/Logo%202023.svg "Logo 2023"){kind=small}
Technical Interoperability
SIGNER FOR TRUST SERVICE PROVIDERS
A robust remote signing solution that simplifies compliance with eIDAS and other regulations while ensuring top-tier security and scalability.
CRYPTOMATHIC SUPPORTS TRUST SERVICE PROVIDERS DO BUSINESS
Cryptomathic has a long history of supporting trust service providers (TSPs) worldwide, including qualified trust service providers (QTSPs) in the EU.
Whether you're looking to create a remote signing or sealing service, provide a remotely managed in-app security service for protecting ID Wallets, or establish a global trust center offering HSM-as-a-service or data protection-as-a-service, Cryptomathic has you covered.
However, our best-known offering in the trust services space is Signer, our remote signing and sealing suite with the core being a CC certified remote QSCD.
Signer is a modular product suite that enables (Q)TSPs to design an optimal architecture or enhance an existing infrastructure to support new use cases or evolving requirements.
/What%20We%20offer/Frame%203.png?width=493&height=416&name=Frame%203.png)
-1.png?width=150&height=150&name=Untitled%20design%20(19)-1.png)
Ease of Compliance
Simple Maintenance
Rapid use case extension
Adding or changing Identity provider
Adding or changing certificate authority
Adding or changing time stamping authority
Adding a local provider due to regulation or customer requirement
FULLY CSC-COMPLIANT SIGNING AND SEALING
We leverage Cloud Signature Consortium (CSC) standards to simplify integration, replacement, and expansion of your platform. CSC is the standard referenced in eIDAS and the standard interface to integrate signing into any customer flow, mobile wallet or business system.
Cryptomathic is an executive member of the Cloud Signature Consortium, and we take a very active role in shaping the CSC specifications and help advance a truly global interoperability standard for signing and sealing.
THE RISKS OF PROPRIETARY LOCK-IN
Insufficient attention to architecture, interoperability, and security design can lead to:
· Cost explosions due to unnecessary development of custom modules
· Difficulties in passing compliance audits
· Challenges in making changes or adding a new identity provider
· Complications when modifying elements of the architecture
· Unnecessary complexity (e.g., signature flows with more than 40 steps)
.png?width=300&height=150&name=tsp%20page%20logos%20(1).png)
SIGNER – OUR QUALIFIED ELECTRONIC SIGNING AND SEALING SUITE
Our signing and sealing technology is the underlying architecture for many qualified trust service providers across the EU. We offer modules to create a remote qualified signing or sealing service for private and public customers, and we are often brought in to consult and optimize existing solutions with our certified technology and expertise—without disrupting workflows for existing customers.
We provide guidance and products that are compliant by design, reducing the ever-increasing compliance burden for qualified trust service providers. Additionally, we support the CSC API,
the standard method for integrating with EUDI wallets to add signing features to any electronic ID wallet.
Cryptomathic Signer facilitates interaction with all components of the architecture
EXPLORE SIGNER →
.
.png)
MASC – REMOTELY MANAGED IN-APP PROTECTION FOR MOBILE ID WALLETS
EUDI wallets and other eID mobile apps manage highly sensitive personal data and require the best security to earn user trust and drive widespread adoption.
MASC is our EUDI security suite and consists of two separate modules:
1. The in-app protection module – An independent cryptographic layer that protects both sensitive data and the app itself.
2. A separate backend service – Enables real-time remote threat response management.
Together, these modules create a robust and resilient solution with the flexibility needed to adapt as both regulatory requirements and the threat landscape evolve.
The independent layering of app and security enables wallet issuers to centralize control over app security and updates across iOS and Android, reducing reliance on mobile manufacturers' hardware protections.
We partnered with the Belgian government to secure one of the EU’s pioneering EUDI wallets, setting a benchmark for digital identity security. MASC supports a secure digital identity infrastructure designed to meet and exceed anticipated standards and can scale to accommodate millions of citizens while ensuring consistent security and performance.
EXPLORE MASC →
.png?width=754&height=396&name=SIGNER%20CASE%20STUDY%20(1).png)
LuxTrust
Scrive