---
title: "eIDAS Qualified Trust Services: QTSP Selection"
canonical_url: "https://www.sorena.io/artifacts/eu/electronic-identification-and-trust-services-regulation/qualified-trust-services-and-qtsp-selection"
source_url: "https://www.sorena.io/artifacts/eu/electronic-identification-and-trust-services-regulation/qualified-trust-services-and-qtsp-selection"
author: "Sorena AI"
description: "How to select an EU eIDAS qualified trust service provider: identify the qualified service type, verify trusted-list status, review supervision evidence, and retain certificate-policy records."
published_at: "2026-05-09"
updated_at: "2026-07-24"
keywords:
  - "EU eIDAS qualified trust services"
  - "QTSP selection"
  - "trusted lists"
  - "qualified electronic signature"
  - "qualified certificate"
  - "QWAC"
  - "EU eIDAS Regulation"
  - "eIDAS"
  - "qualified trust services"
  - "QTSP"
---
**[SORENA](https://www.sorena.io/)** - AI-Powered GRC Platform

[Home](https://www.sorena.io/) | [Solutions](https://www.sorena.io/solutions) | [Artifacts](https://www.sorena.io/artifacts) | [About Us](https://www.sorena.io/about-us) | [Contact](https://www.sorena.io/contact) | [Portal](https://app.sorena.io)

---

# eIDAS Qualified Trust Services: QTSP Selection

How to select an EU eIDAS qualified trust service provider: identify the qualified service type, verify trusted-list status, review supervision evidence, and retain certificate-policy records.

*Selection Checklist* *EU eIDAS*

## EU eIDAS qualified trust services and QTSP selection

Select a qualified trust service provider by matching the needed eIDAS service type, confirming that the provider and service have qualified status in the relevant trusted list, and retaining the evidence that supports relying-party use.

This page is for procurement, product, security, legal, and relying-party teams evaluating qualified certificates, signatures, seals, timestamps, registered delivery, website authentication, attestations, archiving, or ledger services.

A QTSP selection record should prove three things: the requested service is a qualified trust service under eIDAS, the named provider and service appear with qualified status in the applicable EU Member State trusted list, and the technical and contractual evidence is sufficient for relying parties to validate the service later. Treat marketing claims, certificates, and audit reports as supporting evidence, not substitutes for trusted-list status.

## Definitions

### Qualified trust service

A qualified trust service is a trust service that meets the applicable requirements in eIDAS. The competent supervisory body grants qualified status to the provider and the specific service after the initiation review, and the provider may begin that qualified service only after the status appears in the relevant Member State trusted list.

**Why it matters here:** Procurement must match the exact listed service to the intended use. A provider's qualification for signature certificates, for example, does not establish qualification for time stamps, website authentication certificates, remote device management, or another service.

Sources:

- [Regulation (EU) No 910/2014, Articles 3, 21, and 22](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A02014R0910-20241018&ref=sorena.io)

### Qualified trust service provider

**Term:** QTSP

A QTSP is a trust service provider that provides one or more qualified trust services and has been granted qualified status by the responsible supervisory body. Qualified status applies to the provider and specific listed service, not automatically to every service from the same supplier.

**Why it matters here:** Selection must match the supplier's legal entity and the exact service to the relevant Member State trusted-list entry. A marketing claim, audit report, or certificate chain cannot replace that check.

Sources:

- [Regulation (EU) No 910/2014, Articles 3, 21, and 22](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A02014R0910-20241018&ref=sorena.io)

### Public key infrastructure

**Term:** PKI

PKI is the combination of certificate authorities, policies, keys, certificates, repositories, and certificate-status services used to bind identities or attributes to public keys and let relying parties validate certificate chains and status.

**Why it matters here:** PKI evidence is relevant to certificate-based qualified services, including qualified certificates for signatures, seals, and website authentication. It does not describe every qualified trust service and does not establish eIDAS qualified status without the trusted-list evidence.

Sources:

- [ETSI EN 319 411-1 V1.5.1 - General requirements for certificate-issuing TSPs](https://www.etsi.org/deliver/etsi_en/319400_319499/31941101/01.05.01_60/en_31941101v010501p.pdf?ref=sorena.io)

### Qualified certificate statements

**Term:** QCStatements

QCStatements are structured statements in an X.509 certificate that can declare facts relevant to qualified-certificate processing, such as the legal framework, qualified status, certificate purpose, QSCD relationship, retention period, or disclosure-statement location.

**Why it matters here:** For selection, QCStatements help distinguish signature, seal, and website-authentication certificate purposes and other issuer declarations. They do not replace the trusted-list check for the certificate-issuing qualified service.

Sources:

- [ETSI EN 319 412-5 V2.5.1 Certificate Profiles - QCStatements](https://www.etsi.org/deliver/etsi_en/319400_319499/31941205/02.05.01_60/en_31941205v020501p.pdf?ref=sorena.io)

## Classify the qualified trust service before shortlisting providers

Start with the exact trust-service function, because eIDAS distinguishes the provider from the qualified service it provides. A provider may be qualified for one service and not for another, and a certificate-issuing service may need further qualification for electronic signatures, electronic seals, or website authentication.

The consolidated eIDAS definition of trust service covers certificate issuance and validation, signature or seal creation and validation, preservation, remote signature or seal creation-device management, electronic attestations of attributes and their validation, electronic time stamps and their validation, registered delivery and related validation, electronic archiving, and electronic ledgers. Selection should begin with a service-type statement and the evidence output the relying party needs.

Article 24a requires listed qualified services and certificates from one Member State to be recognised in the other Member States for the categories it names. Cross-border recognition does not decide whether a person had authority to transact, whether a contract was formed, or whether Union or national law requires a separate form or sector-specific step.

- Name the output needed by the product or workflow: qualified certificate for electronic signature, qualified certificate for electronic seal, qualified certificate for website authentication, qualified time stamp, qualified registered delivery, qualified electronic attestation of attributes, qualified archiving, qualified ledger, preservation, validation, or remote QSCD management.
- Identify whether the service uses PKI public-key technology and, for certificate services, whether it is for electronic signatures, electronic seals, website authentication, or another listed certificate purpose.
- Separate qualified-service reliance from non-qualified trust services and nationally defined services; non-qualified or national entries may appear in trusted lists but must not be treated as eIDAS qualified status unless the trusted-list entry says so.
- For QWAC procurement, check that the certificate is issued by a QTSP and meets the Annex IV profile for website authentication rather than relying only on ordinary TLS certificate issuance.

Sources for this answer:

- [Regulation (EU) No 910/2014 (consolidated eIDAS text)](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A02014R0910-20241018&ref=sorena.io) - Defines trust services, qualified trust services, trust service providers, and qualified trust service providers, and sets the Article 24a cross-border recognition rules for the named qualified services and certificates.
- [ETSI TS 119 612 trusted lists](https://www.etsi.org/deliver/etsi_ts/119600_119699/119612/02.04.01_60/ts_119612v020401p.pdf?ref=sorena.io) - Specifies trusted-list service type identifiers, including qualified eIDAS service types and certificate-service qualifiers.
- [ETSI EN 319 412-5 QCStatements](https://www.etsi.org/deliver/etsi_en/319400_319499/31941205/02.05.01_60/en_31941205v020501p.pdf?ref=sorena.io) - Maps qualified certificate statements to eIDAS Annex I, Annex III, and Annex IV certificate requirements.

## Verify QTSP status in the EU trusted lists

Qualified status is not established by a sales deck or by a certificate chain alone. Under eIDAS, Member States maintain trusted lists with information on the qualified trust service providers they supervise and the qualified trust services those providers offer.

A relying team should validate the Member State trusted list through the Commission's List of Trusted Lists or a trusted-list browser, then record the service entry, service status, status start time, service digital identity, service supply points, and any service history that affects reliance.

- Confirm that the provider name, country, and service entry match the legal entity and service being purchased.
- Confirm that the current service status is granted or otherwise qualified for the exact service type; do not rely on a provider-level name match when the service entry is withdrawn, ceased, or for another service.
- For certificate services, retain the trusted-list qualifier showing whether the certificate set is for electronic signatures, electronic seals, or website authentication.
- Keep the trusted-list retrieval date, LOTL or trusted-list source, service digital identity, status history consulted, and validation tool or procedure used.

Sources for this answer:

- [Regulation (EU) No 910/2014 Article 22](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A02014R0910-20241018&ref=sorena.io) - Requires Member States to establish, maintain, and publish trusted lists for their qualified trust service providers and services.
- [Commission Implementing Decision (EU) 2025/2164 on Trusted List v6](https://eur-lex.europa.eu/eli/dec_impl/2025/2164/oj/eng?ref=sorena.io) - Applies the updated common trusted-list template based on ETSI TS 119 612 v2.4.1 from 29 April 2026.
- [ETSI trust service provider portal](https://portal.etsi.org/TB-SiteMap/ESI/Trust-Service-Providers?ref=sorena.io) - Explains that EU trusted lists are used to determine the qualified status and status history of trust service providers and services.

## Review supervision, conformity, and operational controls

A QTSP selection pack should include current service-level evidence. A historical listing alone is insufficient. eIDAS requires an audit by a conformity assessment body at least every 24 months, submission of the report within three working days of receipt, and notice to the supervisory body at least one month before a planned audit. Supervisory bodies may also audit or request conformity assessment and can withdraw qualified status where a failure is not remedied and withdrawal is justified by its extent, duration, and consequences.

For provider due diligence, ask for current conformity-assessment evidence, the certificate policy and certification practice statement where certificates are involved, the PKI disclosure statement or terms and conditions, security and incident-notification process, termination plan, and certificate-status service design. If the provider held qualified status before 20 May 2024, confirm the transition report required by 21 May 2026 for the amended identity and attribute-verification rules.

- Check whether the conformity assessment covers the provider and the specific qualified service. A general security-program assessment does not establish that scope. Record the report date and the next audit window.
- Request the certificate policy, certification practice statement, and PKI disclosure statement for qualified certificate services, including clear statements about EU qualified certificates and any QSCD dependency.
- Confirm that revocation and validity-status services support relying-party validation, including certificate database maintenance and automated per-certificate status information where qualified certificates are issued.
- Check the termination plan and continuity arrangements, because eIDAS requires retained information to remain accessible even after QTSP activities cease.

Sources for this answer:

- [Regulation (EU) No 910/2014 Articles 20, 21, and 24](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A02014R0910-20241018&ref=sorena.io) - Sets supervision, initiation, conformity assessment, trusted-list update, and QTSP operational requirements.
- [ETSI EN 319 411-2 EU qualified certificate requirements](https://www.etsi.org/deliver/etsi_en/319400_319499/31941102/02.06.01_60/en_31941102v020601p.pdf?ref=sorena.io) - EN 319 411-2 maps eIDAS qualified-certificate requirements to additional policy controls.

## Evidence to retain for relying-party and audit review

The retained evidence should let a later reviewer reconstruct why the service was treated as qualified at the time of use. This matters for signatures, seals, time stamps, registered delivery, QWACs, attestations, archiving, and ledgers where the legal or evidential conclusion depends on the qualified service and its validation context.

Keep evidence at the level of the transaction or certificate where reliance occurs as well as in procurement. A supplier file can support selection, but relying-party validation needs the certificate, signature or seal validation result, time-stamp or delivery evidence, trusted-list status, revocation status, and policy references used at the relevant validation time.

- Selection record: service need, selected eIDAS service type, provider legal name, Member State, trusted-list entry, service status, and status-history checks.
- Policy record: CP, CPS, PKI disclosure statement or terms, applicable certificate-policy OIDs or QCStatements, permitted use limits, and QSCD or remote QSCD statements where relevant.
- Validation record: certificate chain, signature or seal validation report, time stamp token or registered-delivery evidence, revocation status source, validation time, and the trusted-list or LOTL version used.
- Supervision record: conformity assessment reference, audit or supervisory evidence supplied by the provider, incident-notification route, termination-plan evidence, and owner for monitoring trusted-list status changes.
- Retention record: location, retention owner, retention period source, and fallback retrieval process if the QTSP ceases the service or transfers it.

Sources for this answer:

- [Regulation (EU) No 910/2014 Article 24](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A02014R0910-20241018&ref=sorena.io) - Requires QTSPs to record and keep accessible relevant issued and received data for legal evidence and continuity purposes.
- [ETSI EN 319 412-5 QCStatements](https://www.etsi.org/deliver/etsi_en/319400_319499/31941205/02.05.01_60/en_31941205v020501p.pdf?ref=sorena.io) - Describes QCStatements for qualified certificates, including retention-period and PKI disclosure statement locations.
- [European Commission eSignature building block](https://ec.europa.eu/digital-building-blocks/sites/spaces/DIGITAL/pages/467109036/eSignature?ref=sorena.io) - Provides Commission eSignature resources, including trusted-list tooling and validation support used by relying parties.

## QTSP selection checklist

Review this checklist before approving a QTSP for production or relying-party use. Each item should produce a stored record that can be rechecked when the product changes, the service is renewed, or the trusted-list status changes.

Escalate selection if the service is cross-border, combines qualified and non-qualified services, uses remote signing or sealing, depends on a QWAC in browser-facing flows, or supports evidence that may need to survive certificate expiry. Reopen the review after a service-status change, material provider change, planned cessation, incident, certificate-policy change, new subcontractor, renewed contract, or change in the relying-party validation policy.

- Service type confirmed: the required eIDAS qualified service is named and matches the business process.
- Trusted list verified: provider, Member State, service type, service digital identity, current status, and status history are recorded from the relevant trusted list or LOTL-backed tool.
- Policy evidence reviewed: CP, CPS, PDS or terms, qualified certificate profile, QCStatements, permitted uses, limitations, and status-service endpoints are retained.
- Supervision evidence reviewed: conformity assessment coverage, audit timing, supervisory status, termination plan, and incident route are documented.
- Relying-party validation tested: signature, seal, time stamp, registered-delivery, QWAC, attestation, archiving, or ledger validation can be reproduced with retained trusted-list and revocation evidence.
- Monitoring assigned: one owner monitors trusted-list and service-status changes, and one owner maintains retained evidence for certificates, transactions, and supplier due diligence.

### Is a provider a QTSP just because it issues certificates?

No. Under eIDAS, a QTSP is a trust service provider that provides one or more qualified trust services and has been granted qualified status by the supervisory body. For selection, verify the exact provider and service in the applicable trusted list.

### What is the most important evidence for EU eIDAS QTSP selection?

The core evidence is the trusted-list entry for the exact qualified service, supported by the service status, service digital identity, status history, certificate policy or CPS, PKI disclosure or terms, revocation and validation records, and conformity or supervision evidence.

Sources for this answer:

- [Regulation (EU) No 910/2014 Articles 20-24](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A02014R0910-20241018&ref=sorena.io) - Supports the checklist items on qualified status, supervision, trusted lists, EU trust mark, and QTSP operational requirements.
- [ETSI TS 119 612 trusted lists](https://www.etsi.org/deliver/etsi_ts/119600_119699/119612/02.04.01_60/ts_119612v020401p.pdf?ref=sorena.io) - Supports the checklist items for service type identifiers, service digital identity, status values, and trusted-list history.
- [ETSI EN 319 411-2 EU qualified certificate requirements](https://www.etsi.org/deliver/etsi_en/319400_319499/31941102/02.06.01_60/en_31941102v020601p.pdf?ref=sorena.io) - Supports the certificate-service due-diligence items on qualified certificate policy controls and Article 24 mapping.

*Recommended next step*

*Placement: before sources*

## Build a trusted-list-backed QTSP selection record

Sorena can help convert this checklist into provider due diligence, trusted-list validation, policy evidence, and retained relying-party records for EU eIDAS qualified trust service use.

- [Open Research Copilot for EU eIDAS](/solutions/research-copilot.md): Ask questions tied to cited sources about QTSP status, qualified service types, trusted lists, and certificate-policy evidence using the cited sources on this page.
- [Review EU eIDAS QTSP selection evidence](/contact.md): Check whether a provider shortlist, trusted-list validation record, and retained evidence set supports the qualified trust service being used.

## Primary sources

- [Regulation (EU) No 910/2014 (consolidated eIDAS text)](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A02014R0910-20241018&ref=sorena.io) - Primary legal source for eIDAS trust-service definitions, QTSP status, supervision, trusted lists, and qualified-service requirements.
  - Quote: "qualified trust service provider"
- [Commission Implementing Decision (EU) 2025/2164 on Trusted List v6](https://eur-lex.europa.eu/eli/dec_impl/2025/2164/oj/eng?ref=sorena.io) - Current technical specification and format source for eIDAS trusted lists, applying ETSI TS 119 612 v2.4.1 from 29 April 2026.
  - Quote: "ETSI TS 119 612 v2.4.1"
- [ETSI TS 119 612 trusted lists](https://www.etsi.org/deliver/etsi_ts/119600_119699/119612/02.04.01_60/ts_119612v020401p.pdf?ref=sorena.io) - Technical trusted-list source for service identifiers, status fields, service digital identity, and status history.
  - Quote: "Trusted Lists"
- [ETSI EN 319 411-2 EU qualified certificate requirements](https://www.etsi.org/deliver/etsi_en/319400_319499/31941102/02.06.01_60/en_31941102v020601p.pdf?ref=sorena.io) - EN 319 411-2 covers policy and security requirements for trust service providers issuing EU qualified certificates.
  - Quote: "Requirements for trust service providers issuing EU qualified certificates"
- [ETSI trust service provider portal](https://portal.etsi.org/TB-SiteMap/ESI/Trust-Service-Providers?ref=sorena.io) - ETSI overview explaining trusted-list use, conformity-assessment context, and the Commission List of Trusted Lists.
  - Quote: "Trusted Lists and Other Nationally Maintained Information"

## Related Topic Guides

- [eIDAS 2 deadlines and compliance calendar for EUDI Wallet and trust services](/artifacts/eu/electronic-identification-and-trust-services-regulation/deadlines-and-compliance-calendar.md): eIDAS 2 calendar separating binding EUDI Wallet, reporting, and trust-service dates from implementation milestones and technical programme updates.
- [eIDAS 2.0 vs eIDAS: EUDI Wallet and trust-service changes](/artifacts/eu/electronic-identification-and-trust-services-regulation/eidas2-vs-eidas.md): Compare the original eIDAS electronic identification and trust-service framework with the eIDAS 2.0 amendments for EUDI Wallets, relying parties, attestations, QWACs, and supervision.
- [eIDAS Certificates and Authentication: qualified certificates, QWACs, and validation checks](/artifacts/eu/electronic-identification-and-trust-services-regulation/certificates-and-authentication.md): Official source guide to eIDAS qualified certificates, website authentication certificates, trusted lists, relying-party checks, and validation evidence.
- [eIDAS checklist and evidence pack for trust services, signatures, and EUDI Wallet relying parties](/artifacts/eu/electronic-identification-and-trust-services-regulation/checklist-and-evidence.md): Build an eIDAS evidence pack for qualified trust services, electronic signatures, trusted-list checks, certificate validation, supervisory records, and EUDI Wallet relying-party controls.
- [eIDAS compliance guide for trust services, QTSPs, signatures, and EUDI Wallet relying parties](/artifacts/eu/electronic-identification-and-trust-services-regulation/compliance.md): Official source eIDAS compliance guide for trust-service classification, QTSP supervision evidence, qualified signatures, seals, time stamps, certificates, trusted-list validation, and EUDI Wallet relying-party records.
- [eIDAS electronic signatures: SES, AES, QES legal effect and evidence](/artifacts/eu/electronic-identification-and-trust-services-regulation/electronic-signatures-and-legal-effect.md): An official source guide to eIDAS electronic-signature legal effect: SES, AES, QES, qualified certificates, QTSP trusted-list checks, validation, recognition, and evidence records.
- [eIDAS penalties and fines for trust service providers](/artifacts/eu/electronic-identification-and-trust-services-regulation/penalties-and-fines.md): Guide to eIDAS Article 16 fine floors, national penalty rules, supervisory action, qualified-status withdrawal, and trusted-list evidence.
- [eIDAS QES validation checks for relying parties](/artifacts/eu/electronic-identification-and-trust-services-regulation/qes-validation.md): How to validate a qualified electronic signature under eIDAS: certificate, QTSP, trusted-list, QSCD, integrity, validation result, and evidence records.
- [eIDAS remote signature and cloud HSM controls for QTSPs](/artifacts/eu/electronic-identification-and-trust-services-regulation/remote-signature-and-cloud-hsm-controls.md): Source-grounded guide to eIDAS remote signature controls: remote QSCD scope, server-side signing, QTSP evidence, signer authentication, certificate validation, and trusted-list checks.
- [eIDAS signature legal effect selector: SES, AES, AES-QC, or QES](/artifacts/eu/electronic-identification-and-trust-services-regulation/signature-legal-effect-selector-workflow.md): Compare eIDAS signature levels by legal effect, governing form rules, qualified certificate status, QTSP evidence, QSCD use, validation, and public-service recognition.
- [eIDAS trust service role scoping workflow: TSP, QTSP, validator, relying party, or QTSP customer](/artifacts/eu/electronic-identification-and-trust-services-regulation/trust-service-role-scoping-workflow.md): Classify an eIDAS role by evidence: trust service provider, qualified trust service provider, signature or seal validator, EUDI Wallet relying party, relying party, or customer of a QTSP.
- [eIDAS trusted list validation: LOTL, QTSP status, and evidence](/artifacts/eu/electronic-identification-and-trust-services-regulation/trust-list-validation.md): How to validate EU eIDAS trusted-list evidence: start from the Commission LOTL, confirm QTSP and qualified-service status, check certificate path and revocation data, and retain validation reports.
- [eIDAS vs ESIGN and UETA: EU qualified signatures vs U.S. e-signature laws](/artifacts/eu/electronic-identification-and-trust-services-regulation/eidas-vs-esign-and-ueta.md): Compare eIDAS with ESIGN and UETA for electronic signatures, qualified certificates, trust services, cross-border recognition, validation evidence, and source gaps.
- [eIDAS vs ETSI EN 319 401: legal supervision and TSP policy requirements](/artifacts/eu/electronic-identification-and-trust-services-regulation/eidas-vs-etsi-en-319-401.md): Compare eIDAS and ETSI EN 319 401 for trust services: legal scope, QTSP supervision, conformity assessment, audits, incident evidence, and operational controls.
- [eIDAS vs GDPR for identity data: wallet, trust-service, and privacy obligations](/artifacts/eu/electronic-identification-and-trust-services-regulation/eidas-vs-gdpr-identity-data.md): Compare eIDAS identity, trust-service, and EUDI Wallet rules with GDPR duties for personal-data processing, minimisation, lawful basis, evidence, security, and user rights.
- [eIDAS vs NIS2 for trust service providers: QTSP and cybersecurity obligations](/artifacts/eu/electronic-identification-and-trust-services-regulation/eidas-vs-nis2-trust-services.md): Compare eIDAS trust-service and QTSP duties with NIS2 cybersecurity risk-management, incident reporting, supervision, and evidence duties for trust service providers.
- [Electronic Attestations of Attributes under EU eIDAS: EAA, QEAA, issuers, wallets, and validation](/artifacts/eu/electronic-identification-and-trust-services-regulation/electronic-attestations-of-attributes.md): Official source guide to electronic attestations of attributes under amended EU eIDAS: EAA, QEAA, public-sector authentic-source attestations, wallet use, issuer checks, relying-party validation, revocation, and legal effect.
- [EU eIDAS Applicability Test for Trust Services, Wallets, and Certificates](/artifacts/eu/electronic-identification-and-trust-services-regulation/applicability-test.md): An official source eIDAS scope test for QTSPs, trust services, electronic signatures, seals, timestamps, QWACs, EUDI Wallet relying parties, and cross-border recognition evidence.
- [EU eIDAS attribute attestations: EAA, QEAA, wallet, and relying party checks](/artifacts/eu/electronic-identification-and-trust-services-regulation/faq/attribute-attestations.md): What electronic attestations of attributes mean under eIDAS, how QEAAs differ from public-sector and non-qualified attestations, and what issuers, wallets, and relying parties should verify.
- [EU eIDAS checklist for signatures, trust services, and wallets](/artifacts/eu/electronic-identification-and-trust-services-regulation/checklist.md): Checklist for eIDAS trust-service and EUDI Wallet controls: qualified status, trusted lists, certificates, signatures, seals, timestamps, validation evidence, and relying-party records.
- [EU eIDAS FAQ: signatures, QTSPs, trusted lists, QWACs, wallets, and validation](/artifacts/eu/electronic-identification-and-trust-services-regulation/faq.md): FAQ on eIDAS trust services and the European Digital Identity framework, covering advanced and qualified electronic signatures, QTSP status, trusted lists, QWACs, EUDI Wallet relying parties, attestations of attributes, and validation evidence.
- [EU eIDAS QTSP authorization and supervision guide](/artifacts/eu/electronic-identification-and-trust-services-regulation/qtsp-authorization-and-supervision.md): How qualified trust service providers obtain and keep qualified status under eIDAS, including conformity assessment reports, supervision, trusted lists, incidents, and evidence.
- [EU eIDAS QTSP Due Diligence Workflow for Trusted Lists, Certificates, and Evidence](/artifacts/eu/electronic-identification-and-trust-services-regulation/qtsp-due-diligence-workflow.md): Check a qualified trust service provider under eIDAS by validating trusted-list status, qualified service scope, certificates, policies, supervision, audits, and retained evidence.
- [EU eIDAS Requirements for Trust Services, Signatures, Seals, Wallets, and Evidence](/artifacts/eu/electronic-identification-and-trust-services-regulation/requirements.md): Official source guide to core eIDAS requirements for trust service providers, qualified trust services, electronic signatures, seals, time stamps, trusted lists, and EUDI Wallet relying parties.
- [EU eIDAS Trusted Lists FAQ: LOTL, QTSP status, and validation evidence](/artifacts/eu/electronic-identification-and-trust-services-regulation/faq/trusted-lists.md): How EU eIDAS Trusted Lists and the Commission LOTL support QTSP and qualified trust-service validation, with practical evidence checks for relying parties.
- [EUDI Wallet readiness for service providers under eIDAS](/artifacts/eu/electronic-identification-and-trust-services-regulation/eudi-wallet-readiness.md): Readiness guide for organisations preparing to request or verify data from European Digital Identity Wallets: roles, registration, ARF alignment, selective disclosure, implementing acts, and evidence.
- [EUDI Wallet Relying Parties under eIDAS](/artifacts/eu/electronic-identification-and-trust-services-regulation/faq/eudi-wallet-relying-party.md): What EUDI Wallet relying parties must do under eIDAS, when the harmonised registration rules apply, and how to control requested data, identification, validation, and evidence.
- [EUDI Wallet Relying Party Onboarding Workflow under eIDAS](/artifacts/eu/electronic-identification-and-trust-services-regulation/wallet-onboarding-workflow.md): Prepare an eIDAS wallet-relying-party registration, intended-use record, access-certificate controls, attribute request, validation evidence, and intermediary safeguards.
- [EUDI Wallet Relying Party Registration Under eIDAS](/artifacts/eu/electronic-identification-and-trust-services-regulation/eudi-wallet-relying-party-registration.md): What eIDAS Article 5b and the EUDI Wallet ARF say about wallet relying party registration, intended uses, attribute requests, certificates, evidence, and Member State gaps.
- [EUDI Wallet Technical Architecture Guide under eIDAS](/artifacts/eu/electronic-identification-and-trust-services-regulation/eudi-wallet-technical-architecture-guide.md): Technical guide to the EUDI Wallet architecture: ARF roles, wallet units, PID and attestations, relying parties, trust model, certificates, protocols, privacy, and security controls.
- [QES vs AdES under EU eIDAS: legal effect, certificates, QTSPs, and validation evidence](/artifacts/eu/electronic-identification-and-trust-services-regulation/faq/qes-vs-ades.md): Compare qualified electronic signatures (QES) and advanced electronic signatures (AdES) under EU eIDAS, including legal effect, qualified certificates, QTSP status, QSCDs, and validation evidence.
- [QWACs under eIDAS: website authentication certificates](/artifacts/eu/electronic-identification-and-trust-services-regulation/qwacs.md): A source-grounded guide to qualified website authentication certificates under eIDAS, covering Annex IV data, trusted lists, browser recognition, validation evidence, and QTSP checks.
- [What eIDAS Covers: eID, Trust Services, EUDI Wallet, and QWACs](/artifacts/eu/electronic-identification-and-trust-services-regulation/what-eidas-covers.md): A source-grounded guide to the systems and services covered by EU eIDAS: notified electronic identification, trust services, signatures, seals, time stamps, registered delivery, website authentication, trusted lists, the EUDI Wallet, and attribute attestations.
- [What is a qualified trust service provider under eIDAS?](/artifacts/eu/electronic-identification-and-trust-services-regulation/faq/qualified-trust-service-provider.md): How to verify QTSP status under eIDAS using the qualified service, supervisory body decision, trusted list entry, conformity assessment evidence, and service-specific records.
- [What is a QWAC under the EU eIDAS Regulation?](/artifacts/eu/electronic-identification-and-trust-services-regulation/faq/qwac.md): Plain-language FAQ on qualified website authentication certificates under eIDAS, including website identity, QTSP trusted-list checks, browser recognition, and validation evidence.


---

[Privacy Policy](https://www.sorena.io/privacy.md) | [Terms of Use](https://www.sorena.io/terms-of-use.md) | [DMCA](https://www.sorena.io/dmca.md) | [About Us](https://www.sorena.io/about-us.md)

(c) 2026 Sorena AB (559573-7338). All rights reserved.

Source: https://www.sorena.io/artifacts/eu/electronic-identification-and-trust-services-regulation/qualified-trust-services-and-qtsp-selection.md