What Is an Electronic Seal (eSeal)?
What Is an Electronic Seal (eSeal)?
An electronic seal (eSeal) is the digital equivalent of a stamp that a company seals an electronic document with. It proves a document was issued by a specific legal entity and that it has not been altered or tampered with. Under eIDAS, eSeals are the method by which organisations verify the origin and integrity of their electronic documents.
Electronic seal vs. electronic signature
Electronic seals and electronic signatures are closely related, but they serve different purposes, both from a legal and practical standpoint. They rely on the same underlying cryptographic mechanisms, and they both exist within the eIDAS’s trust services framework. The difference is who they're each attributed to. A signature is linked to a person, while a seal is linked to a legal entity.
Who can use each one?
Under eIDAS, an electronic signature can only be created by an individual. This might be for a contract signature, a transaction approval, or consenting to customer terms of service. The signature identifies the person in question and records their intent in relation to the document.
An electronic seal is the organisational counterpart to an electronic signature. In fact, companies themselves are barred from holding electronic signatures under eIDAS. So, when an organisation needs to attest that a document is genuinely theirs and has not been altered, a seal is the correct tool.
When does a document need an eSeal?
An electronic seal should be used in moments when a business needs to demonstrate that a document was issued by the organisation and is unaltered. It’s not for specific individual agreements.
Here are some typical use cases:
Issuing official documents at scale: certificates, statements, invoices, or regulatory filings generated in automated workflows
Attesting the origin of data: common in business-to-business transactions where organisational provenance matters
Securing automated processes: unlike an electronic signature, which typically requires a human action, an electronic seal can be applied programmatically, making it well suited to high-volume document issuance
Cross-border document exchange within the EU, where a seal issued by a recognised provider carries legal presumption of integrity across all member states
Types of electronic seals under eIDAS
eIDAS defines three tiers of eSeals, with each offering a higher level of legal assurance:
Simple (standard) electronic seal: This is the baseline tier. A simple eSeal just needs to confirm that a document comes from a specific source and has not been changed, and there are no prescribed technical standards for how this should be achieved.
Advanced electronic seal An advanced electronic seal must meet the requirements set out in Article 36 of eIDAS. First, it must be uniquely linked to the legal entity that created it. But beyond that, it must be capable of identifying that entity, created using electronic seal creation data that is under the entity's sole control, and linked to the sealed data in such a way that further changes are detectable.
Qualified electronic seal: Qualified eSeals are the highest tier, and they represent the strongest form of organisational attestation under EU law. They are created by a qualified electronic seal creation device (QESCD), and based on a qualified certificate issued by a qualified trust service provider (QTSP).
What makes a seal "qualified"?
Under Article 35(2) of eIDAS, a qualified electronic seal carries a legal presumption of integrity and of the correctness of the origin of the data to which it is linked. Three requirements must be met for a seal to carry qualified status under eIDAS:
A qualified certificate. Issued by a QTSP under Annex III of eIDAS, this certificate is what formally ties the seal to a specific, verified legal entity.
A qualified seal creation device (QESCD). The seal must be generated by a certified device meeting Annex II of eIDAS, the same technical standard used for qualified electronic signatures. This ensures the seal cannot be forged or replicated.
A qualified trust service provider. The QTSP issuing the certificate must hold qualified status from a national supervisory body and appear on the EU Trusted List.
Who is authorised to issue a qualified electronic seal?
As stated above, Qualified electronic seals can only be issued by a qualified trust service provider (QTSP): an organisation that has been formally assessed, granted qualified status by the national supervisory body in its member state, and added to that country's EU Trusted List. Learn more about QTSPs and qualified status here.
A qualified electronic seal certificate issued by a QTSP in one EU member state is automatically recognised across all other member states, meaning organisations don't need to obtain separate certificates for each jurisdiction in which they operate.
Businesses seeking to issue qualified electronic seals should work with a QTSP that is specifically authorised for that trust service. Not all QTSPs offer every qualified trust service; each provider's scope is defined by the services for which they have received qualified status.
Electronic seal devices and hardware tokens
There’s an important distinction to be made between the physical or hardware component involved in creating a qualified electronic seal and the legal concept itself.
An electronic seal creation device is defined, under eIDAS, as configured software or hardware used to create an electronic seal. A qualified electronic seal creation device (QESCD) is one that meets the specific requirements of Annex II of the Regulation.
In practice, qualified seal creation devices can take the form of hardware security modules (HSMs) managed by a QTSP on the organisation's behalf (sometimes referred to as remote seal creation) or dedicated hardware tokens held by the organisation itself. The important point is that the device must be certified to meet Annex II requirements for the seal it produces to carry qualified status. The hardware alone does not make a seal qualified; the qualified certificate issued by the QTSP and the device certification must both be in place.
Strengthen your trust services with Fourthline
Understanding where electronic seals fit within your document workflows is an important step in building a robust trust services strategy. Fourthline's qualified trust services can support your organisation across a range of regulated digital processes, from qualified electronic signatures to identity verification and AML compliance. To find out how our services can strengthen your compliance infrastructure, speak to our team.
FAQs
What is an electronic seal?
An electronic seal (eSeal) confirms that a document was issued by a specific legal entity (such as a company), is original and authentic, and has not been altered or tampered with. Under eIDAS, eSeals are how companies and institutions verify the origin and integrity of their electronic documents.
What is the difference between an electronic seal and an electronic signature?
While both eSeals and electronic signatures rely on the same cryptographic technology, they serve different purposes for different entities. An electronic signature is created by an individual; it identifies who the person is and records their intent in connection to a document. An electronic seal, on the other hand, is used by an organisation to verify the integrity and legitimacy of their electronic documents.
Who is authorised to issue a qualified electronic seal?
Only a qualified trust service provider (QTSP) that has achieved qualified status for that particular service can issue a qualified electronic seal. Not all QTSPs are authorised for every qualified trust service, so it's worth confirming that the provider you work with which services they are able to offer.
Is an electronic seal legally binding?
Yes. Under eIDAS, an electronic seal is legally binding. A qualified electronic seal goes further, carrying a statutory presumption that a document is both unaltered and originates from the organisation that sealed it. In fact, qualified electronic seals are the strongest form of organisational document attestation available under EU law.
An electronic seal (eSeal) is the digital equivalent of a stamp that a company seals an electronic document with. It proves a document was issued by a specific legal entity and that it has not been altered or tampered with. Under eIDAS, eSeals are the method by which organisations verify the origin and integrity of their electronic documents.
Electronic seal vs. electronic signature
Electronic seals and electronic signatures are closely related, but they serve different purposes, both from a legal and practical standpoint. They rely on the same underlying cryptographic mechanisms, and they both exist within the eIDAS’s trust services framework. The difference is who they're each attributed to. A signature is linked to a person, while a seal is linked to a legal entity.
Who can use each one?
Under eIDAS, an electronic signature can only be created by an individual. This might be for a contract signature, a transaction approval, or consenting to customer terms of service. The signature identifies the person in question and records their intent in relation to the document.
An electronic seal is the organisational counterpart to an electronic signature. In fact, companies themselves are barred from holding electronic signatures under eIDAS. So, when an organisation needs to attest that a document is genuinely theirs and has not been altered, a seal is the correct tool.
When does a document need an eSeal?
An electronic seal should be used in moments when a business needs to demonstrate that a document was issued by the organisation and is unaltered. It’s not for specific individual agreements.
Here are some typical use cases:
Issuing official documents at scale: certificates, statements, invoices, or regulatory filings generated in automated workflows
Attesting the origin of data: common in business-to-business transactions where organisational provenance matters
Securing automated processes: unlike an electronic signature, which typically requires a human action, an electronic seal can be applied programmatically, making it well suited to high-volume document issuance
Cross-border document exchange within the EU, where a seal issued by a recognised provider carries legal presumption of integrity across all member states
Types of electronic seals under eIDAS
eIDAS defines three tiers of eSeals, with each offering a higher level of legal assurance:
Simple (standard) electronic seal: This is the baseline tier. A simple eSeal just needs to confirm that a document comes from a specific source and has not been changed, and there are no prescribed technical standards for how this should be achieved.
Advanced electronic seal An advanced electronic seal must meet the requirements set out in Article 36 of eIDAS. First, it must be uniquely linked to the legal entity that created it. But beyond that, it must be capable of identifying that entity, created using electronic seal creation data that is under the entity's sole control, and linked to the sealed data in such a way that further changes are detectable.
Qualified electronic seal: Qualified eSeals are the highest tier, and they represent the strongest form of organisational attestation under EU law. They are created by a qualified electronic seal creation device (QESCD), and based on a qualified certificate issued by a qualified trust service provider (QTSP).
What makes a seal "qualified"?
Under Article 35(2) of eIDAS, a qualified electronic seal carries a legal presumption of integrity and of the correctness of the origin of the data to which it is linked. Three requirements must be met for a seal to carry qualified status under eIDAS:
A qualified certificate. Issued by a QTSP under Annex III of eIDAS, this certificate is what formally ties the seal to a specific, verified legal entity.
A qualified seal creation device (QESCD). The seal must be generated by a certified device meeting Annex II of eIDAS, the same technical standard used for qualified electronic signatures. This ensures the seal cannot be forged or replicated.
A qualified trust service provider. The QTSP issuing the certificate must hold qualified status from a national supervisory body and appear on the EU Trusted List.
Who is authorised to issue a qualified electronic seal?
As stated above, Qualified electronic seals can only be issued by a qualified trust service provider (QTSP): an organisation that has been formally assessed, granted qualified status by the national supervisory body in its member state, and added to that country's EU Trusted List. Learn more about QTSPs and qualified status here.
A qualified electronic seal certificate issued by a QTSP in one EU member state is automatically recognised across all other member states, meaning organisations don't need to obtain separate certificates for each jurisdiction in which they operate.
Businesses seeking to issue qualified electronic seals should work with a QTSP that is specifically authorised for that trust service. Not all QTSPs offer every qualified trust service; each provider's scope is defined by the services for which they have received qualified status.
Electronic seal devices and hardware tokens
There’s an important distinction to be made between the physical or hardware component involved in creating a qualified electronic seal and the legal concept itself.
An electronic seal creation device is defined, under eIDAS, as configured software or hardware used to create an electronic seal. A qualified electronic seal creation device (QESCD) is one that meets the specific requirements of Annex II of the Regulation.
In practice, qualified seal creation devices can take the form of hardware security modules (HSMs) managed by a QTSP on the organisation's behalf (sometimes referred to as remote seal creation) or dedicated hardware tokens held by the organisation itself. The important point is that the device must be certified to meet Annex II requirements for the seal it produces to carry qualified status. The hardware alone does not make a seal qualified; the qualified certificate issued by the QTSP and the device certification must both be in place.
Strengthen your trust services with Fourthline
Understanding where electronic seals fit within your document workflows is an important step in building a robust trust services strategy. Fourthline's qualified trust services can support your organisation across a range of regulated digital processes, from qualified electronic signatures to identity verification and AML compliance. To find out how our services can strengthen your compliance infrastructure, speak to our team.
FAQs
What is an electronic seal?
An electronic seal (eSeal) confirms that a document was issued by a specific legal entity (such as a company), is original and authentic, and has not been altered or tampered with. Under eIDAS, eSeals are how companies and institutions verify the origin and integrity of their electronic documents.
What is the difference between an electronic seal and an electronic signature?
While both eSeals and electronic signatures rely on the same cryptographic technology, they serve different purposes for different entities. An electronic signature is created by an individual; it identifies who the person is and records their intent in connection to a document. An electronic seal, on the other hand, is used by an organisation to verify the integrity and legitimacy of their electronic documents.
Who is authorised to issue a qualified electronic seal?
Only a qualified trust service provider (QTSP) that has achieved qualified status for that particular service can issue a qualified electronic seal. Not all QTSPs are authorised for every qualified trust service, so it's worth confirming that the provider you work with which services they are able to offer.
Is an electronic seal legally binding?
Yes. Under eIDAS, an electronic seal is legally binding. A qualified electronic seal goes further, carrying a statutory presumption that a document is both unaltered and originates from the organisation that sealed it. In fact, qualified electronic seals are the strongest form of organisational document attestation available under EU law.
Solutions
Solutions
Fourthline has been certified by EY CertifyPoint to ISO/IEC27001:2022 with certification number 2021-039.
Copyright © 2026 - Fourthline B.V. - All rights reserved.
Fourthline has been certified by EY CertifyPoint to ISO/IEC27001:2022 with certification number 2021-039.
Copyright © 2026 - Fourthline B.V. - All rights reserved.