eIDAS V2 - Qualified Electronic Registers
New eIDAS V2 Trust Service
It is aimed at public and private organizations needing to prove the anteriority, sequence or integrity of digital information: digital service operators, public bodies, regulated players, blockchain providers, financial, logistics or critical infrastructure entities.
eIDAS V2 regulation for Qualified Electronic Registers
The eIDAS v2 framework defines the requirements for guaranteeing service reliability and continuity.
The service provider must demonstrate :
- Controlled governance of the service (processes, responsibilities, supervision);
- Robust security covering distributed infrastructure and cryptographic mechanisms;
- Full traceability of operations recorded in the register;
- Mechanisms guaranteeing data immutability and integrity;
- Methods to ensure long-term preservation and independent verification of proofs.
The service is evaluated on the basis of European Trusted Service Provider (TSP) standards:
| Reference | Status | Subject | Role in assessment | |||
| ETSI EN 319 401 | European standard | General requirements applicable to all trust services | Governance framework, organization, security and internal control of the provider | |||
| ETSI TS 119 535 | Central technical specification | Specific requirements for Qualified Electronic Registries | Defines the properties expected of the registry: immutability, reliable time-stamping, chaining of records, prevention of tampering, etc. |
|||
| ETSI TS 119 536 | Technical specification for auditing | Evaluation criteria and audit methods for qualified registers | Direct basis for certification audit, structure of report to supervisory authority |
In particular, the ETSI TS 119 535 framework requires :
- Mechanisms to prevent retroactive modification (immutability)
- Secure time-stamping (often based on EN 319 422 qualified time-stamping)
- Traceable and verifiable logging
- Proven integrity without dependence on an uncontrolled third party
- Mathematical proof of ledger consistency
Certification attests to compliance with technical standards. Qualification is then issued by the national supervisory authority, enabling inclusion in the European Trusted List (EUTL).
Who is eIDAS certification intended for?
Certification is aimed at organizations providing or offering a distributed ledger service in a context requiring proof, trust and sustainable preservation, including:
- Blockchain / DLT providers operating shared registries;
- Operators of digital services integrating a proof-of-integrity mechanism;
- Public authorities managing administrative or legal registers;
- Financial and logistics players requiring opposable traceability;
- Publishers of multi-actor flow or transaction management solutions.
The certification demonstrates the service's mastery and alignment with eIDAS v2 requirements.
What does LSTI do for you?
LSTI acts as a Certification Body, as an independent third party. As such, LSTI :
- Carries out the assessment audit of the electronic archiving service,
- Verifies compliance with the requirements of ETSI standards,
- Produce a structured, verifiable certification report.
Certification is the objective element on which the supervisory authority bases its qualification decision.
Why Choose LSTI?
Recognized expertise
With more than twenty years of experience, LSTI supports more than 300 organizations in France and across Europe as a certification body and leading assessment center, operating in the fields of cybersecurity, digital trust, and information security.
Specialized Auditors
Our audit teams are composed of experienced professionals who are well-versed in ANSSI’s cybersecurity standards, information security management practices, and European digital trust frameworks. Their approach ensures rigorous, balanced assessments that are tailored to the operational contexts of each organization.
Independent Third Party and Dedicated Support
LSTI guarantees impartiality, transparency, and consistency throughout the entire process: preparation, audits, monitoring, and renewals. A dedicated point of contact ensures continuity and clarity throughout the certification process.