EU · eIDAS Regulation (EU No 910/2014)

eIDAS Compliant Electronic Signatures

The eIDAS Regulation (EU No 910/2014) established a legal framework for electronic signatures across all European Union member states starting July 1, 2016. It defines three levels of electronic signatures: Simple Electronic Signatures (SES), Advanced Electronic Signatures (AdES), and Qualified Electronic Signatures (QES).

eIDAS Regulation (EU No 910/2014)

European Union · Enacted 2014

Key Provisions

Creates a single legal framework for electronic signatures across all EU member states

Defines three signature levels: Simple (SES), Advanced (AdES), and Qualified (QES)

Advanced signatures must be uniquely linked to the signatory and capable of identifying them

The signature creation data must be under the sole control of the signatory

Any subsequent change to the signed data must be detectable

A signature cannot be denied legal effect solely because it is electronic

The eIDAS Regulation (EU No 910/2014) established a legal framework for electronic signatures across all European Union member states starting July 1, 2016. It defines three levels of electronic signatures: Simple Electronic Signatures (SES), Advanced Electronic Signatures (AdES), and Qualified Electronic Signatures (QES). SignForge provides Advanced Electronic Signatures that meet eIDAS requirements for signer identification, document integrity, and sole control. Every signature is uniquely linked to the signatory via their email address and captured metadata. ECDSA P-256 cryptographic verification ensures non-repudiation, and SHA-256 hashing detects any post-signing tampering. SignForge is hosted on Hetzner infrastructure in Nuremberg, Germany — ISO 27001:2022 certified and BSI C5 Type 2 compliant — ensuring EU data residency by default.

Compliance Verified

How SignForge meets eIDAS Regulation requirements

Signer uniquely identified via email address, IP address, and user-agent metadata

Sole control ensured through unique cryptographic signing tokens sent only to the signer's email

ECDSA P-256 digital signatures on verification records provide non-repudiation

SHA-256 hashing before and after signing detects any data modification

Hosted on Hetzner infrastructure in Germany — EU data residency guaranteed

Infrastructure certified ISO 27001:2022 and BSI C5 Type 2

256-bit Encryption

TLS 1.3 + SHA-256

ECDSA P-256

Cryptographic proof

Audit Trail

Append-only, immutable

ISO 27001

Certified infrastructure

Frequently asked questions

What level of eIDAS electronic signature does SignForge provide?

SignForge provides Advanced Electronic Signatures (AdES). Each signature is uniquely linked to the signatory, created under their sole control (via secure email-based token), and any subsequent modification is detectable through SHA-256 hashing and ECDSA cryptographic verification.

Is SignForge data stored in the EU?

Yes. SignForge runs on Hetzner infrastructure in Nuremberg, Germany. All documents, signatures, and audit data are stored within the EU. Hetzner holds ISO 27001:2022 certification and BSI C5 Type 2 compliance, meeting the highest European standards for data security.

Are eIDAS electronic signatures accepted in all EU countries?

Yes. Under Article 25 of the eIDAS Regulation, an electronic signature cannot be denied legal effect solely because it is in electronic form. This applies across all 27 EU member states, plus EEA countries (Norway, Iceland, Liechtenstein).

Ready to sign with confidence?

Legally binding e-signatures with 256-bit encryption, cryptographic verification, and an immutable audit trail. Free forever.

Get started free

No credit card required.