The eIDAS is the European regulation for electronic signatures and other services like authentication. In connection with eIDAS, ETSI has built technical specifications, specifying all technical standards for a signature. As a result of this, there have been defined three levels of signatures:
QES: Qualified Electronic Signature
This is the highest standard for a digital signature. It meets specific legal requirements and is provided by a service certified as a Qualified Trust Service Provider (QTSP).
AES: Advanced Electronic Signature
This level of signature adheres to a high-security standard and is linked to a uniquely identified person. AES provides a higher level of assurance than a standard electronic signature and is commonly used for legal and business purposes.
SES: Standard Electronic Signature
This is the lowest level for a compliant digital signature. Although this type of signature is not linked to a uniquely identified person, it still complies with technical standards and eIDAS, making it legally enforceable in the EU.
The EU Trust List (EUTL), regulated by eIDAS, is a list of suppliers that adhere to the highest technical standards and regularly undergo audits for quality assurance, making them Qualified Trust Service Providers (QTSP). Such suppliers may be applicable for specific services like Electronic Signature and Time Stamp. If the service is Qualified, the services would be referred to as Qualified Electronic Signature (QES) or Qualified Time Stamp (QTS). A QTSP does not necessary only provide Qualified services.
A supplier of Qualified services would naturally have higher costs than a supplier without the Qualified certification. Though, they both adhere to the strict regulation of eIDAS and the ETSI technical standard. Both services qualify for being legally enforceable in all of the EU, but the biggest difference is that a supplier of a Qualified service is bound by law to supply proof material in any legal disputes.
Not all types of businesses have the need for this service. As long as a signature complies with the eIDAS regulation, it has legal validity in all of the EU. Though, be aware that the signature level (QES, AES, and SES) may be restricted by some legal systems and institutions. If you use an Advanced Electronic Signature (AES), you should be safe in most cases.
ECIT Sign delivers AES and SES by default. It’s up to you to decide what type of signature you want to use. The benefit of SES is that it does not require an eID and may be used all over the world. It still adheres to the eIDAS regulation.
ECIT Sign also delivers QES (Qualified Electronic Signatures). Please make contact so we can discuss your case and give you the best price and solution!
