Qualified Signature (QES) is the most powerful e-signature in Europe. It has the same legal force as a handwritten signature and works in all EU countries. Sound perfect?
There is only one „but”: the signature itself does not guarantee legal permanence Forever.
Why? Because its technical validity expires.
The certificate by which the signature is made expires (usually after 1, 2 or 3 years). CRL (Certificate Revocation List - that is, the list of revoked certificates) is also no longer updated after the certificate expires. After several years, it is impossible to verify that the signature was valid at the time of submission.
The result? In the event of an audit, a court case or an audit, a document signed several years ago can be challenged.
This is where it comes into play qualified time stamp. It's a kind of digital stamp that confirms that the document existed at a certain point in time and hasn't been altered since.
It's crucial to prove years later that the signature was valid at the time of submission - even if the certificate has expired.
Best practice
Offline archiving is the process of securing and storing electronic documents outside the online environment - That is, without a permanent Internet connection or the use of cloud services. It can apply to both ordinary files and documents signed electronically (e.g., with a qualified signature).
„Offline” doesn't just mean no Internet. In practice, it is:
In the context of qualified signatures, offline archiving is particularly important because:
You don't need a complex DMS (Document Management System - electronic document management system). All it takes is a few simple steps.
Both tools are compatible with eIDAS, but have a different approach to work.
Feature | Certum Mini | SimplySign |
Requires reader and card | Yes | Not |
Works offline | Yes | Not |
Adding a time stamp after the signature (as a new signature or countersignature) | Yes | Yes |
Can a document be signed without a tag | Yes | Yes |
Ideal for | Offices, archives | Mobile users |
If you want independence from the Internet and archiving on your own terms, the Certum Mini will be a better choice.
Well, the timestamp itself cannot be added to an already signed document - but as is usually the case there are others solutions, to update a document signed with a qualified signature without a timestamp.
How do I add a time stamp after the document has already been signed? (proCertum SmartSign)
Why does it work? Because the signature and timestamp are two separate operations. The signature can be offline, while the tag requires a connection to the server.
A qualified signature is the foundation of document credibility.
But its durability is up to you.
Signature + timestamp + local archiving = secure document for years.
