---
title: What is a Trust Service Provider? | Ascertia | Blog
description: What is a Trust Service Provider; and what role do they play in the creation, validation & preservation of digital signatures? We discuss on our blog.
image: https://blog.ascertia.com/hubfs/TSP-featured%20banner.jpg
---

[![](https://blog.ascertia.com/hubfs/asc-blog-logo-detail.png)](https://blog.ascertia.com/)

##### [View all posts](https://blog.ascertia.com/)

[Contact Us](https://www.ascertia.com/company/contact-us/)

# What is a trust service provider?

Posted by [Victoria Allen](https://blog.ascertia.com/author/victoria-allen) on Jan 25, 2021 10:30:20 AM

![](https://blog.ascertia.com/hubfs/Victoria%20Allen%20Headshot%202023.png)

A [Trust Service Provider (TSP)](https://www.ascertia.com/products/trust-service-providers/) is an entity that provides any number of trust services involved with the creation, validation and preservation of e-signatures, e-seals or digital certificates.

![What is a Trust Service Provider?](https://blog.ascertia.com/hs-fs/hubfs/TSP-featured%20banner.jpg?width=922&name=TSP-featured%20banner.jpg)

Security is of utmost importance to ensure the integrity of certificates provided in order to create electronic signatures. As many TSPs store signing keys and digital certificates, these must be stored securely in order to ensure the integrity of the certificates, [e-signatures](https://www.signinghub.com/electronic-signatures/) and [e-seals](https://www.signinghub.com/e-seals/) issued by the TSP.

TSPs must operate to a set of standards to ensure the security and validity of the certificates and authentication services they offer. The EU's [eIDAS regulation](https://www.signinghub.com/eidas-regulation/) has helped standardise the requirements for TSPs and provide organisations with a list of European Commission approved companies that they can trust.

Under the EU eIDAS regulation the definition of a trust service is:

An electronic service normally provided for remuneration which consists of:

- The creation, verification, and validation of electronic signatures, electronic seals or electronic timestamps, electronic registered delivery services and certificates related to those services, or
- The creation, verification and validation of certificates for website authentication; or
- The preservation of electronic signatures, seals or certificates related to those services

TSPs provide a combination of the above services – some only issue digital certificates, others provide electronic signature services as well. What is important is that all TSPs adhere to the strict requirements that ensure the validity and security of the certificates, keys and signatures they provide.

A list of EU Trusted Providers can be viewed on the [European Commission’s website](https://webgate.ec.europa.eu/tl-browser/#/).

## What is a Qualified Trust Service Provider?

A Qualified Trust Service Provider (QTSP) must comply with additional measures under the eIDAS regulation to provide qualified certificates, qualified electronic signatures, qualified electronic seals or qualified electronic signature creation devices.

In order to be listed and recognised as a QTSP, organisations must undergo an independent assessment and regular audits to ensure that they continue to adhere to the requirements set out by [eIDAS](https://en.wikipedia.org/wiki/EIDAS).

The additional requirements are to ensure that the integrity of the data held by QTSPs for the creation of digital certificates and signing keys is secure and protected to ensure validity.

Once an organisation has submitted the required information and QTSP status is awarded, the organisation can be listed as a QTSP on the European Council’s list of trusted providers.

## How do I get a Qualified Electronic Signature?

According to the eIDAS regulation, a Qualified Electronic Signature (QES) must adhere to the same definition as an [Advanced Electronic Signature](https://www.signinghub.com/security/advanced-electronic-signatures/)(AES),<https://www.signinghub.com/security/advanced-electronic-signatures/> but also:

- The user’s digital certificate must be issued by a trusted Qualified Certificate Authority
- The user’s signing key must be managed within a trusted Qualified Signature Creation Device ([QSCD](https://en.wikipedia.org/wiki/Secure_signature_creation_device))

Qualified Trust Service Providers are able to provide QES and are regarded as the highest level of trust.

Ascertia’s [ADSS SAM Appliance](https://www.ascertia.com/products/adss-server-sam-appliance/) is Common Criteria EAL4+ certified against the eIDAS ETSI EN 419 241 standard and the EN 419 241-2 Protection Profile with Level 2 Sole Control and is recognised as a QSCD and QSealCD.

Many TSPs and QTSPs use [Ascertia’s high-trust solutions](https://www.ascertia.com/) to deliver their services. [Contact us](https://www.ascertia.com/contact-us/) to discuss your requirements and how we can help.

[Visit Ascertia.com](https://www.ascertia.com/)

This is a search field with an auto-suggest feature attached.

 Search

- There are no suggestions because the search field is empty.

### Recent Posts

### Posts by Topic

- [News (64)](https://blog.ascertia.com/tag/news)
- [Digital Trust (51)](https://blog.ascertia.com/tag/digital-trust)
- [Esignatures & Digital Signatures (41)](https://blog.ascertia.com/tag/esignatures-digital-signatures)
- [Esignatures, Digital Signatures & Digital Signing (25)](https://blog.ascertia.com/tag/esignatures-digital-signatures-digital-signing)
- [Remote Signing (21)](https://blog.ascertia.com/tag/remote-signing)
- [Ascertia Partners (16)](https://blog.ascertia.com/tag/ascertia-partners)
- [Business Process & Workflow Efficiencies (15)](https://blog.ascertia.com/tag/business-process-workflow-efficiencies)

### Subscribe to Blog

### Download this essential eBook

Choosing the right type of e-signature  
for your business

[![Download your eBook](https://no-cache.hubspot.com/cta/default/2937299/065619c2-b2d6-4c65-9820-92c7e0dceaa8.png)](https://cta-redirect.hubspot.com/cta/redirect/2937299/065619c2-b2d6-4c65-9820-92c7e0dceaa8)

- Signing
- EU eIDAS Compliant Advanced & Qualified Signatures
- [SigningHub](https://www.ascertia.com/products/signinghub/)
- [ADSS Signing Server](https://www.ascertia.com/products/adss-signing-server/)

- PKI
- Modular solution for your Trust Service needs
- [ADSS Certificate Authority](https://www.ascertia.com/products/adss-ca-pki-server/)
- [ADSS Registration Authority](https://www.ascertia.com/products/adss-ra-server/)
- [ADSS Validation Authority](https://www.ascertia.com/products/adss-ocsp-server/)
- [ADSS Time Stamp Authority](https://www.ascertia.com/products/adss-tsa-server/)
- [ADSS Archive Authority](https://www.ascertia.com/products/adss-ltans-evidence-server/)

- Tools
- Integrate, test & monitor your Trust Services
- [ADSS Auto File Processor](https://www.ascertia.com/products/adss-auto-file-processor/)
- [ADSS Client SDK](https://www.ascertia.com/products/adss-client-sdk/)

- Solutions
- [Mobile Signatures](https://www.ascertia.com/solutions-by-technology/mobile-signing/)
- [Remote (Cloud) Signing](https://www.ascertia.com/solutions-by-technology/remote-signing/)
- <https://www.linkedin.com/company/ascertia> <https://www.youtube.com/user/ESIGNwithAscertia>

[Terms of Use](https://www.ascertia.com/terms-of-use/)   |   [Privacy Policy](https://www.ascertia.com/company/privacy-policy/)   |   © Ascertia. All rights reserved. ISO 9001:2015 Certified