{"id":7650,"date":"2025-10-03T14:49:30","date_gmt":"2025-10-03T12:49:30","guid":{"rendered":"https:\/\/podpisano-new.local\/?p=7650"},"modified":"2026-08-18T21:42:24","modified_gmt":"2026-08-18T19:42:24","slug":"listy-zaufanych-dostawcow-w-polsce-europie-i-na-swiecie-fundament-bezpieczenstwa-podpisow-elektronicznych","status":"publish","type":"post","link":"https:\/\/podpisano.pl\/en\/listy-zaufanych-dostawcow-w-polsce-europie-i-na-swiecie-fundament-bezpieczenstwa-podpisow-elektronicznych\/","title":{"rendered":"Lists of trusted providers in Poland, Europe and the world - the foundation of electronic signature security"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Are you going to buy a qualified signature? Check if its issuer is on the list of trusted providers in digital trust services<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Qualified signature is not only technology, but above all <\/span>trust<\/b>. Certificates and electronic signatures are the foundation of trust in digitally circulated documents. They allow us to know who signed the file and that the content has not been altered.\u00a0<\/span><\/p>

The question remains: how do we know that the signature provider itself is reliable? The answer: <\/span>Trusted Lists of suppliers (Trusted Lists)<\/b>. And to make sure everything works without grinding -. <\/span>lists and software must be up to date<\/b>.<\/span><\/p>

Let's take a look at what it looks like in Europe versus outside of Europe.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

EU Trusted List - the European standard\n\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

What are Trusted lists of suppliers (Trusted List)? It's <\/span>official records<\/b> entities that can issue qualified signatures, seals and time stamps within the EU.\u00a0<\/span><\/p>

In the European Union, all countries maintain their own registries of qualified trust service providers (QTSPs). These are then merged into a single <\/span>EU Trusted List<\/b><\/a> (EUTL)<\/b> managed by the European Commission. As a result, a document signed in Poland with a qualified signature (e.g. Certum SimplySign or Certum Mini) is automatically recognized in all EU countries. It is <\/span>eIDAS <\/b><\/a>and EUTL<\/b> ensure interoperability and legal certainty across the EU.<\/span><\/p>

In Poland, the list is supervised by <\/span>Minister of Digitization<\/b>, and the data is additionally published by <\/span>National Certification Center<\/a> (NCCert)<\/b>. Data from the Polish register goes to the <\/span>EU Trusted List<\/b> At the EU level.<\/span><\/p>

\u00a0<\/p>

The result? The signed document can be freely used throughout Europe, without additional procedures.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Adobe and AATL - a practical tool, not a source of law\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

In addition to the official lists, there are also <\/span>lists of trusted recipients<\/b>, which work in specific applications. The most well-known example is <\/span>AATL (Adobe Approved Trust List).<\/b>.<\/span><\/p>

User value \u2192 Acrobat Reader itself recognizes the validity of a signature issued by an entity with AATL and\/or EUTL \u2192 qualified signatures will validate \u201egreen\u201d. Verifying signatures directly in Acrobat Reader is practical, but it does not legally validate a qualified signature. Keep in mind that Adobe Inc. which develops Adobe software, is only a software developer and not a government agency. AATL list<\/a> does not confer legal validity, but facilitates automatic validation. You will verify qualified signatures, seals and timestamps correctly with qualified digital trust service providers in: proCertum SmartSign (desktop) and WebNotarius service (online).<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

EU Trusted List vs Adobe's AATL - what are the differences?\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Feature<\/i><\/b><\/p><\/td>

EU Trusted List (EUTL)<\/i><\/b><\/p><\/td>

AATL Adobe (Adobe Approved Trust List).<\/i><\/b><\/p><\/td><\/tr>

Who is leading the way?<\/i><\/b><\/p><\/td>

European Commission + national authorities (e.g., Minister of Digitization in Poland)<\/span><\/i><\/p><\/td>

Adobe company (commercial software developer)<\/span><\/i><\/p><\/td><\/tr>

Legal basis<\/i><\/b><\/p><\/td>

Regulation <\/span><\/i>eIDAS<\/i><\/b> (EU)<\/span><\/i><\/p><\/td>

No legal force - Adobe's internal program<\/span><\/i><\/p><\/td><\/tr>

Scope<\/i><\/b><\/p><\/td>

All EU countries (27 countries)<\/span><\/i><\/p><\/td>

Global list of certificate providers accepted by Adobe<\/span><\/i><\/p><\/td><\/tr>

The role of<\/i><\/b><\/p><\/td>

It decides on <\/span><\/i>legal status<\/i><\/b> qualified trust services (QES, seal, time stamp)<\/span><\/i><\/p><\/td>

Facilitates <\/span><\/i>automatic verification<\/i><\/b> signatures in Acrobat Reader and other Adobe applications<\/span><\/i><\/p><\/td><\/tr>

Consequences of not being listed<\/i><\/b><\/p><\/td>

Signature does not have the power of a qualified electronic signature in the EU<\/span><\/i><\/p><\/td>

The signature may not be automatically recognized in Adobe, but it is still valid and can be verified with other tools<\/span><\/i><\/p><\/td><\/tr>

Example<\/i><\/b><\/p><\/td>

Certum entered in EUTL \u2192 Certum signature recognized throughout EU<\/span><\/i><\/p><\/td>

Certum entered in AATL \u2192 Certum signatures automatically \u201ein the green\u201d in Acrobat Reader<\/span><\/i><\/p><\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Why is it important to keep lists and software updated?\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Imagine you sign an important contract and the program marks your signature as \u201einvalid.\u201d It doesn't have to be a signature error at all - often an outdated list or an outdated application is to blame.\u00a0<\/span><\/p>

Updates are necessary to:<\/span><\/p>