Qualified electronic archiving

The European eIDAS v2 regulation introduces the Qualified Electronic Archiving trust service, designed to ensure that a digital document retains its probative value over time.

This service ensures that the authenticity, integrity, traceability, availability and legibility of documents are preserved, even when formats, technologies or systems evolve.

Qualified electronic archiving is aimed at public and private organizations wishing to preserve digital documents in a reliable and legally enforceable way.

eIDAS V2 Regulation for Qualified Electronic Archiving

The qualified electronic archiving service is based on a set of requirements covering, in particular

Governance and control of the service,
Security of technical environments,
Chain-of-evidence management (integrity, sealing, time-stamping)
Long-term preservation and perpetuation mechanisms,
Transparency and contractual commitments.

The assessment is based on ETSI standards applicable to Trusted Service Providers (TSPs):

Reference	Subject	Contribution to qualified service
ETSI EN 319 401	General requirements for trust services	Governance, organization and internal control of the service provider
ETSI TS 119 511	Specific requirements for electronic archiving	Preservation of integrity and guarantee of probative value
ETSI TS 119 512	Managing and preserving the chain of evidence	Logging, auditability and traceability of operations
ETSI TS 119 513	Evaluation criteria and methods	Standards used for certification

Certification attests to the conformity of a service to the requirements of a standard.
Qualification, on the other hand, is decided by the supervisory authority and is a prerequisite for inclusion in the European Trusted List (EUTL).

Who is this eIDAS certification for?

Certification is intended for players who ensure the preservation of digital documents with a view to legal reliability, in particular :

outsourced electronic archiving service providers,
digital trust operators integrating an archiving function,
public or semi-public bodies managing administrative archives,
companies wishing to preserve documents with evidential value,
publishers of operated secure archiving solutions.

It demonstrates mastery of the processes, environments and protection mechanisms applied to digital archives.

LSTI's role

As such, LSTI :

carries out the evaluation audit of the electronic archiving service,
verifies compliance with the requirements of ETSI standards,
draws up a structured, verifiable certification report.

Certification is the objective element on which the supervisory authority bases its qualification decision.

Request a quote

Why choose LSTI?

Recognized expertise

With over twenty years' experience, LSTI supports more than 300 organizations in France and Europe as a certification body and benchmark assessment center in the fields of cybersecurity, digital trust and information security.assessment center, working in the fields of cybersecurity, digital trust and information security.

Specialized auditors

Our teams of auditors are made up of experienced professionals who are fully conversant with the ANSSI's cybersecurity standards, information security management practices and European digital trust frameworks.curity standards, information security management practices and European digital trust frameworks. Their approach guarantees assessments that are demanding, balanced and adapted to the operational contexts of each organization.

Independent third party and dedicated support

Authorized by ANSSI, LSTI guarantees impartiality, transparency and consistency throughout the entire cycle: preparation, audits, monitoring and renewals. A dedicated contact ensures continuity and clarity throughout the certification process.