Every eIDAS Claim Is Checkable in Two Minutes, Including Ours

Solidus is not a qualified trust service provider, has not applied to become one anywhere, and does not partner with one today. Nothing here is legal advice.

The one compliance claim a buyer can verify without trusting anybody

Most claims in this market are unfalsifiable from the outside. A vendor says its process is rigorous, its controls are strong, its approach satisfies a standard. You cannot check any of that from a chair.

Qualified status under eIDAS is different, and it is different in a way worth exploiting.

Every qualified trust service provider in every EU Member State is published on the EU Trusted List: public, standardised, machine-readable, maintained by supervisory authorities rather than by the providers themselves. It sits at digital-strategy.ec.europa.eu/en/policies/eu-trusted-lists.

Search it for any vendor's name. The answer is binary, it takes two minutes, and no salesperson is involved in producing it.

Search it for ours and we are not there. That is the honest answer and we would rather you get it from the register than from us.

What the word "qualified" is actually protecting

It is a legal status granted by a national supervisory body, never by a private company and never by a vendor's own assessment.

Getting it means passing an audit by an accredited conformity-assessment body, meeting the security and reliability requirements the regulation specifies, and then submitting to ongoing supervision. What it buys is legal weight: a qualified electronic signature carries the same standing as a handwritten one across the entire Union.

That is why the word is worth protecting and why the vocabulary around it gets abused. "Compliant with eIDAS", "eIDAS-ready", "built to eIDAS standards" and "qualified under eIDAS" are four different sentences, and only the last one appears on a register.

The distinction that decides whether a claim means anything

Building to a regulation's requirements is something a vendor does. Being qualified under it is something a supervisor decides. The first is a design choice, available to anyone, verifiable by nobody. The second is a fact with a public record.

A buyer confusing them will believe they have procured legal certainty and will discover during an audit that they procured an intention.

So the question to put to every vendor, including us, is not "are you eIDAS compliant". It is "are you on the EU Trusted List, and under which Member State's supervision". There is no way to answer that ambiguously.

What is on the roadmap, stated as roadmap

Conformance with the EUDI architecture and reference framework is a roadmap conformance statement targeted for the fourth quarter of 2026, and not a held certification. The qualified-provider path and mdoc issuance are documented roadmap items. None of that is a claim about today.

And the reason we are pursuing it at all is worth being explicit about, because it is the strongest argument against our own architecture taken alone: a self-issued identifier is worth nothing until a relying party trusts the issuer. eIDAS 2.0 manufactures exactly that trust, by regulation, for roughly 450 million people. A credential system that ignores it is choosing to solve the cold-start problem the hard way for no reason.

What to ask any vendor claiming eIDAS standing

"Are you on the EU Trusted List?" Then check. The list does not care what either of you believes.

"If not, which qualified provider do you work with, and can I see the arrangement?" Working with one is a perfectly good answer. Being unable to name one is the answer to a different question.

"Which specific service is qualified?" Qualified status attaches to particular trust services rather than to a company as a whole, so a provider can be genuinely qualified for one thing and not for the thing you are buying.

"What changes for me legally on the day you become qualified?" If a vendor cannot answer this, the status is being used as a badge rather than as a mechanism.

Where this leaves a decision

If you need qualified status today, buy from somebody on the register, and the register is the shortlist. We are not on it.

The eIDAS work is what makes the regulated cases reachable later, through a partner, rather than through us claiming a status nobody granted.