eIDAS-compliant digital trust services: from qualified signatures to archiving

A consistent „signature to archive” process. How to ensure the authenticity, integrity and long-term verifiability of documents based on eIDAS.
eIDAS-compliant digital trust services: from QES to LTV archiving
5-minute read Published: November 12, 2025

At podpisano.pl, we help companies and institutions every day to „close” their processes fully digitally - without printing, scanning or nerves. Below we explain what they are digital trust services, what types they cover under EU and Polish law, and what we can realistically help you with.

What are digital trust services?

These are electronically delivered services that provide identity, integrity, confidentiality, authenticity and inviolability data in online transactions. 

The foundation is:

  • regulation eIDAS — Regulation (EU) No. 910/2014, updated in 2024 by Regulation (EU) 2024/1183 (aka eIDAS 2) - eIDAS 2 maintains the existing catalog of services (e.g., signatures, seals, time stamps, recorded delivery, certificates for websites) and expands it with new (including archiving, electronic records, management of remote QSCDs (signature tools) and electronic attestation of attributes); 
  • poland Law on trust services and electronic identification. In Poland, national legislation implements and complements eIDAS (i.e. OJ. 2024 item 1725), and there is a separate law in the area of electronic delivery (OJ. 2024 item 1045). 

 

Full list of trust services

„Classic” eIDAS services (2014)

  1. Electronic signature (including qualified QES) - proof that a specific person has made a statement of intent under the document. A QES has the force of a handwritten signature throughout the EU. 
  2. Electronic seal (qualified QESeal) - „organization signature”; secures the origin and integrity of data on the part of the entity (e.g., the company).
  3. Electronic time stamp (qualified) - Reliable proof of the moment of existence of the data/document. Key to long-term verification. 
  4. Registered electronic delivery service (ERDS) - The digital equivalent of a registered letter „with acknowledgment of receipt” (in Poland linked to the public e-Delivery service). 
  5. Certificates for website authentication (QWAC/QWeb) - assure the user that they are connecting to the correct, authenticated site.
  6. Qualified signature/seal validation services - Verification of the validity and status of signatures/seals in accordance with regulations. 
  7. Qualified maintenance/storage of validity - Maintaining the evidentiary value of signatures/seals over the long term (LTV). 

New/expanded services introduced by eIDAS 2 (2024):

  1. Management of remote qualified signature capture devices (QSCD) and seals - Secure use of a qualified key „in the cloud” with strong authentication. 
  2. Qualified electronic archiving - Receiving, storing, sharing and deleting data/documents with a guarantee of integrity, legibility and provenance throughout the storage period.
  3. Qualified electronic register (electronic ledger) - Maintaining an ordered, unalterable sequence of records (e.g., block chains) with guaranteed integrity and sequence. 
  4. Electronic attestation of attributes (EAA) - Qualified feature endorsements (e.g., service role, authority), which will also be able to be presented in the European Digital Identity Wallet (EUDI Wallet)..

Trusted lists and surveillance

  1. Lists of trusted suppliers (EUTL/TL) - official registers of qualified suppliers and services, published by EU countries under Article 22 of eIDAS. This is the main source „who is qualified and for what.”.

Where does the national law come in?

  • Law on trust services and electronic identification (i.e., Journal of Laws 2024, item 1725) - sets out, among other things, the rules of supervision, obligations of suppliers, proceedings in Poland.

 

  • Law on electronic delivery (i.e. OJ 2024, item 1045) - regulates the implementation of the public registered delivery service (e-Delivery), including the responsibilities of public entities and business. 

What digital trust services can we support you with?

Podpisano.pl as authorized Partner Asseco Certum offers:

1) Qualified Electronic Signature (QES) for individuals – SimplySign, Certum Mini

  • We will advise on the choice of carrier (mobile/remote vs. card/USB), 
  • we will confirm the identity of the person to whom the qualified signature is issued (the service is also available remotely for foreigners), 
  • We will launch the program and provide hands-on training (PAdES/XAdES/CAdES, LTV, countersignature/co-signature). 
  • we will provide qualified time stamp and good long-term practices.

2) Qualified Electronic Seal of the organization

  • Selection of seal type (e.g. for invoices, reports, serial letters), 
  • Implementation in systems (ERP/DMS/document circulation), 

3) e-Delivery (ERDS).

  • We explain your responsibilities and help you set up and configure your email account (BAE/ADE), 
  • We integrate with the workflow system, 
  • We train on procedures (powers of attorney, correspondence book, rules). 

4) LTV validation and archiving

Plus.

In podpisano.pl we are implementing best practices for digital trust services and teach our clients to apply the podpisano.pl best practice principles:

  • Always add a time stamp to sign/seal - this is your real „insurance” for years and the basis of LTV. 
  • Verify first, then add more signatures - You will avoid a cascade of errors at the end of the process.
  • Determine what the procedures require: „two signatures on a document” ≠ „the second person confirms the signature of the first” (these are different modes: co-signature vs. countersignature).
  • Check the supplier on the trusted list (EUTL) - is a simple risk control and a requirement for many tenders. 
  • Software updates of signature and trust letters is not a fad, but a condition for correct validation (algorithms, certificate chains, policies are changing).

Legal basis (most important)

  • Regulation (EU) No. 910/2014 (eIDAS) - A framework for identification and trust services in the EU. EUR-Lex 
  • Regulation (EU) 2024/1183 (eIDAS 2). - New European digital identity, EUDI portfolio, expanded catalog of trust services (including archiving, ledger, remote QSCD, EAA). EUR-Lex
  • Lists of trusted suppliers (Article 22 of eIDAS) - EU countries' obligation to publish the EUTL.List of trusted suppliers
  • Law on trust services and electronic identification - i.e. OJ. 2024 item 1725. 
  • Law on electronic delivery - i.e. OJ. 2024 item 1045.

     

Do you want to implement signatures, seals, e-Delivery or prepare your company for new systems such as KseF? Write to us: signatures, seals, time stamps, LTV validation/archiving - this is our daily bread.

Call us at

and we will put you in touch with one of our representatives available virtually nationwide.

Check also:

Do you need help?

Find what you're looking for