Mutual recognition eIDAS: validity in Europe 2026

Introduction: why eIDAS mutual recognition is a strategic issue

In a single European market where cross-border transactions represent over €4,000 billion per year, the question of the legal validity of electronic signatures beyond national borders has become critical. Regulation eIDAS No 910/2014 — and its evolution eIDAS 2.0 via Regulation (EU) 2024/1183 — was precisely designed to address this problem. Its mutual recognition mechanism guarantees that a qualified electronic signature issued in one Member State is legally recognised in all 27 Member States. This guide details the foundations, limitations and practical implications of this principle for European companies in 2026.

---

The principle of mutual recognition: legal foundations and scope

The eIDAS regulation is based on a simple but revolutionary principle for European digital law: once a trust service is qualified in one Member State, it benefits from a presumption of validity throughout the European Union. This principle is set out in Article 25, paragraph 3 of the regulation: "A qualified electronic signature based on a qualified certificate issued in one Member State shall be recognised as a qualified electronic signature in all other Member States."

The three levels of signature and their recognition

EIDAS distinguishes three levels of electronic signature, of which only the qualified level benefits from full automatic mutual recognition:

• Simple electronic signature (SES): legal value recognised throughout Europe, but not presumed equivalent to a handwritten signature. Its admissibility depends on national law.
• Advanced electronic signature (AES): linked uniquely to the signatory, detectable if modified. Recognised throughout the EU as admissible evidence, but without automatic legal presumption of equivalence to a handwritten signature.
• Qualified electronic signature (QES): created with a qualified signature creation device (QSCD) and based on a qualified certificate issued by a qualified trust service provider (QTSP) listed on a national trust list (TSL). It benefits from full mutual recognition and is legally equivalent to a handwritten signature in all Member States.

To explore the distinctions between these levels in more detail, the comprehensive guide to electronic signatures provides a useful reference.

National trust lists (TSL): the technical mechanism for recognition

The mutual recognition system is based on Trusted Service Lists (TSL), public registers maintained by each Member State and supervised by the European Commission. The aggregated European list, published on the eTL (European Trusted List) portal, lists all qualified trust service providers in the EU.

As of June 2026, there are more than 280 qualified providers listed on these lists, covering 27 Member States. A document signed by a French QTSP is thus automatically recognised in Germany, Spain or Poland without any additional administrative procedure. This is the heart of the eIDAS mutual recognition mechanism.

---

eIDAS 2.0: developments in the regulation regarding cross-border recognition

Regulation (EU) 2024/1183, known as eIDAS 2.0, which entered into force on 20 May 2024, significantly strengthens the mutual recognition framework. Its major innovation is the introduction of the European Digital Identity Wallet (EUDI Wallet), whose implementing acts are progressively adopted in 2025-2026.

The EUDI Wallet and the new trust architecture

The EUDI Wallet will allow each citizen and resident of the EU to have a sovereign digital identity recognised in all Member States. For electronic signature, this implies:

• Facilitated access to qualified certificates via the wallet, without resorting to lengthy identification procedures specific to each provider.
• Portability of identity attributes: diplomas, professional numbers, sectoral attributes (doctors, lawyers, notaries) recognised cross-border.
• Remote qualified signature (QES remote), standardised by ETSI EN 119 431 and EN 119 432 standards, becomes the reference modality for itinerant professionals.

For a comprehensive overview of the changes introduced by eIDAS 2.0, please refer to our dedicated guide to Regulation eIDAS 2.0.

New qualified trust services introduced by eIDAS 2.0

EIDAS 2.0 expands the list of qualified trust services to seven new categories, including:

• Qualified electronic archiving services (Qualified Electronic Archiving Services)
• Qualified electronic ledger services (Qualified Electronic Ledgers — applicable to compliant public blockchains)
• Services for managing remote qualified signature creation devices

Each of these new services will benefit from the mutual recognition regime, thus extending the principle far beyond simple signature.

---

Practical limitations of mutual recognition: what companies need to know

Whilst the principle is clear on a legal level, its practical implementation contains important nuances that every legal officer or IT director must integrate into their signature policy.

Sectoral exceptions: national law prevails

EIDAS explicitly provides in Article 2, paragraph 3, that the regulation does not apply to deeds that expressly require notarial intervention or other forms of authentication reserved for national public officers. In practice, certain deeds remain subject to national law:

• In France: authentic deeds (real estate sales, gifts, certain articles of association) require the use of a notary and cannot be fully dematerialised via a simple QES.
• In Germany: the notarielle Beurkundung (notarial authentication) for the transfer of GmbH shares remains outside the scope of eIDAS.
• In Italy: certain family law or company incorporation deeds require a public deed (atto pubblico).

These exceptions must be carefully mapped when conducting cross-border transactions involving high-stakes deeds.

The issue of qualified time stamping and evidence preservation

Mutual recognition of the signature only applies to validity at the time of signature. Long-term preservation of evidential value requires the use of a qualified time stamp service (QTS) and, for archiving documents, a qualified electronic archiving service. Without these mechanisms, a qualified electronic signature may lose its legal value if the certificate expires or is revoked, even if it was valid at the time of signature.

ETSI standards EN 319 132-1 (XAdES) and EN 319 122-1 (CAdES) define long-term archival signature formats (LTA — Long Term Archival), which embed the evidence necessary for future verification, including in a cross-border context.

Technical interoperability: accepted signature formats

Legal mutual recognition does not automatically guarantee technical interoperability. Member States may have different technical preferences or requirements:

• XAdES (XML Advanced Electronic Signatures) — recommended for XML documents and web workflows
• PAdES (PDF Advanced Electronic Signatures) — de facto standard for PDF documents, widely adopted throughout the EU
• CAdES (CMS Advanced Electronic Signatures) — for binary documents or EDI exchanges
• ASiC (Associated Signature Containers) — containers grouping document and signature

The choice of format must be determined in advance, particularly when documents are to be processed by public authorities in third countries. To compare market solutions on these technical criteria, the comparison of electronic signature solutions provides detailed analysis.

---

Practical implementation in European companies

For companies operating in several European countries, implementing an electronic signature policy compliant with eIDAS and fully leveraging mutual recognition requires a structured approach.

Mapping cross-border document flows

The first step is to identify document flows according to:

1. The country of residence of the signatory — determines which QTSP is most appropriate (proximity, language, identification procedure)
2. The level of signature required — according to the legal nature of the deed in each country concerned
3. The business sector — some sectors (health, finance, defence) have additional national compliance requirements

This mapping is particularly critical for international employment contracts, where the applicable law may vary depending on the place of performance of the contract.

Integration into information systems

Modern electronic signature APIs make it possible to manage the complexity of mutual recognition in a transparent way for the end user. A connector compliant with eIDAS must expose:

• Dynamic selection of the signature level according to context
• Real-time verification of certificate status (OCSP/CRL) with the issuing QTSP
• Systematic qualified time stamping
• Generation of exportable verification reports (Validation Reports compliant with ETSI EN 319 102-1)

For companies wishing to migrate from an existing solution to a platform natively compliant with eIDAS 2.0, the guide migrating from DocuSign or YouSign to Certyneo outlines the key steps.

Governance and training of legal teams

The human dimension remains decisive. Lawyers, buyers and sales staff involved in cross-border transactions must be trained on the following points:

• Differentiate the level of signature required according to country and type of deed
• Verify the qualified status of a QTSP via the European trust list
• Document the choice of signature level in an internally binding policy
• Know available remedies in case of signature dispute in a third Member State

Legal framework applicable to eIDAS mutual recognition

The eIDAS regulation and its founding texts

The legal basis for mutual recognition of electronic signatures in Europe rests on several reference texts that must be mastered:

Regulation (EU) No 910/2014 of the European Parliament and of the Council (eIDAS): the founding text, it establishes the legal regime for qualified trust services and devotes Article 25 to the full mutual recognition of qualified electronic signatures. Its Article 46 specifies that electronic documents cannot be denied legal effect solely on the grounds of their electronic form.

Regulation (EU) 2024/1183 (eIDAS 2.0): amending the 2014 regulation, it introduces the EUDI Wallet, expands the list of qualified trust services and strengthens Member States' obligations to accept notified electronic identification means.

French Civil Code, Articles 1366 and 1367: Article 1366 recognises that "an electronic document has the same probative force as a document on paper media, provided that the person from whom it originates can be duly identified and it is established and preserved in conditions such as to guarantee its integrity." Article 1367 assimilates secure electronic signature to handwritten signature.

Obligations of providers and liability

QTSPs (Qualified Trust Service Providers) are subject to strict obligations under Article 24 of the eIDAS regulation:

• Rigorous procedures for identifying certificate requesters (face-to-face or equivalent supervised electronic method)
• Availability of certificate status verification services (OCSP) at all times
• Notification of security incidents to the competent national authority (in France: ANSSI) within 24 hours
• Retention of audit logs for at least 20 years after the end of service validity

The liability of a QTSP may be engaged if there is a breach of these obligations, in accordance with Article 13 of the regulation.

Relationship with the GDPR

Identification and identity verification procedures inherent in qualified certificate issuance involve the processing of personal data (biometric data, identity documents). The Regulation (EU) 2016/679 (GDPR) applies in full. QTSPs must appoint a DPO, conduct impact assessments (DPIA) for high-risk processing and comply with the principle of data minimisation.

Transfer of identification data to QTSPs established in countries outside the EU is subject to Chapter V requirements of the GDPR, which effectively limits outsourcing outside the EEA for qualified certificates.

Reference technical standards

The technical compliance of qualified electronic signatures is defined by ETSI standards:

• ETSI EN 319 411-1 and -2: requirements for certification authorities issuing qualified certificates
• ETSI EN 319 132-1: XAdES format for advanced and qualified signatures
• ETSI EN 319 122-1: CAdES format
• ETSI EN 319 162-1: ASiC format
• ETSI EN 319 102-1: signature validation procedures

Non-compliance with these standards may result in disqualification of a trust service and, consequently, loss of the benefit of mutual recognition.

Use cases for eIDAS mutual recognition

Scenario 1: a Franco-German industrial group and its cross-border supplier contracts

An industrial group of medium size (mid-cap) with its head office in France and a production facility in Germany manages approximately 350 supplier contracts per year, involving signatories in both countries. Before implementing an electronic signature solution compliant with eIDAS, the average time to sign a cross-border contract was 12 working days, due to postal correspondence and translation and authentication requirements.

By deploying a platform offering qualified electronic signatures via QTSPs listed on French and German trust lists, the group reduced this timeframe to less than 48 hours. The benefit of eIDAS mutual recognition made it possible to avoid any debate on the legal validity of documents on the German side. According to sectoral benchmarks published by specialised consultancies, this type of deployment generates a reduction in document processing costs in the region of 60 to 75 % and a 40 % reduction in contractual disputes related to contested signatures.

Scenario 2: a law firm operating in European business law

A business law firm of around twenty partners, specialising in cross-border mergers and acquisitions within the EU, regularly faces transactions involving signatories residing in three to five different countries (typically France, Luxembourg, the Netherlands, Belgium and Poland). Each transaction involves between 15 and 40 documents to be signed simultaneously by multiple parties.

The adoption of a qualified electronic signature solution mutually recognised under eIDAS made it possible to reduce closing timescales by an average of 5 to 10 working days. The firm was also able to eliminate systematic recourse to document legalisation or apostille for private deeds, sources of significant costs and delays. The enhanced traceability (audit logs, qualified time stamping) further strengthened the evidential security of files before courts in multiple Member States.

Law firms wishing to structure their digital practice will find immediate benefits to a natively eIDAS-compliant solution in this context.

Scenario 3: an international HR services platform managing multi-country employment contracts

An HR services company assisting client companies with recruitment across Europe manages several hundreds of employment contracts monthly for employees residing in different Member States. The diversity of situations (French law contracts for remote workers residing in Spain, Belgian law contracts for temporary seconded staff, etc.) creates high documentary complexity.

Thanks to eIDAS mutual recognition, the platform has standardised its signature process to advanced electronic signature for standard contracts and qualified signature for high-stakes deeds (contractual terminations, assignment of rights). European employees sign via a remote identification process compliant with eIDAS, without physical travel. The abandonment rate of the signature process fell from 35 % to less than 5 % following the introduction of an optimised mobile interface, and the onboarding time for a new employee was reduced from 8 days to less than 24 hours on average.

Conclusion

eIDAS mutual recognition is one of the most structuring achievements of European digital law. By guaranteeing that a qualified electronic signature issued in one Member State is fully valid in the other 26, the regulation removes the main legal obstacles to cross-border dematerialised transactions. eIDAS 2.0 amplifies this momentum by expanding the scope of qualified services and introducing the EUDI Wallet as a vector for sovereign digital identity.

For European companies, leveraging this framework requires a signature platform natively compliant with eIDAS requirements, capable of selecting the right level of signature according to context and relying on certified QTSPs in the countries concerned.

Certyneo was designed to address precisely these challenges. Discover our features, test the platform for free or request a personalised demo to evaluate how Certyneo can secure your cross-border document flows today.