Evrotrust: A European Leader in Qualified Electronic Signatures

What Is Evrotrust?

Evrotrust is a Bulgarian-based Qualified Trust Service Provider (QTSP) that provides eIDAS-compliant qualified electronic signatures (QES) through a mobile application. Founded to enable secure digital transactions across emerging European markets, Evrotrust has grown into one of the region’s most comprehensive QES platforms.

Official eIDAS Recognition

In July 2023, Evrotrust achieved a significant milestone: official recognition as a notified eID scheme under the eIDAS Regulation. This designation means Evrotrust is recognized as Bulgaria’s national electronic identification system, placing it alongside government-backed identity schemes like Belgium’s itsme or Estonia’s e-Residency.

QTSP Certification and Supervision

Beyond its notified eID status, Evrotrust operates as a fully certified Qualified Trust Service Provider supervised by Bulgaria’s Communications Regulation Commission (CRC). This means Evrotrust:

• Undergoes regular third-party conformity assessments
• Maintains ISO 27001 information security certification
• Issues qualified certificates meeting eIDAS technical standards
• Operates qualified signature creation devices (QSCDs)
• Appears on the EU Trusted List of qualified trust service providers

Geographic Coverage: 58 Countries

Evrotrust’s standout feature is its exceptional geographic reach. The platform supports qualified electronic signatures for users in 58 countries across multiple continents:

European Union & EEA

All 27 EU member states plus Iceland, Liechtenstein, and Norway—ensuring complete coverage across the Single Market and beyond.

Eastern Europe & Balkans

Albania, Belarus, Bosnia and Herzegovina, Kosovo, Moldova, Montenegro, North Macedonia, Serbia, Ukraine. This represents Evrotrust’s core strength—serving markets often overlooked by Western European QES providers.

Transcaucasus & Central Asia

Armenia, Azerbaijan, Georgia, Kazakhstan—enabling digital transformation in rapidly modernizing economies.

Global Markets

Australia, Canada, Israel, Kenya, New Zealand, Russia, Switzerland, Taiwan, Turkey, United Kingdom, United States—extending QES capabilities to major international business hubs.

How Evrotrust Works: The Technical Process

Evrotrust’s qualified electronic signature process combines advanced identity verification with user-friendly mobile technology. Understanding this workflow helps evaluate whether Evrotrust fits your operational requirements.

Step 1: Initial Registration and Identity Verification

Unlike traditional QES methods requiring in-person identity verification, Evrotrust pioneered a fully remote onboarding process that maintains qualified status:

1Download the Evrotrust Mobile App

Available for iOS and Android, the Evrotrust app serves as your qualified signature creation device (QSCD). The app must be downloaded before creating your first signature.

2Document Capture

Users photograph their government-issued identity document (passport or national ID card) using the app’s built-in camera. Evrotrust’s verification system:

• Validates document authenticity through security feature analysis
• Extracts personal data using optical character recognition (OCR)
• Checks document against international databases
• Verifies document hasn’t expired or been reported stolen

3Facial Recognition and Liveness Detection

The app guides users through a facial biometric capture process that includes:

• Photo comparison: Matching the live selfie against the ID document photo
• Liveness detection: Confirming a real person is present (not a photograph or video)
• Biometric analysis: Creating a unique facial template for future authentication

4Dual Validation: AI + Human Expert Review

This is where Evrotrust’s qualified status is maintained. Every registration undergoes:

1. Automated AI analysis: Machine learning algorithms perform initial verification in seconds
2. Manual expert review: Trained identity verification specialists review flagged cases or high-risk registrations

This hybrid approach ensures the verification rigor required for qualified certificates while maintaining user convenience.

Step 2: Creating Qualified Electronic Signatures

After successful registration, signing documents with Evrotrust is straightforward:

1. Receive signature request: Via email or SMS with a secure signing link
2. Review document: Open the link to view the document requiring signature
3. Authenticate: Open Evrotrust app and authenticate using biometric (fingerprint/Face ID) or PIN
4. Confirm signature: Review signature details and confirm
5. Signature created: Qualified signature applied to document instantly

The entire process typically takes 30-60 seconds per signature once registered.

Technical Architecture: How QES Is Maintained

Evrotrust’s technical implementation ensures full eIDAS compliance:

Qualified Signature Creation Device (QSCD)

The Evrotrust mobile app contains QSCD functionality, meaning your private signing keys:

• Are generated securely within the device’s secure enclave
• Never leave your device
• Cannot be extracted or copied
• Are protected by device-level encryption

Qualified Certificates

Each Evrotrust user receives a qualified certificate issued by Evrotrust’s root certificate authority, which:

• Contains verified identity information
• Includes a unique serial number
• Is published on Evrotrust’s public certificate repository
• Can be validated against certificate revocation lists (CRLs)
• Expires after three years (renewable)

Timestamp Services

Every Evrotrust signature includes a qualified timestamp proving the exact moment the signature was created, providing legal certainty about signing time.

Evrotrust vs Other QES Methods

When evaluating Evrotrust against other qualified electronic signature solutions, several key differentiators emerge. Platforms like QES-Sign offer multiple QES methods, allowing comparison of capabilities.

Evrotrust vs itsme (Belgian Solution)

Evrotrust vs Adacom (Greek Solution)

Comparison Summary Table

When to Choose Evrotrust: Ideal Use Cases

Evrotrust excels in specific scenarios where its unique strengths provide maximum value.

Use Case 1: Eastern European Business Operations

Use Case 2: International Employment Contracts

Use Case 3: Cross-Border Real Estate Transactions

Use Case 4: NGOs and International Organizations

Non-governmental organizations operating across emerging European markets benefit from Evrotrust’s coverage of countries often underserved by Western European QES providers. Grant agreements, partnership MOUs, and donor contracts require qualified signatures across diverse jurisdictions.

Use Case 5: High-Volume Document Workflows

Organizations requiring frequent signatures from the same parties (recurring contracts, monthly reports, serial invoices) benefit from Evrotrust’s one-time registration model. After initial verification, signing takes just seconds—far faster than solutions requiring per-signature identity checks.

Advantages and Limitations of Evrotrust

Key Advantages

1. Exceptional Geographic Breadth

Evrotrust’s 58-country coverage spans markets often inaccessible through alternative QES providers, particularly in Eastern Europe, the Balkans, and Central Asia.

2. Fully Remote Onboarding

No in-person verification or physical presence required. Users can register from anywhere with a smartphone and internet connection.

3. Official eID Scheme Recognition

As Bulgaria’s notified eID scheme, Evrotrust carries additional authority beyond standard QTSP status—particularly valuable when interfacing with government agencies across the EU.

4. Efficient Repeat Signing

Once registered, users can create unlimited qualified signatures in seconds. Ideal for ongoing business relationships requiring multiple signed documents.

5. Modern Mobile-First Design

Built as a native mobile application from inception, Evrotrust offers intuitive smartphone-based signing that feels natural to contemporary users.

6. Competitive Pricing Structure

When accessed through platforms like QES-Sign, Evrotrust signatures start at €5 per signature with pay-per-use models—no subscription required.

Limitations to Consider

1. App Installation Mandatory

Users must download and maintain the Evrotrust mobile app. Organizations signing with external parties need to ensure signers are willing to install the app.

2. Initial Registration Time

The 5-15 minute initial verification (potentially 24 hours for complex cases) creates slight friction for first-time signers compared to instant verification alternatives.

3. Mobile Device Dependency

Signatures require a smartphone. Users without compatible devices cannot use Evrotrust.

4. Geographic Gaps

While 58-country coverage is extensive, notable absences include major markets like China, India, Brazil, and several African nations where competitors like Adacom provide coverage.

5. Less Established in Western Europe

Compared to itsme in Belgium or Netherlands, Evrotrust has lower brand recognition in Western European markets, potentially causing initial trust hesitation.

Evrotrust and eIDAS Compliance

Understanding Evrotrust’s eIDAS compliance is crucial for organizations in regulated industries or requiring maximum legal certainty.

Qualified Electronic Signature (QES) Status

All Evrotrust signatures meet Article 25(2) of the eIDAS Regulation, meaning they are legally equivalent to handwritten signatures across all EU member states. This equivalence applies to:

• Private contracts (employment, vendor agreements, NDAs)
• Commercial transactions (purchase orders, invoices)
• Real estate documentation (preliminary agreements, powers of attorney)
• Corporate documentation (board resolutions, shareholder agreements)

Cross-Border Recognition

As a notified eID scheme under Article 9 of eIDAS, Evrotrust signatures enjoy mandatory mutual recognition across all EU member states. This means:

• An Evrotrust signature created in Bulgaria must be recognized as valid in France, Germany, Spain, and all other EU countries
• Public sector entities cannot reject Evrotrust signatures solely because they originate from Bulgaria
• Courts must treat Evrotrust signatures as having maximum evidentiary weight

GDPR Compliance

Evrotrust’s identity verification and signature creation processes comply with the EU General Data Protection Regulation (GDPR). Personal data collected during registration:

• Is processed only for identity verification and signature creation purposes
• Is stored encrypted and protected according to ISO 27001 standards
• Can be accessed, rectified, or deleted by users exercising GDPR rights
• Is not shared with third parties except as required for signature verification

Verification and Audit Trail

Every Evrotrust signature includes comprehensive audit information:

• Signer identity: Name, date of birth, identity document details
• Qualified certificate: Serial number and issuing QTSP
• Timestamp: Precise moment of signature creation
• Document hash: Cryptographic proof of document integrity
• Signature algorithm: Technical details for validation

This audit trail can be independently verified by any third party using standard signature validation tools (Adobe Reader, specialized validators).

Getting Started with Evrotrust

Organizations can access Evrotrust qualified signatures through qualified trust service platforms like QES-Sign, which provide simplified access to multiple QES methods including Evrotrust.

Implementation Options

Pay-Per-Use Model (Recommended for SMEs)

Purchase prepaid signature credits starting at €5 per signature. No subscription, no commitment. Ideal for:

• Organizations with variable signing volumes
• Businesses signing 5-50 documents monthly
• Companies wanting cost predictability without fixed fees

API Integration (For Developers)

Developers can integrate Evrotrust signatures into existing applications using REST APIs. Common integration scenarios include:

• HR management systems (automated employment contract signing)
• Document management platforms (add QES to existing workflows)
• Customer onboarding systems (KYC documentation with QES)
• Contract lifecycle management (CLM) tools

Onboarding Your Team and Partners

When deploying Evrotrust across your organization:

1. Identify Evrotrust-eligible users: Check if signers are located in one of the 58 supported countries
2. Communicate app requirement: Inform signers they’ll need to download the Evrotrust mobile app (provide download links)
3. Set registration expectations: Initial verification takes 5-15 minutes; subsequent signatures take seconds
4. Provide support resources: Share Evrotrust’s registration guides and troubleshooting documentation
5. Test with small pilot group: Validate the process with 5-10 users before full deployment

Key Takeaways

• Evrotrust is an eIDAS-compliant QTSP offering qualified electronic signatures across 58 countries: With particular strength in Eastern Europe, the Balkans, and emerging markets often underserved by Western European QES providers.
• Official notified eID scheme status provides maximum legal recognition: As Bulgaria’s nationally recognized electronic identification system, Evrotrust signatures enjoy mandatory cross-border acceptance across all EU member states under eIDAS Article 9.
• Fully remote identity verification balances security and convenience: Evrotrust’s hybrid AI and human expert verification process maintains qualified status while enabling users to register from anywhere without physical presence requirements.
• Optimal for organizations with repeat signing needs: The one-time registration model makes Evrotrust ideal for ongoing business relationships requiring multiple signatures, where 30-second signing beats per-signature verification alternatives.
• Choose based on your geographic requirements: Evrotrust excels when your operations span Eastern Europe, the Balkans, or transcaucasus regions where itsme lacks coverage, though Adacom offers even wider global reach for truly international businesses.

Frequently Asked Questions

Is Evrotrust legally equivalent to a handwritten signature?

Yes. Evrotrust provides qualified electronic signatures (QES) that are legally equivalent to handwritten signatures across all EU member states under Article 25(2) of the eIDAS Regulation. Courts cannot reject an Evrotrust signature solely because it’s electronic.

Which countries does Evrotrust support?

Evrotrust supports identity verification and qualified signatures for users in 58 countries, including all EU member states, Eastern European nations (Ukraine, Serbia, North Macedonia, Albania, Bosnia, Moldova, Belarus), transcaucasus countries (Georgia, Armenia, Azerbaijan), and global markets including the United States, Canada, United Kingdom, Australia, Switzerland, Israel, Turkey, and Kazakhstan.

Do I need to download an app to use Evrotrust?

Yes. Evrotrust requires downloading the mobile app (available for iOS and Android) for both initial registration and subsequent signing. The app serves as your qualified signature creation device (QSCD). If you prefer not to download an app, alternative QES methods like Adacom offer no-app-required signing.

How long does Evrotrust registration take?

Most Evrotrust registrations complete within 5-15 minutes. The process involves photographing your identity document, completing facial recognition, and waiting for automated and manual verification. Complex cases requiring additional expert review may take up to 24 hours. Once registered, your qualified certificate is valid for three years.

Can Evrotrust signatures be used for government documents?

Yes. As Bulgaria’s officially notified eID scheme, Evrotrust signatures are accepted by public sector entities across all EU member states under eIDAS mutual recognition requirements. Many government agencies specifically list Evrotrust as an accepted QES method for official filings and submissions.

How does Evrotrust compare to itsme or Adacom?

Evrotrust offers broader geographic coverage than itsme (58 vs 24 countries) but narrower than Adacom (58 vs 68 countries). Evrotrust requires app installation like itsme but enables faster repeat signing than Adacom. Choose Evrotrust when your operations focus on Eastern Europe and the Balkans, or when repeat signing efficiency outweighs the app installation requirement.

What happens if my phone is lost or stolen?

Your qualified certificate and signing keys are protected by device-level encryption and biometric authentication. If your device is lost, immediately contact Evrotrust support to revoke your certificate. You can then register again on a new device. Previous signatures remain valid as they’re timestamped and cryptographically signed.

Can multiple people in my organization use Evrotrust?

Yes. Each individual requiring qualified signature capability must register separately with their own identity document and mobile device. Organizations can manage multiple Evrotrust users through platforms like QES-Sign, which provide centralized billing and document management while maintaining individual qualified certificates.

Conclusion

Evrotrust represents a significant advancement in European digital identity infrastructure, particularly for organizations operating across Eastern Europe, the Balkans, and emerging markets. Its official recognition as Bulgaria’s notified eID scheme, combined with comprehensive 58-country coverage and rigorous yet remote identity verification, makes it a compelling qualified electronic signature solution for specific use cases.

The platform shines when your business requires legally equivalent signatures across regions underserved by Western European QES providers, or when repeat signing efficiency justifies the initial app installation and registration investment. Evrotrust’s balance of security, legal compliance, and user convenience positions it as a practical choice for companies navigating complex cross-border signature requirements.

However, evaluating Evrotrust against alternatives like itsme (for Benelux-focused operations) or Adacom (for truly global reach without app requirements) remains important. The optimal QES solution depends on your specific geographic requirements, signing volume patterns, and user technology preferences.

For organizations seeking flexible access to multiple QES methods—including Evrotrust alongside itsme and Adacom—platforms offering pay-per-use models without subscriptions provide the agility to match signature method to specific transaction requirements.