Why verify an electronic signature?
In a context where digital transactions are multiplying, verifying the eIDAS compliance of an electronic signature has become essential to guarantee the legal validity of signed documents and protect against fraud.
The European eIDAS regulation (n°910/2014) establishes a unified legal framework for electronic signatures in the European Union. To ensure that a signature complies with this framework, the European Commission provides a free, professional tool: the Digital Signature Service (DSS).
🔍 Free official tool
DSS enables instant verification of the technical and regulatory validity of any eIDAS-compliant electronic signature.
The three eIDAS signature levels
Before verifying a signature, it is important to understand the three levels defined by eIDAS:
1. Simple electronic signature (SES)
Basic level: any electronic data used as an authentication method.
Examples: typing your name in an email, checking “I accept”, scanned signature image.
Features :
- Suitable for exchanges with low legal value
- No advanced cryptographic security mechanisms
- Low probative value in the event of dispute
2. Advanced electronic signature (AES)
Must meet four strict technical requirements (article 26 eIDAS):
- Uniquely linked to the signatory
- Identifies the signatory
- Created under the exclusive control of the signatory
- Detects any subsequent changes to data
Mechanisms: PKI, unique cryptographic signature, detectable modification.
Legal value: Legally recognized in the EU, with greater evidential value than SES, but not automatically equivalent to a handwritten signature.
3. Qualified electronic signature (QES)
Highest level of security and legal recognition. Combines AES requirements with additional guarantees:
- Created with QSCD-certified device
- Based on qualified certificate issued by QTSP
- QTSP evaluated and supervised by national authorities
- Signatory identity rigorously verified
⚖️ Maximum legal value
Article 25.2 eIDAS: “A qualified electronic signature has a legal effect equivalent to that of a handwritten signature.” Mandatory cross-border recognition throughout the EU.
Comparison of the three levels
The European Commission’s DSS tool
The European Commission provides a free online platform, the Digital Signature Service (DSS), to check the technical validity and regulatory compliance of electronic signatures.
DSS tool features
The DSS tool automatically performs :
- Integrity check: document not modified since signature
- Certificate validation: valid certificate issued by a recognized authority
- Revocation check: certificate not revoked by QTSP
- Timestamp validation: a valid and reliable electronic timestamp
- eIDAS compliance: meeting the technical requirements of the regulation
- Certification chain: complete chain up to the verified root authority
Step-by-step guide: Verifying a signature
Step 1: Access the platform
Go to: ec.europa.eu/digital-building-blocks/DSS/webapp-demo/validation
Step 2: Import the signed document
Click on download and select PDF, XML or other signed format. The tool supports: PAdES (PDF), XAdES (XML), CAdES (documents), ASiC (containers).
Step 3: Launch analysis
Once loaded, the tool automatically launches a complete analysis that checks :
- Document cryptographic integrity
- Validity of the certificate(s) used
- Revocation status with the authorities
- Compliance with eIDAS technical requirements
- Validity of electronic time stamping
Step 4: View the validation report
By default, the ‘Simple Report’ is displayed with :
- Global status (valid, invalid, undetermined)
- Signatory information and certificate
- Date and time of signature
- eIDAS signature level detected (SES, AES, or QES)
The ‘Detailed Report’ provides all the technical details, including complete certification chain, OCSP/CRL checks, and cryptographic details.
Step 5: Print or download the report
The tool allows you toprint or download the report in PDF format. Useful for :
- Share proof of validation with third parties
- Archive verification for your files
- Present validation in a legal or audit context
⚠️ Interpretation of results
Status “VALID” = all technical checks passed. “INVALID” = problem (modified document, revoked certificate). “INDETERMINATE” = the tool was unable to perform all checks (revocation server temporarily unavailable).
Why checking eIDAS compliance is essential
1. Maximum legal certainty
eIDAS verification ensures legal recognition of signed documents. In the event of a dispute, a positive validation report provides solid technical proof of authenticity and integrity.
2. User and partner confidence
Systematic signature verification reinforces the credibility of your digital processes. Your customers and partners know that you take transaction security seriously.
3. Compliance with regulatory requirements
Numerous sectors subject to strict obligations: banking, insurance, healthcare, public procurement, notary’s office. Regular verification avoids any risk of non-compliance.
4. Fraud detection
The DSS tool immediately detects :
- Documents modified after signature
- Revoked or expired certificates
- Forged or invalid signatures
- Identity theft
5. Archiving and long-term probative value
Some documents need to be kept for 10, 30 or more years. Regular checking and archiving of reports helps maintain the probative value of signatures over the long term.
Practical use cases
For companies
- Validation of signed customer contracts before archiving
- Checking supplier orders and delivery notes
- Control of HR documents (employment contracts, amendments)
- Compliance audit of signature processes
For public administrations
- Validation of documents submitted by citizens
- Control of signed responses to public contracts
- Verification of official declarations and forms
For legal professionals
- Verifying the authenticity of contracts as evidence
- Validation of electronically signed notarial deeds
- Compliance monitoring in legal proceedings
For private customers
- Verification of bank or property loan contracts
- Validation of leases and real estate documents
- Control of insurance or service contracts
Key points to remember
The European Commission provides the DSS, a professional and reliable tool for verifying the eIDAS compliance of electronic signatures, free of charge.
Understanding the differences between SES, AES and QES is essential for assessing the legal and probative value of a signed document.
The tool automatically checks certificate integrity, validity, revocation status and regulatory compliance.
Systematic verification protects against fraud, ensures compliance with regulatory obligations and guarantees the probative value of documents.
Validation reports can be downloaded in PDF format for archiving, sharing with third parties or presentation in a legal context.
Conclusion
eIDAS verification of electronic signatures is a key step in securing digital exchanges. The European Commission’s free DSS tool makes this operation simple, accessible and reliable for everyone.
By systematically integrating this verification, you can guarantee the legal validity of your documents, reinforce confidence in your electronic transactions, and ensure full regulatory compliance with the eIDAS framework.
Create eIDAS-compliant signatures
e-Signature.eu lets you create eIDAS-compliant qualified electronic signatures with itsme®, Evrotrust and Adacom. No subscription, pay-as-you-go, credits never expire.