ComparisonEU and U.S.

eIDAS vs ESIGN and UETA qualified signatures, trust services, and evidence

This comparison helps separate the EU eIDAS trust-service and qualified-signature framework from U.S. electronic-signature law concepts under and UETA.

The eIDAS side is based on official EU and ETSI material; the U.S. side is based on the federal Act (15 U.S.C. ch. 96), which also defines how a state's enactment of the Uniform Electronic Transactions Act (UETA) interacts with the federal rule.

Author
Sorena AI
Published
May 9, 2026
Updated
Oct 15, 2026
Overview

eIDAS and /UETA both matter when a product accepts electronic signatures, but they answer different questions. eIDAS creates an EU framework for electronic identification and trust services, including legal effects for electronic signatures and a specific qualified electronic signature status. ESIGN is the U.S. federal statute (15 U.S.C. ch. 96), while UETA is a 1999 uniform model enacted through state law. Their core rule prevents a signature, contract, or record from being denied legal effect solely because it is electronic; it does not make every electronic transaction enforceable regardless of consent, attribution, form requirements, exceptions, or other contract law. Neither creates an eIDAS-style qualified-signature tier.

Side-by-side comparison

eIDAS vs ESIGN and UETA: what the evidence must prove

This table helps avoid treating a U.S. electronic-signature audit trail as eIDAS qualified-signature proof. Both columns are cited; the key contrast is that and UETA are technology-neutral and define no qualified-signature tier, while eIDAS does.

Review all sources
First framework
eIDAS

EU framework for electronic identification and trust services, including legal effects for electronic signatures and qualified status for signatures, certificates, and trust services.

Second framework
ESIGN and UETA

U.S. electronic-signature and electronic-record laws: is the federal statute (generally effective October 1, 2000) and UETA is the 1999 uniform state-law model. The governing state's actual enactment must be checked. Neither framework defines an eIDAS-style qualified-signature tier.

Scope boundary

eIDAS

eIDAS says an electronic signature cannot be denied legal effect solely because it is electronic, and gives qualified electronic signatures equivalent legal effect to handwritten signatures.

ESIGN and UETA

covers transactions in or affecting interstate or foreign commerce: a signature, contract, or record may not be denied legal effect solely because it is electronic. UETA is the parallel 1999 uniform state-law model, but the governing state's enacted text, variations, and exclusions control the state-law analysis. There is no separate qualified tier.

Operational implication

Do not stop at generic electronic validity when the EU transaction requires a qualified electronic signature.

Qualified trust and technology neutrality

eIDAS

eIDAS qualified signatures depend on qualified certificates, qualified trust service providers, and validation data tied to the signing time.

ESIGN and UETA

and UETA are technology-neutral: they validate electronic signatures and records without requiring any certificate, accredited provider, or trusted list. ESIGN even bars a state from according greater legal effect to a specific technology, so there is no federal registry of qualified providers equivalent to an eIDAS QTSP.

Operational implication

Keep certificate-chain, QTSP, and validation evidence separate from ordinary signer-authentication logs.

Trigger

eIDAS

Escalate when a flow claims qualified electronic signature status, uses qualified certificates, depends on a QTSP, serves EU public-sector processes, or needs EU cross-border recognition.

ESIGN and UETA

Apply /UETA analysis when the flow is governed by U.S. law: in particular, when a law requires written information to a consumer, ESIGN only treats the electronic record as satisfying that requirement if the consumer has affirmatively consented and received the required disclosures. Also flag attribution, retention, and admissibility questions.

Operational implication

Assign separate EU trust-service and U.S. e-signature legal owners before launch.

Cross-border recognition and state-law interaction

eIDAS

A qualified electronic signature based on a qualified certificate issued in one EU Member State is recognised as a qualified electronic signature in other Member States.

ESIGN and UETA

The U.S. uses a federal-floor-plus-state-enactment model, not cross-border qualified-certificate recognition. sets the federal baseline, and a state law can modify or supersede it only by enacting UETA as approved by the Uniform Law Commission in 1999 or by adopting consistent technology-neutral alternatives that reference ESIGN.

Operational implication

Use eIDAS recognition evidence for EU Member State questions and a separate U.S. source record for /UETA questions.

Evidence record

eIDAS

eIDAS validation should preserve the signing certificate, certificate validity status at signing, QTSP evidence, validation policy, and validation result.

ESIGN and UETA

Under , a retention requirement is met by an electronic record that accurately reflects the information and remains accessible for later reference; for consumer disclosures, keep proof of affirmative consent and the required hardware/software statement. No certificate-status or trusted-list evidence is required.

Operational implication

A reusable evidence bundle needs labels showing which records prove eIDAS qualified status and which records support U.S. transaction review.

Timing and deadlines

eIDAS

For eIDAS, record the signing time, certificate validity period, and the status of the qualified certificate at that same time, because validation must confirm the certificate was valid at signing.

ESIGN and UETA

took effect on October 1, 2000 (with limited delayed dates for record-retention rules and certain loans). It sets no signing-time certificate-validity test like eIDAS; U.S. timing questions concern the transaction and the applicable U.S. law, not certificate status at the moment of signing.

Operational implication

Do not reuse a final approval decision if the certificate status at signing has not also been captured.

Validation and enforceability

eIDAS

An eIDAS qualified signature must pass validation against the EU rule set, including certificate status, QTSP status, and the signed-data integrity checks.

ESIGN and UETA

and UETA impose no validation procedure to pass. An electronic signature is enforceable under the same contract-law rules as a paper one, subject to the consumer-consent conditions and the statutory exceptions; disputes turn on attribution, intent, and consent rather than certificate or QTSP status.

Operational implication

Do not map a U.S. evidence trail directly onto EU qualified-signature validation without separate eIDAS checks.

Overlap and reuse

eIDAS

Shared artifacts like timestamps, certificate chains, and validation logs can support eIDAS checks, but only if they are tied to the right signing time and trust-service status.

ESIGN and UETA

A shared audit trail or timestamp can support a U.S. /UETA enforceability argument (intent, attribution, retention) even though it does nothing to establish eIDAS qualified status; the same artifact answers different legal questions on each side.

Operational implication

Reuse the same evidence only when the report labels which rule set each artifact supports.

Practical decision rule

eIDAS

If the flow must prove EU qualified-signature status, require the qualified certificate, QTSP, trusted-list, signing-time, and validation-result record set. If the flow only needs basic EU electronic-signature legal effect, the simpler eIDAS evidence path may be enough.

ESIGN and UETA

If the transaction is governed by U.S. law, and applicable state law generally prevent denial of legal effect solely because an electronic signature was used; they do not remove other formation, authority, attribution, or form requirements. Check ESIGN consumer-consent rules where written disclosures are required, the governing state's enacted UETA text, and excluded categories such as wills, family-law matters, much of the UCC, court documents, or certain notices.

Operational implication

Start with the jurisdiction and the legal effect the transaction must achieve, then collect only the evidence that proves that rule set.

Practical decision rule

How should teams use this comparison?

  • Classify the EU flow first: ordinary electronic-signature effect, advanced electronic signature evidence, or qualified electronic signature evidence.
  • If the transaction must prove eIDAS qualified status, keep the qualified certificate, QTSP, trusted-list, signing-time, and validation-result evidence together.
  • If the transaction is governed by U.S. law, use and the governing state's enacted electronic-transactions law to test whether electronic form is accepted, then separately test consent, attribution, formation, consumer-disclosure rules, retention, and statutory exceptions.
  • Do not reuse a generic audit trail as proof of a qualified signature unless the EU validation record says what that audit trail proves.
Section 2

Qualified electronic signatures require certificate and device evidence

A qualified electronic signature under eIDAS depends on a qualified certificate for electronic signature and a qualified electronic signature creation device. The validation process must confirm, among other things, that the certificate was qualified, issued by a qualified trust service provider, and valid at the time of signing.

That is a different assurance model from a U.S. electronic-signature record that may show intent, attribution, presentation, or retention. Those records can still be useful evidence, but they do not by themselves establish qualified certificate status, QTSP status, or EU trusted-list validation.

  • Keep a certificate-status record for the signing time, not only a final signed document.
  • Record the qualified trust service provider and the certificate identity information used for validation.
  • Preserve the validation output, including whether the result was valid, indeterminate, or invalid under the selected validation policy.
Section 3

Cross-border recognition works differently in the EU

eIDAS includes explicit EU cross-border rules: a qualified electronic signature based on a qualified certificate issued in one Member State must be recognised as a qualified electronic signature in other Member States. The Commission overview also describes eIDAS as a framework for cross-border digital identity, authentication, and trust services in the EU internal market.

The U.S. model is different. sets a federal validity floor for transactions in or affecting interstate or foreign commerce. A state law can modify or supersede that floor only through the routes in 15 U.S.C. 7002, including enactment of the 1999 UETA text or consistent, technology-neutral alternatives that specifically reference ESIGN. The governing state's enacted text and exclusions still need to be checked. There is no U.S. equivalent of the eIDAS cross-border qualified-certificate recognition rule.

  • For EU use, keep the Member State, QTSP, certificate, and validation evidence needed to show the qualified signature path.
  • For U.S. use, confirm the governing state's enacted electronic-transactions law, any departures from the uniform text, and whether an consumer-consent rule or statutory exception applies.
  • For global products, label each signature flow by jurisdiction and legal effect instead of using one generic e-signature control.
Section 4

Evidence to keep when both regimes may apply

When a transaction may face both EU and U.S. review, build an evidence bundle that keeps the regimes separate. The eIDAS bundle should prove signature type, qualified certificate status, QTSP status, trusted-list or trust-anchor validation, certificate validity at signing, and the final validation outcome. The U.S. bundle should capture consumer-consent proof where written disclosures are required, retention records that accurately reflect the transaction and remain accessible for later reference, and attribution evidence linking the signature to the signer; it does not need certificate or trusted-list data.

The safest comparison artifact is a two-column evidence index: one column for eIDAS trust-service facts and one column for U.S. e-signature facts. A single document hash or audit trail can appear in both columns, but each row should say exactly what legal question that evidence supports.

  • For eIDAS, store the signed object, signer certificate, certificate chain, QTSP identity, certificate-status response, trusted-list source, validation policy, validation report, and signing time.
  • For /UETA, keep proof of affirmative consumer e-consent where written disclosures are required, records that accurately reflect the transaction and remain accessible for retention, and attribution evidence linking the signature to the signer.
  • For disputes, preserve rejected validation attempts and indeterminate results because they explain why a signature was or was not accepted.
Recommended next step

Build a sourced signature evidence index

Sorena can help turn this comparison into a cited evidence index that separates eIDAS qualified-signature validation from U.S. ESIGN/UETA review items that need separate U.S. sourcing.

Primary sources

References and citations

eur-lex.europa.eu16 citations
Referenced sections
  • Primary EU legal source for electronic-signature legal effects, qualified electronic signatures, qualified certificates, validation requirements, and Member State recognition.
  • Supports the eIDAS distinction between general electronic-signature legal effect, qualified electronic signatures, qualified certificates, validation, and cross-border recognition.
  • Supports the requirements for qualified certificates, qualified signature creation devices, and validation of qualified electronic signatures.
Show 13 more
  • Supports the EU rule that qualified electronic signatures based on qualified certificates from one Member State are recognised in other Member States.
  • Supports the eIDAS legal-effect distinction between electronic signatures and qualified electronic signatures.
  • Supports requiring qualified-signature evidence when the EU legal effect depends on qualified status.
  • Supports the eIDAS requirements for qualified certificates and validation of qualified electronic signatures.
  • Supports escalation triggers tied to qualified signatures, qualified certificates, validation, and public-sector recognition.
  • Supports keeping eIDAS qualified-signature analysis distinct from broader electronic-signature validity review.
  • Supports Member State recognition for qualified electronic signatures based on qualified certificates.
  • Supports the requirement that the qualified certificate must be valid at the time of signing.
  • Supports preserving time-specific validation evidence for qualified signatures.
  • Supports the eIDAS validation steps for qualified electronic signatures.
  • Supports separating ordinary electronic-signature evidence from qualified-signature proof.
  • Supports the distinction between ordinary electronic-signature effect and qualified electronic-signature effect.
  • Supports the decision rule for separating ordinary, advanced, and qualified eIDAS signature questions.
"A qualified electronic signature shall have the equivalent legal effect of a handwritten signature."
More quoted passages
"the qualified certificate was issued by a qualified trust service provider"
"shall be recognised as a qualified electronic signature in all other Member States"
"shall not be denied legal effect"
"equivalent legal effect of a handwritten signature"
"qualified certificate was issued by a qualified trust service provider"
"Electronic signatures in public services"
"Requirements for the validation of qualified electronic signatures"
"recognised as a qualified electronic signature in all other Member States"
"was valid at the time of signing"
"the integrity of the signed data has not been compromised"
"The process for the validation of a qualified electronic signature shall confirm the validity"
"Requirements for advanced electronic signatures"
govinfo.gov11 citations
Referenced sections
  • Primary U.S. federal source for the validity of electronic signatures and records, consumer e-consent rules, retention, the UETA preemption relationship, and statutory exceptions.
  • Supports the U.S. side: ESIGN gives electronic signatures and records validity for transactions affecting interstate or foreign commerce, without a qualified tier.
  • ESIGN section 7001(a) prevents denying legal effect, validity, or enforceability solely because a signature, contract, or record is electronic in a transaction affecting interstate or foreign commerce.
Show 8 more
  • ESIGN section 7002 forbids state alternatives that require or favor a specific technology, confirming the federal scheme is technology-neutral.
  • ESIGN section 7001(c) conditions electronic consumer disclosures on affirmative consent.
  • ESIGN section 7002 lets state law supersede the federal rule only through enactment of the 1999 UETA or consistent technology-neutral alternatives.
  • ESIGN section 7001(d) sets the retention standard for electronic records.
  • ESIGN section 107 sets the federal effective date.
  • ESIGN section 7001(a) prevents denial of legal effect solely because an electronic signature or record was used; it does not itself establish that a particular contract is enforceable.
  • ESIGN section 7001(a) is the validity rule a shared artifact would support on the U.S. side.
  • ESIGN section 7003 lists the transaction categories excluded from the federal validity rule.
"may not be denied legal effect, validity, or enforceability solely because it is in electronic form"
More quoted passages
"do not require, or accord greater legal status or effect to, the implementation or application of a specific technology"
"the consumer has affirmatively consented to such use and has not withdrawn such consent"
"constitutes an enactment or adoption of the Uniform Electronic Transactions Act as approved and recommended for enactment in all the States by the National Conference of Commissioners on Uniform State Laws in 1999"
"accurately reflects the information set forth in the contract or other record"
"this title [enacting this subchapter] shall be effective on October 1, 2000"
"may not be denied legal effect, validity, or enforceability solely because an electronic signature or electronic record was used"
"wills, codicils, or testamentary trusts"
etsi.org7 citations
Referenced sections
  • ETSI trusted-list material supporting certificate path validation, trust anchors, and the List Of Trusted Lists context for EU signature validation.
  • Supports using EU trusted lists and trust anchors in certificate path and signature validation processes.
  • Supports using trusted lists as trust-anchor input in certificate path and signature validation.
Show 4 more
  • Supports keeping trusted-list, certificate, and trust-anchor evidence for signature validation.
  • Supports using trusted lists to validate service status and trust anchors.
  • Supports preserving trust-service status history for later validation.
  • Supports trusted-list evidence for certificate path and signature validation.
"Information from trusted lists can be used in the certificate path validation process"
More quoted passages
"Certificate path validation"
"CA certificates from the selected entries"
"status and status history"
"status history"
"Usage of trusted lists"
digital-strategy.ec.europa.eu4 citations
Referenced sections
  • Commission overview supporting eIDAS as an EU framework for cross-border digital identity, authentication, and trust services.
  • Supports the broader eIDAS purpose of secure cross-border electronic identification, authentication, and trust services in the EU.
  • Supports eIDAS as an EU cross-border trust framework.
Show 1 more
  • Supports the page's EU-focused decision framing around secure cross-border transactions.
"secure cross-border transactions"
etsi.org2 citations
Referenced sections
  • Supports the role of QCStatements in declaring EU qualified certificate properties for electronic signatures, seals, and website authentication.
  • Supports machine-readable qualified-certificate declarations through QCStatements.
"EU qualified certificates shall include QCStatements"
ec.europa.eu2 citations
Referenced sections
  • Commission implementation resource for EU eSignature tooling and trusted-list validation resources.
  • Supports the practical EU eSignature validation tooling context, including DSS and trusted-list resources.
"eSignature"

eIDAS 2 deadlines and compliance calendar for EUDI Wallet and trust services

eIDAS 2 calendar separating binding EUDI Wallet, reporting, and trust-service dates from implementation milestones and technical programme updates.

eIDAS 2.0 vs eIDAS: EUDI Wallet and trust-service changes

Compare the original eIDAS electronic identification and trust-service framework with the eIDAS 2.0 amendments for EUDI Wallets, relying parties, attestations, QWACs, and supervision.

eIDAS Certificates and Authentication: qualified certificates, QWACs, and validation checks

Official source guide to eIDAS qualified certificates, website authentication certificates, trusted lists, relying-party checks, and validation evidence.

eIDAS checklist and evidence pack for trust services, signatures, and EUDI Wallet relying parties

Build an eIDAS evidence pack for qualified trust services, electronic signatures, trusted-list checks, certificate validation, supervisory records, and EUDI Wallet relying-party controls.

eIDAS compliance guide for trust services, QTSPs, signatures, and EUDI Wallet relying parties

Official source eIDAS compliance guide for trust-service classification, QTSP supervision evidence, qualified signatures, seals, time stamps, certificates, trusted-list validation, and EUDI Wallet relying-party records.

eIDAS electronic signatures: SES, AES, QES legal effect and evidence

An official source guide to eIDAS electronic-signature legal effect: SES, AES, QES, qualified certificates, QTSP trusted-list checks, validation, recognition, and evidence records.

Show all related guides (35)

eIDAS penalties and fines for trust service providers

Guide to eIDAS Article 16 fine floors, national penalty rules, supervisory action, qualified-status withdrawal, and trusted-list evidence.

eIDAS QES validation checks for relying parties

How to validate a qualified electronic signature under eIDAS: certificate, QTSP, trusted-list, QSCD, integrity, validation result, and evidence records.

eIDAS Qualified Trust Services: QTSP Selection

How to select an EU eIDAS qualified trust service provider: identify the qualified service type, verify trusted-list status, review supervision evidence, and retain certificate-policy records.

eIDAS remote signature and cloud HSM controls for QTSPs

Source-grounded guide to eIDAS remote signature controls: remote QSCD scope, server-side signing, QTSP evidence, signer authentication, certificate validation, and trusted-list checks.

eIDAS signature legal effect selector: SES, AES, AES-QC, or QES

Compare eIDAS signature levels by legal effect, governing form rules, qualified certificate status, QTSP evidence, QSCD use, validation, and public-service recognition.

eIDAS trust service role scoping workflow: TSP, QTSP, validator, relying party, or QTSP customer

Classify an eIDAS role by evidence: trust service provider, qualified trust service provider, signature or seal validator, EUDI Wallet relying party, relying party, or customer of a QTSP.

eIDAS trusted list validation: LOTL, QTSP status, and evidence

How to validate EU eIDAS trusted-list evidence: start from the Commission LOTL, confirm QTSP and qualified-service status, check certificate path and revocation data, and retain validation reports.

eIDAS vs ETSI EN 319 401: legal supervision and TSP policy requirements

Compare eIDAS and ETSI EN 319 401 for trust services: legal scope, QTSP supervision, conformity assessment, audits, incident evidence, and operational controls.

eIDAS vs GDPR for identity data: wallet, trust-service, and privacy obligations

Compare eIDAS identity, trust-service, and EUDI Wallet rules with GDPR duties for personal-data processing, minimisation, lawful basis, evidence, security, and user rights.

eIDAS vs NIS2 for trust service providers: QTSP and cybersecurity obligations

Compare eIDAS trust-service and QTSP duties with NIS2 cybersecurity risk-management, incident reporting, supervision, and evidence duties for trust service providers.

Electronic Attestations of Attributes under EU eIDAS: EAA, QEAA, issuers, wallets, and validation

Official source guide to electronic attestations of attributes under amended EU eIDAS: EAA, QEAA, public-sector authentic-source attestations, wallet use, issuer checks, relying-party validation, revocation, and legal effect.

EU eIDAS Applicability Test for Trust Services, Wallets, and Certificates

An official source eIDAS scope test for QTSPs, trust services, electronic signatures, seals, timestamps, QWACs, EUDI Wallet relying parties, and cross-border recognition evidence.

EU eIDAS checklist for signatures, trust services, and wallets

Checklist for eIDAS trust-service and EUDI Wallet controls: qualified status, trusted lists, certificates, signatures, seals, timestamps, validation evidence, and relying-party records.

EU eIDAS FAQ: signatures, QTSPs, trusted lists, QWACs, wallets, and validation

FAQ on eIDAS trust services and the European Digital Identity framework, covering advanced and qualified electronic signatures, QTSP status, trusted lists, QWACs, EUDI Wallet relying parties, attestations of attributes, and validation evidence.

EU eIDAS QTSP authorization and supervision guide

How qualified trust service providers obtain and keep qualified status under eIDAS, including conformity assessment reports, supervision, trusted lists, incidents, and evidence.

EU eIDAS QTSP Due Diligence Workflow for Trusted Lists, Certificates, and Evidence

Check a qualified trust service provider under eIDAS by validating trusted-list status, qualified service scope, certificates, policies, supervision, audits, and retained evidence.

EU eIDAS Requirements for Trust Services, Signatures, Seals, Wallets, and Evidence

Official source guide to core eIDAS requirements for trust service providers, qualified trust services, electronic signatures, seals, time stamps, trusted lists, and EUDI Wallet relying parties.

EUDI Wallet readiness for service providers under eIDAS

Readiness guide for organisations preparing to request or verify data from European Digital Identity Wallets: roles, registration, ARF alignment, selective disclosure, implementing acts, and evidence.

EUDI Wallet Relying Party Onboarding Workflow under eIDAS

Prepare an eIDAS wallet-relying-party registration, intended-use record, access-certificate controls, attribute request, validation evidence, and intermediary safeguards.

EUDI Wallet Relying Party Registration Under eIDAS

What eIDAS Article 5b and the EUDI Wallet ARF say about wallet relying party registration, intended uses, attribute requests, certificates, evidence, and Member State gaps.

EUDI Wallet Technical Architecture Guide under eIDAS

Technical guide to the EUDI Wallet architecture: ARF roles, wallet units, PID and attestations, relying parties, trust model, certificates, protocols, privacy, and security controls.

QWACs under eIDAS: website authentication certificates

A source-grounded guide to qualified website authentication certificates under eIDAS, covering Annex IV data, trusted lists, browser recognition, validation evidence, and QTSP checks.

What eIDAS Covers: eID, Trust Services, EUDI Wallet, and QWACs

A source-grounded guide to the systems and services covered by EU eIDAS: notified electronic identification, trust services, signatures, seals, time stamps, registered delivery, website authentication, trusted lists, the EUDI Wallet, and attribute attestations.

EU eIDAS attribute attestations: EAA, QEAA, wallet, and relying party checks

What electronic attestations of attributes mean under eIDAS, how QEAAs differ from public-sector and non-qualified attestations, and what issuers, wallets, and relying parties should verify.

EU eIDAS Trusted Lists FAQ: LOTL, QTSP status, and validation evidence

How EU eIDAS Trusted Lists and the Commission LOTL support QTSP and qualified trust-service validation, with practical evidence checks for relying parties.

EUDI Wallet Relying Parties under eIDAS

What EUDI Wallet relying parties must do under eIDAS, when the harmonised registration rules apply, and how to control requested data, identification, validation, and evidence.

QES vs AdES under EU eIDAS: legal effect, certificates, QTSPs, and validation evidence

Compare qualified electronic signatures (QES) and advanced electronic signatures (AdES) under EU eIDAS, including legal effect, qualified certificates, QTSP status, QSCDs, and validation evidence.

What is a qualified trust service provider under eIDAS?

How to verify QTSP status under eIDAS using the qualified service, supervisory body decision, trusted list entry, conformity assessment evidence, and service-specific records.

What is a QWAC under the EU eIDAS Regulation?

Plain-language FAQ on qualified website authentication certificates under eIDAS, including website identity, QTSP trusted-list checks, browser recognition, and validation evidence.