Definition
The QES (Qualified Electronic Signature) is the electronic signature at the highest level defined by eIDAS.
It carries the same legal value as a handwritten signature and is automatically recognised throughout the EU. To be qualified, it must rely on a qualified certificate issued by a qualified TSP (Universign, Docaposte, Yousign), be created via a certified QSCD (Qualified Signature Creation Device), uniquely identify the signatory, and be linked to the signed data so that any change is detectable.
The 3 eIDAS signature levels
| Level | Abbr. | Identification | Legal value |
|---|---|---|---|
| Simple | SES | Weak (tick box, image) | Admissible but contestable |
| Advanced | AES | Medium (strong signatory/document link) | Admissible, signatory identified |
| Qualified | QES | Strong (qualified certificate + QSCD) | Handwritten-equivalent in the EU |
How to obtain a QES
The TSP verifies the signatory's identity (in person, synchronous video, the EUDI Wallet in time, or reuse of an existing verification), then issues an X.509 qualified certificate linked to that identity, published in the EU LOTL. The private key is protected by a QSCD that ensures it cannot be copied or used without the signatory: a smart card, a USB token, a cloud HSM (remote signing, common since 2024) or a smartphone's secure element (the EUDI Wallet model).
The signing process
Signature formats
PAdES (PDF, the most common for contracts), CAdES (binary files, emails), XAdES (XML documents, e-invoicing) and JAdES (JSON, for APIs). All carry a qualified timestamp proving the date and time of signing.
Use cases
- Contractual: home loans, large loans, electronic notarial deeds, business SEPA mandates, commercial leases, shareholders' agreements.
- Fintech: opening a substantial-level business account, life-insurance subscription, cross-border AISP/PISP journeys.
- Public sector: public procurement, URSSAF/VAT filings, e-government.
Remote signing via cloud HSM
A major evolution since 2018: the private key no longer resides on the signatory's device but in a certified HSM managed by the TSP; the signatory authorises the signature via 2FA and strong authentication (passkey, WebAuthn). Far more convenient than a card and a reader, for the same legal value. Massively adopted at Yousign, Universign, DocuSign EU Qualified and Adobe Sign QES.
The EUDI Wallet link (eIDAS 2)
With eIDAS 2, the EUDI Wallet natively includes a QES: the qualified key resides in the smartphone's secure element, and the citizen signs from their phone with no external TSP. A drop in friction that democratises the QES and will shake up the current players (DocuSign, Yousign, Universign), which will have to reposition around workflow, audit trail and integration.
Major players
- France: Universign (Signaturit group, the historical leader), Yousign (SaaS challenger, a €30M Series A in 2021), Docaposte (La Poste), Lex Persona, CertEurope.
- Europe: DocuSign EU and Adobe Sign (via TSP partners), InfoCert (Italy, Tinexta), D-Trust (Germany), Signicat (Norway).
Cost
AES: ~€0.50 to €5 per signature (often included in a subscription). One-shot QES: €5 to €25 per signature. QES by subscription: €50 to €200/year for an individual certificate.
What the QES is not
- Not a scanned signed PDF or a digitised handwritten signature (at best, an SES).
- Not mandatory for all contracts: most everyday deeds are valid with an SES or AES.
- Not an authentic deed: a notarial deed remains a notarial deed, signable by the parties with a QES.
- Not reserved for B2C: heavily used in B2B (public procurement, SEPA).
Within the PSD2 / Open Finance ecosystem
The QES is a key cog: a very strong second SCA factor (rarely used because of the friction), a business SEPA mandate for high amounts, and a building block of substantial-level remote KYC onboarding. eIDAS 2 and the EUDI Wallet are paving the way for its democratisation.
Real-world examples
- Online credit: Younited, Boursorama and Cetelem have the contract signed with a QES (Yousign, Universign) — enforceable like a handwritten one.
- Public procurement: tender responses signed with a QES (CertEurope, ChamberSign certificates).
- Notaries: the Authentic Digital Exchange between notaries uses the QES.
- Qonto: a QES on the terms and articles of association when opening an account for SAS/SARL companies.
- EUDI disruption: a German citizen will sign a French contract with a QES from their DE wallet, without paying DocuSign or Yousign — a business model for TSPs to rethink.