Eket ya main content
Certyneo
Regulation (EU) No 910/2014 · Updated 2026

eIDAS Regulation: understand everything about electronic signature in Europe

Updated on

eIDAS regulation is founding text ng electronic signature in Europe. It defines three signature levels (simple, advanced, qualified), establishes legal value ng electronic acts at regulates trust service providers. This guide explains everything you need to know to be compliant in 2026.

eIDAS Regulation — European flag and institutions

What is eIDAS and why was it created?

Before eIDAS, each EU Member State had own regulation on electronic signatures, creating legal fragmentation that hindered cross-border exchanges. Electronic signature valid in France was not necessarily recognized in Germany o Spain.

The regulation (EU) No 910/2014, known as eIDAS (Electronic IDentification, Authentication and trust Services), was adopted on July 23, 2014 and entered into force on July 1, 2016. As a regulation (not a directive), it applies directly and uniformly in all 27 member states, without requiring national transposition.

eIDAS pursues three main objectives: create a single digital market in Europe through mutual recognition of electronic identities, guarantee legal security of cross-border electronic transactions, and establish a trust framework for digital services through qualified trust service providers (QTSP — Qualified Trust Service Provider).

3 signature levels defined by eIDAS

eIDAS establishes pyramid ng three electronic signature levels, each with own technical requirements at probative value.

Level 1SESArticle 3(10) eIDAS

Simple Electronic Signature

Available on Certyneo

eIDAS Requirements

  • Data in electronic form linked to other data
  • Used for signing (no specific technical requirements)
  • Can be a simple click, a checked box, or a name entered

Usage Examples

  • Terms and conditions acceptance
  • Online form
  • Confirmation email

Legal Value

Basic contractual value, no legal presumption

Level 2AESArticle 26 eIDAS

Advanced Electronic Signature

Available on Certyneo

eIDAS Requirements

  • Uniquely linked to the signer
  • Allows identification of the signer
  • Ginawa gamit ang datos sa eksklusibong kontrol ng tagapirmante
  • Ang anumang pagbabago sa dokumento pagkatapos ay maaaring matukoy

Usage Examples

  • Mga kontratang pang-trabaho
  • NDAs
  • Mga komersyal na kontrata
  • Mga awtoridad

Legal Value

Malakas na probatibong halaga — inirerekomenda para sa mahalagang mga kontrata

Level 3QESArticle 25(2) + Annex I eIDAS

Qualified Electronic Signature

Available on Certyneo

eIDAS Requirements

  • Tumutugon sa lahat ng kinakailangan ng AES
  • Ginawa ng isang qualified signature creation device (QSCD)
  • Batay sa isang qualified certificate na inilabas ng isang QTSP (EU trust list)

Usage Examples

  • Mga digital na authentic acts
  • Mahigpit na pangangailangan sa pampublikong pagbili
  • Mga regulated acts

Legal Value

Pang-alaala sa batas na katulad ng kamay na kalagayan (art. 25 eIDAS)

eIDAS 2.0: Mga Pagbabago noong 2024

Ang eIDAS na panuntukan ay binago ng regulation (EU) 2024/1183, na inilathala sa EU Official Journal noong Abril 30, 2024 at pumasok sa lakas noong Mayo 20, 2024. Ang pagbabagong ito ay modernisahon ang orihinal na balangkas upang tugunan ang mga hamon ng kasalukuyang digital: digital identity ng mga mamamayan, sovereign cloud, resilience ng mga trusted service provider.

Flagship measure ng eIDAS 2.0 is European Digital Identity Wallet (EUDIW). By end ng 2026, each Member State must offer citizens at residents application allowing to store at present certified identity attestations — digital equivalent ng ID card, driving license, diplomas. This development will have direct impact on qualified signature processes.

Digital Identity Wallet (EUDIW)

eIDAS 2.0 ay nagpapakilala ng European Digital Identity Wallet: bawat European citizen ay makakapag-imbak ng kanyang certified identity attestations (ID card, driver's license, diploma) sa isang interoperable mobile application sa buong EU.

Pagpapalakas ng QTSP

Ang mga kinakailangan na naaangkop sa qualified trust service providers (QTSP) ay pinapalakas, lalo na pagdating sa cybersecurity, audits, at service continuity.

Mga Bagong Serbisyo sa Tiwala

eIDAS 2.0 ay nagdadagdag ng mga bagong qualified service: qualified electronic archival, qualified attribution data management, qualified electronic registry (certified blockchain).

Pinapalakas na Interoperability

Mas magandang mutual recognition ng digital identities sa pagitan ng mga miyembro ng Estado. Ang qualified signatures na inilabas sa anumang bansa ng EU ay kinikilala saanman.

Paano maging compliant sa eIDAS sa pagsasanay?

eIDAS compliance does not reduce to signature level choice. It implies reflection on entire process: risk identification, tool selection, evidence preservation at document governance.

Here is practical checklist for businesses wishing to secure their electronic signature processes in compliance with eIDAS:

Tukuyin ang angkop na signature level para sa bawat uri ng dokumento
Gumamit ng solusyon na ang provider ay nag-host ng data sa EU
Panatilihin ang timestamp audit trail sa bawat signed document
Siguraduhin na ang tagapirmante ay malinaw na natukoy sa napiling antas
Magkaroon ng dokumentadong patakaran sa pag-iingat (tagal, access, destruction)
Suriin na ang provider ay may DPA (Data Processing Agreement) GDPR
Para sa AES: ipatupad ang mekanismo ng OTP o malakas na pagpapatunay
Para sa QES: makipagtulungan sa QTSP na nasa national trust list

Ang Certyneo Approach sa eIDAS Compliance

Certyneo implements SES (Simple Electronic Signature) at AES (Advanced Electronic Signature) levels ng eIDAS regulation. Advanced signature is based on two-factor authentication: single-use link sent via email at OTP code sent via SMS through our SMS OTP provider. This mechanism meets four criteria ng article 26 ng eIDAS for advanced signature.

Bawat envelope ay lumilikha ng kompletong audit trail: timestamp ng bawat aksyon (pagpapadala, pagbubukas ng link, OTP validation, signature application, posibleng pagtanggi), IP address ng tagapirmante, browser user-agent. Ang audit trail na ito ay integrated sa ibaba ng bawat pahina ng final PDF (audit footer) at napanatili ng 10 taon.

Ang data ay naka-host sa Alemania (EU) (IONOS infrastructure), sa loob ng European Union, sumusunod sa mga pangangailangan ng digital sovereignty at sa GDPR. Bumisita sa aming security at compliance page para sa lahat ng teknikal na detalye.

Madalas na Katanungan tungkol sa eIDAS

Ano ang eIDAS regulation?

eIDAS (Electronic Identification, Authentication and Trust Services) ay ang European regulation (EU) No. 910/2014 na nagtatatag ng common legal framework para sa electronic signatures, electronic seals, timestamps, electronic registered delivery services at website authentication services sa European Union. Ito ay pumasok sa lakas noong Hulyo 1, 2016 at direktang naaangkop sa 27 miyembro ng Estado.

What is difference between eIDAS at eIDAS 2.0?

eIDAS 2.0 (regulation (EU) 2024/1183, entered into force May 20, 2024) modernizes eIDAS 1.0 by introducing notably European Digital Identity Wallet (EUDIW — European Digital Identity Wallet), which will allow European citizens to store certified digital identity attestations. For businesses, eIDAS 2.0 strengthens requirements ng qualified trust service providers (QTSP) at improves cross-border interoperability.

Does simple electronic signature have legal value under eIDAS?

Yes. Article 25 ng eIDAS explicitly prohibits refusing legal effects to electronic signature solely because it is in electronic form. Simple signature (SES) therefore has legal value, but it does not benefit from legal presumption reserved for qualified signatures (QES). In case ng dispute, it is to one invoking signature to prove its authenticity.

Paano malaman kung aling eIDAS level ang pipiliin para sa aking mga kontrata?

Ang pangkalahatang tuntunin ay i-calibrate ang antas sa legal at commercial na panganib ng dokumento. Para sa mga ordinaryong dokumento na may mababang halaga (presyo, panloob na order), ang simpleng lagda ay sapat. Para sa mahalagang commercial na kontrata, kontrata ng pagtratrabaho, NDA o mandato, ang advanced na lagda (AES) ay inirerekomenda. Ang qualified na lagda (QES) ay nakalaan para sa mga sitwasyon kung saan dinikit ito ng batas (ilang administrative na dokumento, malalaking public na merkado) o kapag ang panganib ng pagkokontesta ay nasa maximum.

Paano ang Certyneo ay sumusunod sa eIDAS?

Certyneo implements simple (SES) at advanced (AES) signature in compliance with eIDAS. Advanced signature is based on dual OTP email + SMS (our SMS OTP provider) that links signer to their act. Each envelope generates integrated timestamped audit trail in final PDF. Data is hosted in Germany (EU), in compliance with digital sovereignty requirements.

Naabot ba ng eIDAS ang mga kumpanya sa labas ng European Union?

eIDAS applies to trust services provided in EU. A company established outside EU wishing its signatures to be recognized in EU must use eIDAS-compliant solution o qualified trust provider (QTSP) recognized in trust list ng a Member State. For international B2B exchanges, mutual recognition agreements exist with certain third countries.

Isang eIDAS-compliant na solusyon, simula ngayon

Ang Certyneo ay gumagamit ng SES at AES lagda alinsunod sa eIDAS na regulasyon. Hosting sa Alemanya (EU), timestamped audit trail at GDPR kasama.