How is a QTSP different from a regular electronic signature provider?

Any software company can offer electronic signatures. A click-to-sign service or email confirmation technically constitutes a simple electronic signature under eIDAS Art. 3(10). A QTSP, by contrast, has been subject to conformity assessment by an accredited auditor and listed on an EU national Trusted List. This means QTSP-issued services carry specific legal presumptions under eIDAS: qualified signatures are presumed equivalent to handwritten signatures (Art. 25), qualified seals presumptively protect document integrity (Art. 35), and qualified timestamps presumptively prove the date and time of data (Art. 41). Non-QTSP providers cannot offer these legal presumptions regardless of their technology.

Does Switzerland have its own equivalent of a QTSP?

Yes. Under ZertES (SR 943.03), Switzerland has an accreditation system for Recognised Certification Services (Anerkannte Zertifizierungsdienste / Services de certification reconnus). The Swiss regulatory body (OFCOM/BAKOM) accredits these providers under a framework equivalent to the EU's QTSP regime. Swiss-issued qualified electronic timestamps from a recognised provider carry legal weight under Swiss law. Swiss Trust Layer uses a service provider recognised under both ZertES and eIDAS-equivalent standards, ensuring timestamps are valid in both Switzerland and EU member states.

Where can I find the official EU Trusted List of QTSPs?

The European Commission maintains the official EU Trusted Lists Browser at the European Commission's Trust Services Dashboard. Each EU member state publishes its own national Trusted List, and the Commission aggregates these into a single machine-readable list. You can search by country and service type (electronic signature, seal, timestamp) to find QTSPs for any specific need. For Switzerland, BAKOM (Federal Office of Communications) maintains the list of recognised certification services. Only providers on these lists can issue qualified trust services under eIDAS or ZertES.

What happens if I use a non-QTSP timestamp service for IP protection?

A timestamp from a non-QTSP service is a simple or advanced electronic timestamp. It may be technically accurate but does not carry the legal presumption of eIDAS Art. 41(2). This means that if you rely on it in a court proceeding, the other party can challenge its accuracy and you must prove the timestamp's reliability with additional evidence. Non-QTSP services also vary widely in how they store audit trails and whether they can produce evidence that would survive legal scrutiny. For IP protection, where your goal is to prove creation date in a future dispute, only a QTSP-issued qualified timestamp provides an unchallenged legal presumption.

What Is a QTSP and Why It Matters Under eIDAS 2026

Q: What is a QTSP under eIDAS?

A QTSP (Qualified Trust Service Provider) is an organisation that has been audited and approved by a national supervisory body in an EU member state to issue qualified trust services under the eIDAS Regulation. QTSPs are listed on national Trusted Lists, which are published under Article 22 of eIDAS. Qualified trust services include qualified electronic signatures, qualified electronic seals, and qualified electronic timestamps. Only a QTSP can issue a qualified timestamp that carries the legal presumption of Art. 41(2). That means accurate date and time, admissible in all EU courts without further proof. Swiss Trust Layer partners with a QTSP on the EU Trusted List to issue eIDAS-equivalent qualified electronic timestamps.

A Qualified Trust Service Provider (QTSP) is an entity supervised by an EU member state and listed on the national trusted list. Only QTSPs can issue eIDAS-qualified electronic signatures with legal presumption. Here is what to check.

In April 2025, a Zurich-based intellectual property lawyer received a call she had not expected. Her client, a mid-sized pharmaceutical firm, had submitted a licensing agreement to a German federal court. The counterparty challenged the digital signature: it was an advanced electronic signature from a SaaS platform, not a qualified signature from an EU Trust List provider. The judge asked the client's counsel to prove the signature's validity. They could not. The agreement was held inadmissible as a founding document.

This is the practical consequence of a distinction that most businesses learn too late. Not all digital signatures carry the same legal weight under EU law. A digital signature created by a consumer app or a SaaS signing tool may be cryptographically valid, but it carries no legal presumption before EU courts unless it was issued by a Qualified Trust Service Provider (QTSP) listed on an EU member state's national trusted list.

What Is a QTSP?

A Qualified Trust Service Provider (QTSP) is a trust service provider that meets the requirements set out in Article 21 and Article 24 of eIDAS Regulation 910/2014 and has been:

Audited by a conformity assessment body accredited under ISO 17065
Approved by the supervisory authority of an EU member state
Listed on that member state's national trusted list, which feeds into the EU Trust List published by the European Commission

The EU Trust List (the EUTL) is publicly accessible at eidas.ec.europa.eu/efb/search/tl. Any member of the public, or any party's legal counsel, can verify in seconds whether a trust service provider is listed, and for which trust services it is qualified.

QTSPs can be qualified to provide one or more of the following:

Qualified electronic signatures (QES)
Qualified electronic seals (QeSeal)
Qualified electronic timestamps (QTS)
Qualified website authentication certificates (QWAC)
Qualified electronic registered delivery services

For document signing and timestamping purposes, the relevant qualifications are QES (for signatures that carry the same legal effect as a handwritten signature under eIDAS Art. 25) and QTS (for timestamps that carry a legal presumption of accuracy under eIDAS Art. 41).

Why Non-QTSP Signatures Fall Short in Legal Proceedings

eIDAS creates a tiered system of electronic signatures:

Simple electronic signatures (SES): Any electronic data attached to or logically associated with other data. No presumption of identity or integrity. Email sign-offs qualify.
Advanced electronic signatures (AdES): Uniquely linked to and capable of identifying the signatory. Created using data under the signatory's sole control. Detectable if the signed data changes. No statutory legal presumption.
Qualified electronic signatures (QES): Advanced electronic signatures created by a qualified electronic signature creation device and based on a qualified certificate. These carry the same legal effect as a handwritten signature in all 27 EU member states under eIDAS Art. 25(2).

The critical difference between AdES and QES in litigation is burden of proof. An advanced signature can be challenged without any special evidential burden: the challenging party simply asserts the signature is unreliable or that the signer was not who they claimed. The signer must then prove the signature's validity.

A qualified signature (QES) from a QTSP reverses this. Under eIDAS Art. 25(2), a QES carries a legal presumption equivalent to a handwritten signature. The challenger must prove it is invalid. The signer does not need to prove it is valid.

The same asymmetry applies to qualified timestamps under Art. 41: the challenger must rebut the presumption that the timestamp is accurate and the data is intact. In complex commercial disputes, this evidentiary asymmetry is often dispositive.

What Would Have Happened With a QTSP Signature

If the Zurich pharmaceutical firm had used a QTSP-issued qualified electronic signature backed by Swisscom Trust Services, the eIDAS Art. 25(2) legal presumption would have applied from the moment of signing. The counterparty would have carried the full burden of rebutting it. No challenge to the signature's provider status could have succeeded, because the EU Trust List entry is a public legal fact. The licensing agreement would have been admitted as evidence, and the dispute would have proceeded on its merits rather than on a procedural point about the signature's provenance.

How Swisscom Qualifies Under Both ZertES and eIDAS

Swisscom Trust Services is one of a small number of providers globally that holds dual accreditation under both the Swiss ZertES framework and the EU eIDAS framework.

Under ZertES (SR 943.03): Swisscom is an accredited certification service provider (Zertifizierungsdiensteanbieter, ZDA) under Swiss federal law, regulated by BAKOM (Federal Office of Communications). This accreditation enables Swisscom to issue qualified electronic signatures and timestamps with legal presumption under Swiss law.

Under eIDAS: Swisscom is listed as a QTSP on the EU Trust List for qualified electronic signatures, qualified electronic seals, and qualified electronic timestamps. This listing covers Swisscom's services in all 27 EU member states simultaneously.

This dual qualification means that a document sealed through Swiss Trust Layer, which uses Swisscom Trust Services as its timestamping authority, carries legal presumption in Swiss proceedings under ZertES and in EU proceedings under eIDAS simultaneously. A single seal satisfies both frameworks. Many Swiss-based companies in financial services, pharma, medtech, and professional services operate across the Switzerland-EU corridor. For them, this dual coverage eliminates the need to use separate providers for Swiss and EU compliance contexts.

How to Verify a Provider Is a QTSP

Verification takes under two minutes:

Go to eidas.ec.europa.eu/efb/search/tl
Search by country or provider name
Check the trust service types listed (look for "QCertESig" for qualified signature certificates, "QTimestamp" for qualified timestamps)
Confirm the status is "granted" (not "withdrawn" or "under supervision")

For Swiss providers operating under ZertES, the equivalent check is the BAKOM-published list of accredited certification service providers at bakom.admin.ch. If a provider is not on the EU Trust List and not on the BAKOM list, it is not a QTSP. Its signatures and timestamps carry no statutory legal presumption under eIDAS or ZertES, regardless of any marketing claims.

DocuSign, Adobe Sign, and Non-QTSP Providers

Many widely used digital signature platforms, including DocuSign and Adobe Sign in their standard configurations, are not EU Trust List QTSPs for qualified electronic signatures in the eIDAS sense. They offer advanced electronic signatures, which are cryptographically valid but carry no Art. 25 legal presumption.

For low-stakes commercial agreements where no dispute is anticipated, this distinction may not matter. For agreements where legal enforceability is critical, such as financial contracts, IP assignments, regulatory submissions, and cross-border professional services agreements, the distinction between AdES and QES is significant. Swiss Trust Layer provides QTS (qualified electronic timestamps) through a QTSP-accredited service, giving sealed documents the Art. 41 legal presumption.

The Cost the Zurich Firm Paid for the Wrong Provider

The pharmaceutical client spent months of additional litigation and faced legal fees consistent with what the Swiss Arbitration Association estimates for Swiss IP disputes: CHF 150,000 to CHF 400,000 on average. All of that cost traced back to a single point: the signing provider was not on the EU Trust List.

A qualified electronic timestamp from Swiss Trust Layer costs CHF 5 per document. That ratio is the practical shape of the eIDAS legal architecture: a small investment in qualified trust infrastructure at the point of signing creates a legal presumption that is extraordinarily expensive to overcome later.

If your organisation uses electronic signatures and timestamps for legally significant documents, the first question to ask your provider is: are you listed on the EU Trust List as a QTSP? If the answer is no, your documents do not carry the statutory legal presumption that eIDAS and ZertES contemplate for qualified electronic trust services. Swiss Trust Layer uses Swisscom Trust Services, an EU Trust List QTSP, for all document sealing. Every seal carries the eIDAS Art. 41 qualified timestamp presumption and is publicly verifiable at swisstrustlayer.com/validate without login.

What is a QTSP? Why Your Digital Signature Provider Must Be EU-Listed