Trust Services

What Is a Qualified Trust Service Provider (QTSP)?

Executive summary — The highest-assurance digital trust services, such as qualified electronic signatures, depend on specially accredited providers. These are qualified trust service providers, or QTSPs. This explainer covers what a QTSP is, what makes a provider qualified, which services can be qualified and, most practically, how to check that a provider and its specific service really are qualified before you rely on them. For how QTSPs differ from ordinary trust service providers, see eMudhra's guide to QTSPs vs TSPs.

What a QTSP is

A qualified trust service provider (QTSP) is an organisation that provides trust services meeting the strict requirements of the EU eIDAS Regulation and has been granted qualified status after formal assessment, and remains under ongoing supervision.

Trust services include electronic signatures, electronic seals, timestamps and certificates for website authentication. A QTSP is a provider whose qualified versions of these services carry the highest legal recognition across the EU. eMudhra's earlier explainer on why QTSP status matters for cross-border business covers the wider context.

What makes a provider "qualified"

Qualified status is never self-declared. It follows a defined process:

  • Conformity assessment: an accredited conformity assessment body audits the provider against eIDAS requirements and the relevant ETSI standards, and repeats the audit at least every 24 months.
  • Supervision: a national supervisory body reviews the report, grants qualified status and oversees the provider on an ongoing basis.
  • Trusted list: the provider and each qualified service are published on the member state's trusted list, so anyone can verify them.
  • Liability and continuity: qualified providers must carry liability cover and keep termination plans, so evidence survives even if the provider ceases trading.

Which services can be qualified

Qualified service What it gives you
Qualified certificates for electronic signatures The basis of a qualified electronic signature (QES), equivalent to a handwritten signature
Qualified certificates for electronic seals Organisation-level seals presumed to guarantee origin and integrity
Qualified electronic timestamps A presumption of the accuracy of the date and time and of data integrity
Qualified website authentication certificates (QWACs) Strongly verified identity of the organisation behind a website
Qualified validation and preservation services Trusted checks that a signature is valid, and long-term preservation of that proof
Qualified electronic registered delivery (QERDS) Evidence of sending and receipt, comparable to registered post

eIDAS 2.0 adds further qualified services, including electronic attestations of attributes, electronic archiving and electronic ledgers, alongside the EU Digital Identity Wallet. The full set is mapped in eIDAS trust services explained.

Need high-assurance signing backed by trusted services? eMudhra emSigner supports certificate-based signatures, seals and timestamps. Talk to eMudhra about qualified digital trust.

How to check a QTSP before you rely on it

"Qualified" applies to a specific service, not to everything a provider sells. Before relying on a provider for legally significant transactions:

  1. Look the provider up on the EU trusted lists through the European Commission's trust list browser, or on the relevant national trusted list.
  2. Check the exact service you plan to use, such as qualified certificates for signatures or qualified timestamps, and confirm it is listed as qualified.
  3. Confirm the status is current and was granted, not withdrawn, for the period the transaction falls in.
  4. Check the signing device, because a QES also needs a qualified signature creation device, whether a smart card or a certified remote signing service.
  5. Keep the evidence with the signed record, including timestamps and validation data, so it can still be verified years later. eMudhra's guide to keeping signed records verifiable explains how.

QTSPs for organisations outside the EU

Qualified status is an EU construct, and QTSPs are supervised in an EU member state. Organisations elsewhere still use them whenever they sign with EU counterparties, or when a contract or regulator requires EU-recognised signatures. In practice, global businesses combine local signature schemes for domestic transactions with QTSP-backed signing for EU-facing ones, an approach described in emSigner for cross-border signing.

How eMudhra delivers trusted signing services

eMudhra is a globally recognised digital trust provider operating to international standards such as WebTrust and ETSI. Through emSigner and its trust services, organisations can apply high-assurance, certificate-based signatures, seals and timestamps.

This lets organisations meet demanding legal and regulatory expectations for signing across multiple jurisdictions, with signatures that remain verifiable and defensible over time.

Frequently Asked Questions

What does QTSP stand for, and what does it do?

QTSP stands for qualified trust service provider: a provider that has passed an eIDAS conformity assessment, been granted qualified status by a national supervisory body and been published on an EU trusted list for one or more qualified services.

How can I verify that a provider is a QTSP?

Search the EU trusted lists through the European Commission's trust list browser, or the national trusted list, and confirm that the specific service you will use is listed with a current qualified status.

Is every service from a QTSP qualified?

No. A QTSP may offer both qualified and non-qualified services. Only the services shown as qualified on the trusted list carry the legal effects of qualified status.

Why do qualified electronic signatures need a QTSP?

A QES must be based on a qualified certificate, and only a QTSP can issue one. Combined with a qualified signature creation device, this gives the signature the same legal effect as a handwritten one across the EU.

Sign with recognised, high-assurance trust

eMudhra delivers certificate-based signing, seals and timestamps to international standards, keeping high-value agreements defensible. Explore emSigner or talk to an eMudhra expert.

eMudhra Limited
About the Author

eMudhra Limited

eMudhra Editorial represents the collective voice of eMudhra, providing expert insights on the latest trends in digital security, cryptographic identities, and digital transformation. Our team of industry specialists curates and delivers thought-provoking content aimed at helping businesses navigate the evolving landscape of cybersecurity and trust services with confidence.

Ready to Try?

Talk to our team about how eMudhra can help secure your digital workflows with PKI, eSignatures and identity solutions.

Connect with sales