How a ZertES Qualified Electronic Seal Works: Technical + Legal Explainer (2026)
Standards Compliance

How a ZertES Qualified Electronic Seal Works: Technical + Legal Explainer (2026)

Swiss Trust Layer Editorial TeamΒ· Legal Content
Β·June 12, 2026Β· 7 min read

A ZertES qualified electronic seal (QES) is an electronic seal created by a legal entity using a qualified certificate issued by a Swiss trust service provider accredited under ZertES (SR 943.03). Under Swiss law (OR Art. 14 para. 2bis and ZertES Art. 2), a qualified seal meets the highest legal standard for organisational authentication and is admissible as evidence in Swiss courts without additional proof of authenticity.

What Is ZertES and Why Does It Matter?

ZertES β€” Bundesgesetz ΓΌber Zertifizierungsdienste im Bereich der elektronischen Signatur (Federal Act on Certification Services in the Area of Electronic Signatures, SR 943.03) β€” is Switzerland's primary law governing digital trust services. It defines the legal framework for:

  • Qualified electronic signatures (by natural persons)
  • Qualified electronic seals (by legal entities β€” organisations, companies)
  • Qualified electronic timestamps
  • Certificate authorities (Certification Service Providers, CSPs) operating in Switzerland

ZertES was enacted in 2003 and revised in 2016 to align with the EU's eIDAS regulation. Switzerland is not an EU member, but ZertES is intentionally designed to be functionally equivalent to eIDAS β€” enabling cross-border recognition between Switzerland and the EU under the bilateral treaty framework.

How Does a ZertES Qualified Electronic Seal Differ From an Advanced Seal?

ZertES establishes a three-tier hierarchy for seals:

| Level | Standard | Certificate Required | Legal Force |

|---|---|---|---|

| Qualified (QES) | ZertES Art. 2 | Qualified certificate from accredited CSP | Highest β€” presumption of authenticity in court |

| Advanced (AES) | ZertES Art. 2b | Certificate (may be from non-accredited provider) | Strong β€” good evidence, but rebuttable |

| Simple | None | No specific requirements | Weakest β€” no presumption of authenticity |

For a seal to be "qualified" under ZertES:

  1. It must be created using a qualified certificate issued by a CSP accredited by the Swiss Accreditation Service (SAS) under ZertES
  1. The certificate must be linked to the legal entity (not an individual)
  1. The creation device must meet security requirements
  1. The certificate must be valid (not expired or revoked) at the time of sealing

Under Swiss Civil Code / Code of Obligations (OR Art. 14 para. 2bis), a qualified electronic signature (and by extension, a qualified seal) is treated as legally equivalent to a handwritten signature for documents requiring written form.

What Is the Technical Mechanism Behind a Qualified Seal?

At a technical level, a ZertES qualified electronic seal uses:

  1. Public Key Infrastructure (PKI): The sealing organisation holds a private key, with a corresponding public key certified in a qualified certificate.
  1. Asymmetric cryptography: The seal is created by hashing the document content (SHA-256 or SHA-512) and encrypting the hash with the organisation's private key. This produces a digital signature value.
  1. Certificate binding: The qualified certificate links the public key to the legal entity's verified identity (company name, registration number, jurisdiction).
  1. Timestamp embedding: A qualified timestamp from a timestamp authority (TSA) is embedded, proving the exact time of sealing.
  1. PAdES format (PDF Advanced Electronic Signatures, ETSI EN 319 102): The industry standard format for PDF seals, supporting long-term validation (LTV) so the seal remains verifiable after certificates expire.

The result: a sealed document where any modification β€” even a single character change β€” invalidates the seal. The seal cannot be forged without the private key, which is held in a Hardware Security Module (HSM) certified to FIPS 140-2 Level 3 or Common Criteria EAL4+.

When Is a Qualified Seal Required vs. Recommended?

Required by law (Swiss examples):

  • Notarial acts in digital form
  • Corporate resolutions to be filed with the Commercial Registry
  • Qualified electronic invoices under Swiss VAT rules
  • Documents requiring "written form" under OR (commercial contracts above CHF 30,000 in some cantons)

Strongly recommended (best practice):

How Does ZertES Compare to eIDAS?

Switzerland and the EU have worked toward mutual recognition of qualified trust services. Key comparisons:

| Dimension | ZertES (Switzerland) | eIDAS (EU) |

|---|---|---|

| Legal basis | SR 943.03 | EU 910/2014 |

| Governing body | Swiss Accreditation Service (SAS) | National supervisory bodies + EU Trusted Lists |

| Qualified seal definition | ZertES Art. 2 | eIDAS Art. 35 |

| Cross-border recognition | Bilateral recognition via EU-CH framework | Automatic within EU |

| TSP list | SAS accredited list | EU Trusted Lists (national) |

| Time stamp standard | RFC 3161 (same) | RFC 3161 + ETSI EN 319 422 |

| Long-term validation | PAdES-LTV (same) | PAdES-LTV |

In practice: a ZertES qualified seal is not automatically treated as an eIDAS qualified seal under EU law. However, EU courts can and do accept ZertES-sealed documents as high-quality evidence, and many EU counterparties contractually accept ZertES seals as equivalent. Swiss Trust Layer's eIDAS-compliant sealing adds an eIDAS timestamp layer on top of the ZertES framework, producing a document valid under both standards.

Is a ZertES Qualified Seal Admissible as Evidence in Swiss Courts?

Yes. ZertES Art. 14 creates a legal presumption of authenticity: if a qualified seal is present and the certificate was valid at time of sealing, the court presumes the seal is authentic and the document has not been tampered with since sealing. The opposing party bears the burden of rebutting this presumption.

This is the key legal advantage of a qualified seal over an advanced or simple seal. Advanced seals are good evidence β€” but they can be challenged without shifting the burden of proof. Qualified seals place the burden of proof on the challenger.

Who Are the Accredited ZertES CSPs in Switzerland?

CSPs accredited by the Swiss Accreditation Service (SAS) to issue qualified certificates for ZertES seals include (as of 2026):

  • SwissSign (SwissSign Group AG) β€” backed by Swiss Post
  • Swisscom Trust Services
  • QuoVadis Trustlink (now part of DigiCert)

Swiss Trust Layer integrates with accredited CSPs to issue qualified certificates as part of the sealing workflow. You do not need to separately procure a certificate β€” the ZertES sealing service includes certificate issuance, timestamping, and document storage in a single step.

What Is the Shelf Life of a ZertES Qualified Seal?

Certificates expire (typically after 1–3 years). Without long-term validation (LTV) measures, an expired certificate means the seal cannot be re-verified after expiry. ZertES-compliant seals must include:

  1. OCSP stapling or CRL embedding at the time of sealing β€” proof the certificate was valid at that moment
  1. Timestamp renewal (archival timestamps, "re-timestamping") every few years to extend verifiability beyond cryptographic algorithm lifetimes

Swiss Trust Layer applies LTV measures at sealing time and provides archival timestamping services to maintain seal validity for 30+ years β€” covering the typical document retention period required by Swiss commercial law (OR Art. 958f: 10 years).

Next Steps

If your organisation needs to seal documents under Swiss law with the highest legal assurance, a ZertES qualified electronic seal is the appropriate tool. It provides legal presumption of authenticity, court admissibility, and cross-border recognition with EU counterparties. See the ZertES service overview or the compliance framework comparison for how it fits into a broader document governance strategy.

Protect your work with Swiss Trust Layer AG

Seal your intellectual property with a court-proof e-Seal backed by Swisscom Trust Services.

Book a Free Demo