Updated on
eIDAS regulation is the founding text of electronic signature in Europe. It defines three levels of signature (simple, advanced, qualified), establishes the legal value of electronic documents and governs trust service providers. This guide explains everything you need to know to be compliant in 2026.
Before eIDAS, each EU member state had its own regulations on electronic signatures, creating legal fragmentation that hindered cross-border transactions. An electronic signature valid in France was not necessarily recognised in Germany or Spain.
The Regulation (EU) No 910/2014, known as eIDAS (Electronic IDentification, Authentication and trust Services), was adopted on 23 July 2014 and entered into force on 1 July 2016. As a regulation (not a directive), it applies directly and uniformly in all 27 member states, without requiring national transposition.
eIDAS pursues three main objectives: creating a single digital market in Europe through mutual recognition of electronic identities, guaranteeing legal certainty for cross-border electronic transactions, and establishing a framework of trust for digital services through qualified trust service providers (QTSP — Qualified Trust Service Provider).
eIDAS establishes a pyramid of three levels of electronic signature, each with its own technical requirements and probative value.
eIDAS requirements
Usage examples
Legal value
Basic contractual value, no legal presumption
eIDAS requirements
Usage examples
Legal value
Strong evidential value — recommended for important contracts
eIDAS requirements
Usage examples
Legal value
Legal presumption equivalent to manuscript signature (art. 25 eIDAS)
The eIDAS regulation has been revised by Regulation (EU) 2024/1183, published in the EU Official Journal on 30 April 2024 and entered into force on 20 May 2024. This revision modernises the initial framework to address contemporary digital challenges: digital identity for citizens, sovereign cloud, and resilience of trust service providers.
The flagship measure of eIDAS 2.0 is the European digital identity wallet (EUDIW). By the end of 2026, each member state must offer its citizens and residents an application to store and present certified identity credentials — the digital equivalent of an ID card, driving licence, diplomas. This development will have a direct impact on qualified signature processes.
eIDAS 2.0 introduces the European Digital Identity Wallet: each European citizen will be able to store certified identity credentials (identity card, driving licence, diplomas) in a mobile application interoperable across the entire EU.
Requirements applicable to qualified trust service providers (QTSP) are reinforced, particularly regarding cybersecurity, audits, and service continuity.
eIDAS 2.0 adds new qualified services: qualified electronic archiving, qualified attribute data management, and qualified electronic registry (certified blockchain).
Better mutual recognition of digital identities between Member States. Qualified signatures issued in any EU country are recognised everywhere.
eIDAS compliance is not just about choosing a signature level. It involves reflection on the entire process: risk identification, tool selection, proof retention and document governance.
Here is a practical checklist for businesses wishing to secure their electronic signature processes in compliance with eIDAS:
Certyneo implements the SES (Simple Electronic Signature) and AES (Advanced Electronic Signature) levels of eIDAS regulation. Advanced signature is based on two-factor authentication: a single-use link sent by email and an OTP code sent by SMS via our OTP SMS provider. This mechanism meets the four criteria of article 26 of eIDAS for advanced signature.
Each envelope generates a complete audit trail: timestamping of each action (sending, link opening, OTP validation, signature application, potential refusal), signatory's IP address, browser user-agent. This audit trail is embedded at the bottom of each page of the final PDF (audit footer) and retained for 10 years.
Data is hosted in Germany (EU) (IONOS infrastructure), within the European Union, in compliance with digital sovereignty requirements and GDPR. Visit our security and compliance page for all technical details.
eIDAS (Electronic Identification, Authentication and Trust Services) is the European regulation (EU) No 910/2014 which establishes a common legal framework for electronic signatures, electronic seals, timestamps, electronic registered delivery services, and website authentication services across the European Union. It entered into force on 1 July 2016 and applies directly in all 27 Member States.
eIDAS 2.0 (regulation (EU) 2024/1183, which came into force on 20 May 2024) modernises eIDAS 1.0 by introducing notably the European digital identity wallet (EUDIW — European Digital Identity Wallet), which will allow European citizens to store certified digital identity credentials. For businesses, eIDAS 2.0 strengthens the requirements of qualified trust service providers (QTSP) and improves cross-border interoperability.
Yes. Article 25 of eIDAS explicitly prohibits refusing legal effects to an electronic signature solely on the grounds that it is in electronic form. A simple signature (SES) therefore has legal value, but it does not benefit from the legal presumption reserved for qualified signatures (QES). In case of dispute, it is for the party relying on the signature to prove its authenticity.
The general rule is to calibrate the level to the legal and commercial risk of the document. For low-stakes standard documents (quotes, internal orders), simple signature is sufficient. For important commercial contracts, employment contracts, NDAs or mandates, advanced signature (AES) is recommended. Qualified signature (QES) is reserved for situations where the law explicitly requires it (certain administrative documents, large-scale public procurement) or when the risk of dispute is maximal.
Certyneo implements simple signature (SES) and advanced signature (AES) in accordance with eIDAS. Advanced signature is based on dual OTP email + SMS (our OTP SMS provider) which links the signer to their act. Each envelope generates an integrated time-stamped audit trail in the final PDF. Data is hosted in Germany (EU), in line with digital sovereignty requirements.
eIDAS applies to trust services provided in the EU. A company established outside the EU wishing its signatures to be recognised in the EU must use an eIDAS-compliant solution or a qualified trust service provider (QTSP) recognised in the trust list of a member state. For international B2B exchanges, mutual recognition agreements exist with certain third countries.
La signature électronique transfrontalière eIDAS soulève des questions juridiques et techniques majeures pour les entreprises opérant entre l'Europe et le Maghreb. Découvrez comment sécuriser vos échanges contractuels internationaux.
Un NDA signé électroniquement est-il vraiment valable en 2026 ? Découvrez les règles juridiques, les niveaux de signature requis et les meilleures pratiques pour sécuriser vos accords de confidentialité.
Le règlement eIDAS 2 remodèle en profondeur les règles de la signature électronique en Europe. Découvrez les changements clés, le calendrier d'entrée en vigueur et les actions à mener dès maintenant.
Le règlement eIDAS impose la reconnaissance mutuelle des signatures électroniques qualifiées entre tous les États membres de l'UE. Découvrez comment ce principe fonctionne concrètement en 2026.
L'horodatage qualifié eIDAS confère une date certaine et opposable à tout document signé électroniquement. Comprendre son fonctionnement est essentiel pour toute organisation souhaitant sécuriser ses preuves numériques.
Tous les prestataires de signature électronique qualifiés eIDAS ne se valent pas. Découvrez comment les identifier, les comparer et choisir la solution la plus sûre pour votre entreprise.
We use cookies to improve your experience on our site. Cookies strictly necessary for the service to function are always active. Learn more about our cookie policy