Prestataire français / Since 2016
eIDAS & RGS trust services
Qualification support for a French trust service provider.
Making compliance a lasting capability
Since 2016, Stelau has supported a French trust service provider through eIDAS and RGS qualification. The objective is to offer qualified certificate, signature and timestamping services, with an organisation able to maintain their security over time.
Qualification brings several disciplines together. Cryptography must be implemented correctly, operations documented, responsibilities assigned and evidence available to assessors.
Our contribution
Understanding the existing services and the gaps
We map services, processes and infrastructure, including identity management, access controls and sensitive data handling. Each gap is linked to a requirement and a practical remediation action.
Building documentation and processes
- Certificate policies and key management practice documentation.
- Support for the information security management system (ISMS) and its alignment with ISO/IEC 27001.
- Internal audits to prepare for formal assessments.
- Team training on the requirements and procedures relevant to their work.
Connecting requirements to implementation
We work on cryptographic mechanisms, tooling and integration. Testing and exchanges with laboratories and assessors help document the choices made and prepare the evidence required.
What the work enabled
The provider obtained eIDAS qualification for several trust services and RGS compliance at the two-star and three-star levels. Our support continues through surveillance audits and changes to the regulatory framework.
The contribution extends beyond the initial application. We help teams maintain their documentation, resolve findings and anticipate change, making compliance a lasting operational capability.