eIDAS FAQ

Yes. The eIDAS regulation and the Czech law on trust-building services also stipulate obligations for so-called unqualified trust-building services, which may be, for example, a company offering verification of electronic signatures within the file service, issuers of SSL certificates ....

Whereas previously these providers were unregulated, they are now covered by eIDAS and, for example, they can be sanctioned up to CZK 2 million for not accepting or not reporting security incidents.

The eIDAS Regulation defines a total of 7 of the following trust-building services: issuance of qualified certificates for electronic signatures, electronic seals, time stamps and website authentication (SSL certificates), as well as electronic signature / seal validation services, electronic signature storage and electronic registered delivery. e-Delivery).

While the electronic signature is always associated with a specific natural person (person), the electronic seal is tied to the organization and in the electronic world performs a similar function as in the paper world a company stamp.

Unlike the previously used electronic mark, however, it is not possible to use the electronic seal on documents that were not created in our organization (of which I am not the originator).

The main difference between an unqualified and a qualified trust service is the liability and warranty for the services provided. While in the case of unqualified services the burden of proof lies with the person claiming the damage, in the case of qualified services the operator of the service in question must prove that he has made every effort to prevent the damage.

If he does not do so, he is fully responsible for the damage. At the same time, qualified services can use the internationally recognized "EU Trust Mark" for their labeling.

The EU Trust Mark is an internationally recognized designation for so-called qualified trust service providers under the eIDAS Regulation. The aim of the EU trust mark is to guarantee that a given service or product meets the maximum level of quality and that these services fully comply with the requirements of the eIDAS Regulation, its implementing regulations, ETSI standards and national legislation, which has been verified by an independent conformity assessment body.

A necessary condition for obtaining the status of a qualified trust-building service is obtaining a so-called declaration of conformity. This will be issued to you by the company TAYLLORCOX, which acts as a so-called conformity assessment body according to the eIDAS Regulation.

TAYLLORCOX has gained the trust of all three authorities for electronic signatures in the Czech Republic and at the same time was the first in the Czech Republic to successfully service its customer through the entire process of gaining the status of a qualified trust-creating service. Our qualified experts will help you to gain the status and brand of EU trust for you as well.

Qualified service status is a confirmation for the highest quality trust-building services that meet not only all relevant requirements of the eIDAS Regulation and other applicable regulations and technical standards, but also security or work with personal data.

Along with the status of a qualified trust-building service, you can start using the EU trust mark and at the same time offer your product not only in the Czech Republic but also in other European countries, and customers will know that they can rely on it as much as possible.

The status of a qualified service should be a matter of course for solutions delivered to the public administration, which already requires these services (especially in the field of electronic signatures) in tenders, and this requirement will be even more frequent in the future.

The eIDAS Regulation is binding in all 28 countries of the European Union, as well as in Iceland, Liechtenstein and Norway. Thanks to the declaration and conformity and registration on the relevant list of trusted services, you can offer your product or service on the markets of 31 European countries.

If you or your customers also want to use the invoice as a tax document, it should be electronically signed. However, you do not need to have a secure means for such a signature, and an electronic signature based on a qualified certificate issued by one of the certification authorities in the Czech Republic is enough:

First Certification Authority (ICA)
PostSignum (Czech Post)
eIdentity

Unfortunately you can't. While eIDAS stipulates that an electronic document must not be denied legal effects and may not be rejected as evidence in judicial or administrative proceedings simply because it is in electronic form, it also states that the form and procedures must comply with national legislation. In this context, it is necessary to realize that a qualified electronic signature does not have the effects of an officially verified signature and Act No. 298/2016 Coll., Even made it impossible for some submissions to make them electronically.