Architects of Digital Trust
Standards. Methodology.
Certainty.
A conformity assessment body accredited by ENAC. We verify that digital trust infrastructure meets what European regulation demands.
About us
From standard to checklist. From requirement to certainty.
We live in a time when anyone can fabricate an identity, forge a document or simulate a transaction. And yet the entire digital economy rests on an act of faith: trusting that things are what they claim to be.
That act of faith needs foundations: qualified trust services, identity verification, time stamps, registered deliveries, traceable processes. Invisible infrastructure that works when nobody notices it and is missed when it fails.
CerteIDAS verifies that this infrastructure meets what European regulation demands. We do so with a particular kind of knowledge: we take part in ETSI as editors of the technical standards we then apply in our assessments.
What we do
We write the rules. We assess compliance.
Five domains where independent verification is critical. Two established, with a track record; three emerging, in active preparation.
eIDAS and Trust Services
Spain has the highest number of qualified trust service providers in Europe. We have assessed them since 2016, when we were among the first bodies accredited by ENAC for eIDAS. With eIDAS 2.0, our scope extends to the EUDI Wallet.
Digital Identity
Digital onboarding has replaced the counter. We assess identity verification processes, assisted and automated, against ETSI TS 119 461 (whose editorial team we are part of) and SEPBLAC requirements.
AI Audit
The AI Act requires independent conformity assessments for high-risk AI systems. We are members of the AI Act Advisory Forum, took part in the Spanish AI regulatory sandbox, the first in Europe, and contribute to the ETSI groups defining the technical standards.
Digital traceability
Knowing where a product comes from and how it has been transformed is no longer an advantage: it is a growing regulatory obligation. Due diligence rules and the digital product passport require verifiable traceability. We assess that the processes supporting it meet the requirements.
Food cybersecurity
The food chain is critical infrastructure. The NIS2 Directive expressly includes it, and the demands on the agri-food sector will grow significantly. We assess operators’ conformity with the applicable security requirements.
What sets us apart
We assess with the precision of those who wrote the rules.
It is not only accumulated experience. It is having sat on the committees where every requirement, every threshold, every acceptance criterion is debated. That participation does not compromise our independence as assessors; it enriches it. Because we understand not only what a standard says, but why it says it.