primesign Blog: Qualified Signatures, eIDAS & Remote Signing

QES vs AES vs SES: The Three Signature Levels Compared

Written by primesign Editorial | Aug 12, 2026, 5:57:30 AM

In short: eIDAS defines three electronic signature levels. Simple (SES) is easy but carries the least evidentiary weight; advanced (AES) is uniquely linked to a verified signer and tamper-evident; qualified (QES) adds a qualified certificate and a qualified signature creation device, making it legally equal to a handwritten signature across the EU.

Not every electronic signature carries the same legal weight. The EU's eIDAS Regulation defines a clear hierarchy — simple, advanced and qualified — and choosing the right level for each document is the difference between a smooth process and an unenforceable agreement. This guide compares all three so you can match the level to the risk.

The simple electronic signature (SES)

A simple electronic signature is the broadest category: any electronic data attached to or associated with a document that the signer uses to sign. A typed name, a scanned signature or a click-to-accept all qualify. SES is fast and frictionless and perfectly adequate for low-risk, internal or routine documents. Its weakness is evidentiary: because it does not, by itself, prove who signed or whether the document changed, it offers the least protection in a dispute.

The advanced electronic signature (AES)

An advanced electronic signature must meet four requirements: it is uniquely linked to the signer, capable of identifying the signer, created using data the signer can keep under their sole control, and linked to the signed data so any later change is detectable. In practice, AES is built on cryptography and a verified identity, giving it strong evidentiary value. It suits the large middle ground of business documents where reliability matters but the law does not mandate a qualified signature.

The qualified electronic signature (QES)

A qualified electronic signature is an advanced signature created with a qualified signature creation device (QSCD) and backed by a qualified certificate issued by a qualified trust service provider. That combination earns it a unique status under eIDAS: it is the only signature legally equivalent to a handwritten one, and it is automatically recognised across every EU member state. With a QES, the burden of proof shifts — it is presumed valid unless proven otherwise.

Side-by-side comparison

  • Legal weight: SES — admissible but weakest; AES — strong evidentiary value; QES — equivalent to handwriting, EU-wide.
  • Identity: SES — not required; AES — signer identified; QES — identity verified to qualified level.
  • Tamper-evidence: SES — not guaranteed; AES and QES — any change is detectable.
  • Device: SES — none; AES — signer-controlled key; QES — qualified signature creation device (QSCD), local or remote HSM.
  • Cross-border recognition: automatic and guaranteed for QES.

How to choose the right level

Match the level to legal requirement and risk. Use SES for low-stakes internal approvals and consent clicks. Use AES for the majority of commercial agreements where you want strong proof of who signed and that the content is intact. Use QES wherever the law requires written form — many employment, lending, notarial and public-sector documents — or where maximum enforceability and cross-border certainty matter. When in doubt, a higher level reduces legal risk; the practical question is balancing assurance against signer convenience, which modern remote signing largely resolves.

HOW PRIMESIGN HELPS

primesign enables organisations to choose the right level of electronic signature assurance while keeping the signing experience simple and secure. From advanced signatures for everyday business agreements to qualified electronic signatures for high-value and legally sensitive documents, primesign combines trusted identity verification, secure signing and eIDAS-compliant technology to deliver legally robust digital signing across the EU.
Ready to choose the right level of electronic signature for your business? Talk to primesign about secure, compliant signing solutions built for every level of trust.