Skip to content
QUALIFIED TRUST SERVICES

Legally compliant digital signatures (eIDAS) to drive forward the digitalization of your business processes.

CORPORATE TRUST SERVICES

Cryptography-based trust services
to protect your digital identities,
data and business secrets.

Qualified electronic signature products based on eIDAS - legally binding and secure.

API GUIDE

Upgrade your application with electronic signatures by primesign.





DOCUMENT SIGNING API

Signing of PDF documents. primesign handles document processing and adds a visual signature stamp.

HASH SIGNING API

Signing of hash values. Your application handles document processing and provides the document viewer.

CASH BOX API

RKSV-compliant JWS- or raw signatures for cash box receipts.





primesign TRUST CENTER

All documents for our qualified trust services, certificate revocation list, root-/CA- certificates, etc.

RESOURCES

Fact sheets, product documentation and more.



BLOG

Insights on digital signatures, eIDAS and trust services.

BG_ICON_ARROW_3-1
Trust Services & Qualified Signatures

Qualified Electronic Timestamps and Proof of Signing Time

What a qualified electronic timestamp proves under eIDAS, how RFC 3161 works, and why it matters for proof of signing time and long-term validity.

In short: A qualified electronic timestamp is issued by a qualified trust service provider and binds data to a specific point in time with legal certainty under eIDAS. Built on RFC 3161, it delivers reliable proof of signing time and underpins the long-term validity of signed documents.

Trust in a signed document rests on two questions: who signed, and when. Signatures answer the first; a qualified electronic timestamp answers the second. Under Regulation (EU) No 910/2014 (eIDAS), a qualified timestamp binds a document or signature to an accurate point in time and enjoys a legal presumption of accuracy. That single guarantee turns out to be essential for evidence, compliance and the ability to validate documents many years after they were signed, which is why timestamps sit at the heart of any serious archiving strategy.

What a qualified electronic timestamp proves

A timestamp cryptographically binds a hash of your data to a trusted time source. A qualified electronic timestamp goes further: because it is issued by a qualified trust service provider under eIDAS, it benefits from a legal presumption that the date, time and integrity of the data are accurate.

In other words, it provides robust proof of signing time. It shows that a specific document existed in a specific state at a specific moment, which is exactly what disputes, audits and regulators tend to ask about.

How timestamps work: RFC 3161

Technically, most timestamps follow RFC 3161, the standard for a Time-Stamp Protocol. The client sends a hash of the data to a time-stamping authority, which returns a signed token containing that hash and the trusted time.

Crucially, the original data never leaves your environment, only its hash does. The returned token can later be checked by anyone to confirm the data existed at the stated time and has not changed since.

When to use a qualified electronic timestamp

Timestamps are valuable wherever the timing or long-term integrity of a document matters.

Consider a qualified electronic timestamp when you need to:

  • Prove exactly when a contract, filing or record was signed or created.
  • Meet retention and evidence requirements in regulated processes.
  • Preserve the validity of signatures long after the signing certificate expires.
  • Establish priority or precedence, such as submission or publication order.
  • Seal high-volume or automated output so each document has a trusted time of origin.

Timestamps and long-term validity

Signing certificates expire and cryptographic algorithms age. Long-term validity (LTV) addresses this by capturing validation data and timestamps so a signature can still be verified far into the future. A qualified electronic timestamp is the anchor of this approach.

In PAdES-based archiving, timestamps are added over the signature and its validation material, and can be renewed before older cryptography weakens. This is how a document signed today remains provably valid and unaltered for a decade or more.

Qualified versus non-qualified timestamps

Any system can attach a time to a file, but not every timestamp carries legal weight. A non-qualified timestamp may be useful operationally, yet it does not benefit from the eIDAS presumption of accuracy. The qualified variant does, because it is issued by a supervised qualified trust service provider.

When the timing of a document could ever be questioned, that presumption is what shifts the burden of proof. For contracts, regulatory filings and archived records, the qualified option is the safer default rather than an optional extra. The cost of adding one is small compared with the difficulty of proving timing after the fact, when memories fade and systems change. Treating trusted time as a standard part of signing, not a special case, is what keeps long-lived evidence dependable and easy to defend.

How primesign helps

primesign, as a qualified trust service provider, issues qualified electronic timestamps and combines them with qualified signatures and seals, so your documents carry reliable proof of signing time and stay verifiable for the long term.

Do your signed documents need to prove exactly when they were signed, years from now?

Sign with confidence

Talk to a primesign expert about qualified e-signatures, seals and remote signing.

Talk to an expert

Related articles