Swiss companies face ZertES SR 943.03 obligations in procurement, banking, and courts. Learn what qualifies, who must comply, and how to seal documents.
In early 2024, a Zurich Treuhand firm submitted a bid for a public infrastructure project above the CHF 230,000 federal procurement threshold. The winning tender relied on a series of signed declarations, all produced as standard PDFs without qualified seals. When a competitor challenged the integrity of the records six months later, the cantonal procurement office requested cryptographic proof that the declarations had not been altered after submission. The firm had none. The challenge triggered a re-evaluation process that cost the firm the contract and CHF 180,000 in administrative and legal fees. Under ZertES SR 943.03, a qualified seal from a BAKOM-accredited provider would have closed that door immediately.
That outcome is exactly what ZertES compliance prevents. For Swiss companies in procurement, financial services, healthcare, and litigation-adjacent work, the framework is no longer a legal formality. It is the baseline for legally defensible records.
Switzerland's Federal Act on Electronic Signatures, known as ZertES (SR 943.03), governs the use of qualified electronic signatures and seals in Swiss law. It is the legal framework that grants digital signatures and qualified timestamps the same standing as handwritten signatures under Swiss civil and commercial law.
In 2026, ZertES compliance is no longer optional for many Swiss companies. Public procurement thresholds, FINMA banking regulations, court filing requirements, and healthcare data obligations are converging to demand qualified digital seals on contracts, audit trails, and official records. Companies still relying on simple PDFs or unqualified e-signatures face growing legal exposure, especially when documents are challenged in court.
The Federal Office of Communications (BAKOM) accredits the Qualified Trust Service Providers (QTSPs) that issue ZertES-compliant seals. Only seals from accredited providers, such as Swisscom Trust Services, carry full legal weight under Swiss law.
ZertES applies broadly across Swiss commerce, but certain sectors face direct statutory obligations:
Public procurement: Under Swiss public procurement law, contracts above the CHF 230,000 federal threshold increasingly require verifiable electronic records. ZertES SR 943.03 Art. 2 defines which entities, including federal bodies, cantons, and contracting authorities, must recognise qualified electronic signatures and seals as legally equivalent to wet signatures.
Banking and financial services (FINMA): FINMA requires banks and asset managers to maintain tamper-evident, time-stamped records under the Financial Services Act and its ordinances. A ZertES-qualified seal combined with a qualified timestamp (RFC 3161) creates an immutable audit trail acceptable to FINMA examiners.
Healthcare: Swiss healthcare providers must protect patient records under the Federal Act on the Protection of Health Data. Qualified seals bind records to a cryptographic timestamp, preventing backdating and proving integrity at the moment of signing.
Courts and arbitration: Swiss civil procedure rules accept qualified electronic documents as evidence. A ZertES-qualified seal from a BAKOM-accredited provider reverses the burden of proof: the challenger must disprove authenticity, not the holder prove it.
For any company that signs material contracts, stores regulated records, or submits filings to public authorities, ZertES compliance is the baseline.
Switzerland is not an EU member state and is therefore not subject to the eIDAS Regulation. The two frameworks run in parallel:
| Framework | Jurisdiction | Governing body |
|---|---|---|
| ZertES SR 943.03 | Switzerland | BAKOM |
| eIDAS (EU 910/2014) | EU + EEA | National supervisory bodies |
This distinction matters for Swiss companies operating across borders. A contract executed with a Swiss counterparty needs ZertES standing; the same contract with a German or French counterparty benefits from eIDAS recognition. Without dual coverage, companies must manage separate signing processes for domestic and cross-border transactions.
Swisscom Trust Services is one of a small number of QTSPs that hold accreditation under both ZertES (from BAKOM) and eIDAS (as a qualified trust service provider listed on EU member-state trusted lists). A seal issued by Swisscom therefore carries legal weight in Switzerland and across the EU simultaneously, with no second signing workflow, no duplicated records, and no legal gap at the border.
For Swiss companies with EU customers, suppliers, or regulators, this single-seal dual coverage reduces process overhead and eliminates the compliance ambiguity of using two separate tools. See our eIDAS comparison page for a detailed breakdown of EU requirements.
Under ZertES SR 943.03 Art. 2 and the corresponding provisions of the Swiss Code of Obligations, a qualified electronic seal is treated as legally equivalent to a handwritten signature for entities, including companies, organisations, and authorities, that use it on their official documents.
Three legal consequences follow immediately:
Legal presumption of integrity. A document sealed with a ZertES-qualified seal is presumed to be authentic and unaltered from the moment of sealing. Courts, auditors, and counterparties do not need additional proof unless they can demonstrate specific grounds to challenge it.
Burden of proof reversal. In a dispute, the party challenging the sealed document, not the company that created it, carries the burden of proving tampering or invalidity. This is a significant litigation advantage: companies with qualified seals enter disputes in a structurally stronger position than those relying on unsigned or simply hashed files.
Court admissibility. Swiss civil courts accept qualified electronic documents as admissible evidence under the Swiss Code of Civil Procedure. The RFC 3161-compliant timestamp embedded at sealing proves the document existed in its current form at a specific point in time. This is the standard for IP disputes, contract dating, and regulatory filings.
If the Zurich Treuhand firm had applied a ZertES-qualified seal to each tender declaration at the moment of submission, the competitor's challenge would have met an immediate legal wall. The seal from a BAKOM-accredited QTSP would have carried the legal presumption under SR 943.03 that the documents were authentic and unaltered from submission. The RFC 3161 timestamp would have fixed the exact moment each declaration was finalised. The challenger would have needed to produce grounds to disprove that presumption, not the Treuhand firm to prove it. In practice, the challenge would not have survived the first legal review. The CHF 180,000 exposure and the lost contract would have been prevented by a seal applied at submission.
Swiss Trust Layer AG integrates directly with Swisscom Trust Services, the leading BAKOM-accredited QTSP in Switzerland. Every seal issued through the platform is a ZertES-qualified organisational seal backed by Swisscom's BAKOM accreditation, not a simple hash or an unqualified timestamp.
Key delivery parameters:
The platform handles the QTSP integration, certificate issuance, and verification infrastructure. Your legal and compliance teams interact with a clean upload-and-seal interface; the cryptographic complexity is fully managed.
Visit the ZertES product page for a full feature breakdown, or read our qualified timestamp explainer to understand how RFC 3161 timestamps anchor your seals to a legally verifiable moment in time.
Getting ZertES-compliant seals into your document workflow takes under ten minutes:
Your compliance team gains an audit trail that holds up in Swiss courts and before FINMA, without changing your existing document management system.
The Zurich Treuhand firm spent CHF 180,000 defending records that would have each to seal at the moment of submission. The average Swiss IP dispute costs CHF 150,000 to CHF 400,000 (Swiss Arbitration Association). ZertES qualification at is not a precaution. It is the difference between a record that holds and one that does not.
Swiss Trust Layer AG provides ZertES-qualified document seals backed by Swisscom Trust Services BAKOM accreditation, at with no minimum commitment.
For Swiss companies with compliance obligations in public procurement, financial services, healthcare, or litigation-adjacent workflows, ZertES qualification is the lowest-risk path to legally defensible digital records.
Explore the ZertES product page for technical specifications, or register your company account and issue your qualified seals today.
Protect your work with Swiss Trust Layer AG
Seal your intellectual property with a court-proof e-Seal backed by Swisscom Trust Services.
Book a Free Demo
A Backdated Term Sheet Is a 'Your Word Against Theirs' Problem. It Should Not Be.
Term sheets, LOIs, and early deal documents change hands fast during negotiation, across email, redlines, and verbal amendments. A dated, independently verifiable seal on the exact document ends the argument over what was agreed and when.
Your Government ID App Can Sign a Document. That Is Not Proof You Made It First.
The EU Digital Identity Wallet lets clients sign documents with a government ID. For fiduciaries, that only answers who signed, not when a specific draft or valuation existed. Here is why the difference matters in a dispute.
The Three-Year-Old File Problem: Proving Something You Made Years Ago Is Still Yours
Platforms shut down, metadata gets stripped by re-uploads, and formats fall out of use. A file that was easy to prove the week you made it can become nearly impossible to prove three years later.
"Poor Man's Copyright": Why Mailing Yourself a Sealed Envelope Doesn't Hold Up
Mailing yourself a sealed copy and relying on the postmark is one of the oldest pieces of copyright folklore. It relies on a physical envelope nobody independently checks, not a verifiable record.
Law Firms and Fiduciaries: Client Deliverables That Carry Their Own Evidence
Email trails and PDF metadata only prove what a firm says happened. A sealed deliverable carries its own hash, qualified timestamp, and verified identity, checkable without calling the firm.
