A vendor's procurement form asks for a QES. You're not sure what that is or whether the contract really needs one. Most don't. Here's the honest filter.
What QES is
A Qualified Electronic Signature (QES) under eIDAS is the top tier of three. It requires:
- A qualified certificate from a qualified trust service provider (QTSP) on the EU Trusted List. - A qualified signature creation device (QSCD) — typically a hardware token or secure cloud signing service. - An advanced electronic signature structure underneath.
Legally, a QES is treated as equivalent to a handwritten signature throughout the EU and (via UK eIDAS) the UK.
When QES is actually required
Specific national law sometimes mandates it. Examples:
- Germany: certain employment terminations, some real estate transactions. - France: notarised deeds, certain public sector procurement. - Italy: some commercial filings, certain corporate documents. - Spain: government filings, some tax procedures.
Within the EU, the rule is usually local — Italian QES is recognised in France for legal effect, but whether you *need* QES is set by the law of the country where the document operates.
When SES is enough
Most everyday business signing — NDAs, supplier contracts, employment offers, consultancy engagements, consumer agreements, terms acceptance. None of these usually require QES.
The contract itself can stipulate a signature standard, of course. If a procurement counterparty demands QES even where law doesn't require it, route through a QTSP. For your own contracts, default to SES via Flint's signing tool and reserve QES for the few cases that need it.
Getting a QES
You can't QES-sign in a browser by default. QES requires:
1. Identity verification with a qualified provider (passport, video interview, in-person check). 2. Issuance of a qualified certificate, tied to you and held in a QSCD. 3. Signing through a QSCD interface — a hardware token, a smart card, or a qualified cloud signing service.
Providers include Buypass, D-Trust, InfoCert, GlobalSign-qualified, and many national-level QTSPs. Fees apply per certificate; some are valid for years.
FAQ
Is QES needed for cross-border EU contracts?
Usually no. SES is fine for ordinary cross-border commerce. QES is for cases where national law specifically requires handwritten-equivalent signing.
Can I QES in a browser?
Some QTSPs offer browser-based cloud QES via SCAL2 (Sole Control Assurance Level 2). Verify your provider supports this if you don't want hardware tokens.
Does the UK still accept EU QES?
Yes — UK eIDAS continues mutual recognition for trust services. Status remains under review; most QTSPs are recognised both ways at present.
Is a Flint signature QES?
No. Flint produces SES-level signatures with audit trail. For QES, route through a qualified provider — for most signing, Flint is sufficient.
Don't reach for QES if you don't need it. Use Flint for everyday signing; use a QTSP when the law demands.