Signing contracts digitally is often much more effective and cost-efficient than the traditional paper version of signing. However, to benefit from the advantages of secure digital signing, the services of so-called trust service providers are required. In this guide, you will discover what trust service providers are and their different services.
What exactly trust services and their tasks are is precisely defined in the EU eIDAS Regulation, Article 3 (16). The trust service is an electronic service usually provided for a fee. Trust services aim to enable electronic transactions securely in the digital space. Trust service providers are, therefore, companies or organizations that specialize in offering certain electronic services, such as the creation of electronic signatures, seals, or time stamps.
According to Article 3 (17) of the eIDAS Regulation, to be considered a qualified trust service provider, trust service providers must comply with the relevant requirements of eIDAS.
Compliance with these requirements is verified every two years by an accredited conformity assessment body, and the result is communicated to the competent supervisory authority. A trust list per EU member state and a seal of approval validate the qualified trust service providers. The European Commission also provides a tool through the CEF Digital program with which anyone can search the national trust lists, the so-called EU Trusted List.
According to Article 3 (16) of the eIDAS Regulation, the tasks of trust services include the following services: Creation, verification, and validation of electronic signatures, seals, time stamps, and electronic certificates
electronic certificates affected by these services. In addition, trust services also include the preservation of electronic signatures, seals, and certificates.
Trust services are an essential component for the secure execution of transactions on the Internet. Trust services are necessary to be sure, for example, whether a document has been modified before it is sent or whether the person who sent it is who they claim to be.
For the European Union, the eIDAS Regulation is the legal basis for trust services. It lays down binding regulations on "electronic identification" and "electronic trust services" that all member states within the European Union must adhere to.
The national legal acts ensure the implementation and execution of the eIDAS Regulation in the individual member states. In Germany, for example, the eIDAS Implementation Act describes the necessary national regulations for eIDAS implementation, which was adopted by the German Federal Government in 2017. The Signature and Trust Services Act (VDG) from 2018 exists in Austria.
The implementing regulations of the European Commission concretize specific security and regulatory aspects of the eIDAS Regulation. They specify technical standards, requirements, norms, and formats. These include, for example:
The specific descriptions in the supplementary eIDAS implementing regulations increasingly refer to various ETSI, CEN, and ISO standards. ETSI stands for the non-profit standardization organization, European Telecommunications Standards Institute. The organization creates globally applicable standards for information and communication technology. Further details at: www.etsi.org
Swisscom Trust Services offers the following trust services by the EU Regulation eIDAS:
An electronic seal can be used as an official seal or as a company stamp.
Electronic signatures make signing documents digitally and legally securely possible.
Electronic time stamps prove a document was available in a corresponding form at a particular time.