop fintech services. This sequence revealed a sophisticated strategy: the state built the DPI, and the central bank was now using it to mandate open banking standards, creating the technical and regulatory conditions for a private fintech ecosystem to flourish.
Results and Reflections
Metrics showed the government-wide adoption and use of Tunduk. In 2018, the system processed 363,000 data exchange transactions. In 2024, it processed 3.5 billion transactions, and 37 different state agencies provided services through the platform. The Tunduk mobile was downloaded 2.85 million times in 2024. As of mid-2025, the Tunduk State Enterprise reported that 185 institutions, both public and commercial, were using the platform.
Tunduk produced direct cost savings for both citizens and the state. The government estimated that by eliminating the need to physically apply for and collect documents, the platform saved citizens a total of 21 million hours and 1.7 billion soms (around $19 million) in 2024. The government’s own cost savings from the platform in 2024 were estimated at 1.2 billion soms ($13.7 million). None of those estimates included the money saved from eliminating petty corruption in the issuance of state documents.
There was qualitative evidence that the system strengthened the social contract between the public and the government. The existence of a secure and transparent interoperability platform made the persistence of data silos a visible and quantifiable governance failure, rather than an accepted technical limitation. The public began to expect greater efficiency and transparency from the government, as evidenced by reports of citizens questioning agencies that still issued paper certificates when Tunduk was available.
For policymakers, the primary value of using a DPG rather than a proprietary solution was sovereignty. In a turbulent geopolitical region, relying on a proprietary, foreign-controlled system was a strategic liability. By using an open-source digital public good, the government retained full control over its data and was not reliant on an external vendor. It built up its own in-house technical capacity, affording it the flexibility to make feature changes and develop the platform.
This emphasis on sovereignty did not mean isolation, however. The Kyrgyz government leveraged international partnerships to finance implementation, build local technical capacity, and de-risk the adoption of a new technology. “A big reason X-Road was appealing as a solution was that it was the tried and tested global solution with a whole community and network behind it,” recalled Soltobaev.
A key, and perhaps unplanned, benefit was the effect Tunduk had on the private sector. By providing open APIs for public services, Tunduk helped spur commercial innovation and market competition. Commercial banks, e-wallets, and cellular companies began competing to integrate state services—like paying taxes, checking social assistance payments, or buying insurance— directly into their own private-sector apps via Tunduk. This entrepreneurial activity demonstrated how a public platform could facilitate private sector growth.
Ultimately, the story of Tunduk in Kyrgyzstan demonstrated that DPI implementation was less about the technology itself and more about politics and institutional design. Though the technical experts advising the highest levels of government were enthusiastic about X-Road, it was the political imperative to maintain national sovereignty that was the decisive factor. And it took both strong and sustained political will emanating from the president’s and prime minister’s offices, as well as a dedicated implementation unit, to overcome cultural and bureaucratic resistance to adopting a system that would compel transparency and interoperability.
By choosing an open-source DPG, Kyrgyzstan did more than just solve an immediate problem; it charted a new course for its national development. The ambition to reduce corruption and avoid vendor lock-in has produced a foundational public utility that has also unlocked private-sector innovation. The Tunduk platform has become the backbone for both a more transparent state and a more dynamic digital economy, proving that DPGs are not merely a low-cost procurement option but a strategic investment in a nation’s sovereignty and development.
Authors: Gordon LaForge and Akash Kapur, with support from Jon Lloyd, Director of Advocacy and 50-in-5 Program Director, and Max Kintisch, Director of Research & Urgent Global Challenges, DPGA Secretariat
This case study was first published in Building Open Digital States: Country Case Studies on the Impact of DPGs for DPI.
