Qualified Signature (QES) is the most powerful e-signature in Europe. It has the same legal force as a handwritten signature and works in all EU countries. Sound perfect?
There is only one "but": the signature in itself does not guarantee legal permanence forever.
Why? Because its technical validity expires.
The certificate by which the signature is made expires (usually after 1, 2 or 3 years). The CRL (Certificate Revocation List - i.e. the list of revoked certificates) is also no longer updated when the certificate expires. After several years, it is impossible to verify that the signature was valid when it was submitted.
The result? In the event of an audit, a court case or an audit, a document signed several years ago can be challenged.
This is where a qualified timestamp comes into play. It's a type of digital stamp that confirms that a document existed at a specific point in time and hasn't been altered since.
It's crucial to prove years later that the signature was valid at the time of submission - even if the certificate has expired.
Best practice
Offline archiving is the process of securing and storing electronic documents outside the online environment - that is, without a permanent Internet connection or without using cloud services. It can apply to both ordinary files and documents signed electronically (e.g., with a qualified signature).
"Offline" doesn't just mean no Internet. In practice, it is:
In the context of qualified signatures, offline archiving is particularly important because:
You don't need a complex DMS (Document Management System - an electronic document management system). All you need are a few simple steps.
Both tools are compatible with eIDAS, but have a different approach to work.
Feature | Certum Mini | SimplySign |
Requires reader and card | Yes | Not |
Works offline | Yes | Not |
Adding a time stamp after the signature (as a new signature or countersignature) | Yes | Yes |
Can a document be signed without a tag | Yes | Yes |
Ideal for | Offices, archives | Mobile users |
If you want independence from the Internet and archiving on your own terms, Certum Mini would be a better choice.
Well, the timestamp itself cannot be added to an already signed document - but as is usually the case, there are other solutions to update a document signed with a qualified signature without a timestamp.
How to add a time stamp after the document has already been signed? (proCertum SmartSign)
Why does it work? Because the signature and timestamp are two separate operations. The signature can be offline, while the timestamp requires a connection to the server.
A qualified signature is the foundation of document credibility.
But its durability is up to you.
Signature + timestamp + local archiving = secure document for years.
