Trust Service Provider: TSP and Qualified Services

A person or organization providing defined electronic trust services, with qualification assessed for the specific service.

Sarah Mitchell

Published on

2026-11-06

Last updated on

A TSP provides defined trust services, not merely trusted-looking software.
Qualification applies to the relevant service, scope and time.
Provider branding or platform acceptance does not qualify every related workflow.

What is a trust service provider?

In the EU eIDAS framework, a trust service provider (TSP) is a person or organization providing one or more electronic trust services. Examples include services relating to signature or seal certificates, timestamps, validation and preservation.

The Commission’s trust-services explanation describes these service categories. A TSP is not simply any company offering document storage or software with a “trusted” label.

TSP versus qualified trust service provider

A qualified trust service provider (QTSP) provides one or more qualified trust services after the applicable qualification process. The key question is which service is qualified, in what scope and at the relevant time.

The Commission’s trusted-list guidance explains that qualified status is linked to the provider and service listings. A provider can offer multiple services; qualification of one does not establish that every product, certificate or workflow bearing the brand has the same status.

What does the service actually do?

A service issuing certificates for signatures is not interchangeable with one issuing seal certificates or qualified timestamps. An organization’s seal and a person’s signature have different purposes. Validation and preservation services likewise address different parts of the lifecycle.

Check the actual credential, process and applicable requirements. A qualified provider’s involvement does not by itself prove a signer’s company authority, the truth of contract terms or that every generated signature is QES.

Provider status versus recipient acceptance

A platform’s accepted-provider list may describe technical compatibility or business policy. It is not automatically the EU qualification record. Establish the relevant regime and recipient requirements, especially when a US business works with an EU counterparty.

A Common Case: Checking an EU partner’s service requirement

For a Texas insurance business working with an EU partner, selecting a qualified trust service starts with identifying the exact required service. Checking its scope and relevant status makes the requirement concrete; the provider’s general branding does not complete that assessment.

FAQs

Does QTSP status mean every service from the provider is qualified?

No. Check the specific service, scope and status at the relevant time; qualification of one offering does not automatically qualify all others.

Is a platform’s accepted-provider list the EU trusted list?

Not necessarily. A platform can list compatible or accepted providers under its own policy, while EU qualified status is recorded through the relevant trusted-list framework.

跳转到章节