A qualified trust service provider is an organisation supervised by a member state and granted qualified status for one or more specific trust services. Those include issuing qualified certificates, timestamps and attestations of attributes, and managing remote signature and seal creation devices. Its status and the services it covers appear on the national trusted list.
Legal termReviewed 7 October 2026
In the trust layer that every party uses to check who signed what.
Issuer
Signs credentials: a member state, university, bank or employer
Issuance
EUDI Wallet
Belongs to the user, who decides what to share
Presentation
Relying party
The service that requests and checks the data
Trust layer: who is allowed to sign, and is it still valid?
Rules: the law and technical framework behind it all
Qualified status is not self-declared. A provider goes through conformity assessment, is supervised by a national body, and may not begin providing the qualified service until that status is on the trusted list. The listing is what lets a verifier anywhere in the EU rely on its output without a direct relationship. Audits repeat at least every 24 months.
QTSPs anchor the qualified tier across eIDAS. Qualified signatures, seals, timestamps and attestations all depend on one somewhere in the chain.
For most integrators a QTSP is a supplier rather than something to become. Becoming one is a regulated undertaking with continuing audit obligations.
Defined in
Regulation (EU) No 910/2014 Art. 3(16), 3(20), 20(1), 21 and 22, as amended by Regulation (EU) 2024/1183
Whether your signature carries qualified legal effect depends on having a QTSP in the chain. Settle that during procurement, not during a dispute.
Where you meet it
