eIDAS electronic signatures & security

Electronic Signature Security under eIDAS

Understand eIDAS electronic signature levels, GDPR principles and the German infrastructure supporting DE-CODA SIGN workflows.

01

eIDAS 2.0

The European framework for electronic identities, signatures and trust services.

02

GDPR

Data protection principles for processing personal and business information.

03

VDG

The German legal framework implementing European trust services.

04

Operated in Germany

Operated in a German data centre with ISO 27001 based on IT-Grundschutz.

Protection across the workflow

Security is part of the process

Identity and signature level

SES, AES and QES are aligned with risk and the relevant legal use case.

Document storage

Access, transfer and storage of documents during processing follow defined security and data-protection requirements.

Long-term archiving

Long-term archiving of signed documents is treated separately from document storage and implemented in your archiving systems in line with your statutory retention obligations.

Evidence and control

Status, signature events and completion information remain traceable for authorised participants.

Data & infrastructure

Operated in a German data centre

Operated in a German data centre with ISO 27001 based on IT-Grundschutz. Storage, processing, access and accountability are treated as one connected chain of protection.

DE-CODA
Operation
German data centre with ISO 27001 based on IT-Grundschutz
Data protection
Processing aligned with GDPR principles
Access
Role-based and controlled access
Transfer
Protected communications and document flows

Compliance aligned with your process

Together, we assess requirements, signature level and technical implementation.

Discuss security requirements