Achieving Compliance with ZertES and eIDAS through Swisscom and OneSpan Sign
There are three different types of electronic signature. The Qualified e-signature (QES) is the highest level of assurance and requires that signers receive validation from a Trust Service Provider (TSP) in order for the e-signature to be enforceable. Due to these higher standards, a QES is typically reserved for high value and high-assurance agreements.
The advantage of using a QES is that if the signature is contested, the burden of proof lies with the signer and not the company to prove validity. The signer will need to prove that they did not sign the contract, rather than the company attempting to prove they did.
With that in mind, it is important to work with a TSP that can both meet regulatory requirements within the region and countries where you operate, as well as one that can help you create a positive customer experience. In Europe, OneSpan offers an integration with Swisscom, a Swiss telecommunications company that serves as a TSP in addition to supporting mobile and cable networks. This is an essential TSP relationship for organizations operating in the region due to its compliance with both ZertES and eIDAS regulations.
In this blog post, we will explore the benefits of Swisscom as a TSP as well as the customer experience created by the integration with OneSpan Sign.
Exploring Differing E-Signature Regulations Across Europe and Ensuring Compliance
Electronic signatures, though legal in over 100 countries, are governed by different regulations with varying requirements. That’s why it’s important for an electronic signature solution to be compliant with local regulations in all regions in which you operate.
For example, Switzerland is effectively an enclave within the European Union (EU), but because it is independent, its electronic signature regulations differ from the rest of the union. The EU follows eIDAS while Switzerland follows ZertES. Both eIDAS and ZertES regulations set the level of assurance with eSignatures and determine their proper use. If operating across borders within Europe it is important to source an electronic signature solution that remains compliant under both regulations. OneSpan Sign’s integration with Swisscom has been designed for compliance.
The Swisscom and OneSpan Sign Integration
There are several advantages of using Swisscom as your TSP:
- Swisscom facilitates a superior end-to-end service compared to some other TSPs
- Swisscom maintains wide coverage for a single TSP
- Swisscom provides a breadth of options available to ID at a high level of assurance
Swisscom also maintains a number of relationships with identification providers that meet regulatory standards. This ensures that Swisscom remains in good standing under ZertES and eIDAS. Accepting identification from a non-compliant process would risk Swisscom’s license. The certification is important, to be sure, but how that certification is achieved is just as relevant. Through these relationships, Swisscom offers a robust process with a high level of assurance.
The Swisscom Registration Workflow
The Swisscom Registration process is clear and concise. Watch this brief demo to see how easy it is to apply for a QES and receive the certificate:
The Swisscom TSP Experience
Swisscom is a large organization with significant resources and infrastructure which enables them to offer an onboarding process as friction-free as possible while still maintaining a high level of assurance. Swisscom puts in continued effort to provide multiple pathways to be onboarded and identified.
Switzerland currently offers 5 different ways in which customers can be onboarded, including:
- Identity card
- Bank ID credentials
- Video identification with a live agent
- Automated identification without a live agent
- Swisscom app
These onboarding options can all be completed remotely. Alternatively, Swiss signers can visit any Swisscom store location in-person and be efficiently identified by trained staff. This offers signers greater flexibility and options when getting started. Swisscom will also take liability for the identity (not the signature, but the ID assurance), a rare benefit among TSPs.
Update Your E-Signature Tool Today
The OneSpan Sign integration with trust service provider, Swisscom, is a valuable asset to organizations operating in Europe. Compliant with both eIDAS and ZertES, it delivers a convenient experience and peace of mind for both the customer and organization. Learn more about OneSpan Sign integrations today.
eSignature Legality Guide
E-Signature Legality in Switzerland
Switzerland has legally recognized e-signatures since 2003, with the passage of The Federal Law on Certification Services in the Area of the Electronic Signature (ZertES, SR 943.03).
Access Guide
