What is a Qualified Electronic Signature
A Qualified Electronic Signature (QES) is the highest level of electronic signature recognized under EU law. It's backed by a digital certificate issued in your name by a regulated authority called a Qualified Trust Service Provider (QTSP) - in this case, InfoCert.
When you sign using QES, your identity is verified first, and then your signature is cryptographically linked to both your identity and the document you're signing. This means the document cannot be altered after signing without detection.
QES is accepted as a valid form of identity verification and contract signing in all EU member states, without any additional paperwork.
Why am I being asked to do this?
The organization you're signing up with or signing a document for requires a legally recognized identity verification method. QES satisfies this requirement across the EU, meaning you won't need to visit a branch, send copies of documents by post, or do a video call with an agent.
How to prepare
Before you start, make sure you have the following:
A valid identity document - passport, national ID card, or residence permit. The document must not be expired.
A phone number you have access to - you'll receive a one-time code (OTP) by SMS during the signing step.
A device with a working camera - you'll need to scan your document and take a short selfie for the liveness check.
Good lighting - find a well-lit space before you begin. Poor lighting is the most common reason a liveness check fails.
A few minutes - the full process typically takes 3-7 minutes.
Make sure your document is undamaged and clearly readable. Blurry, glare-covered, or cut-off document photos are the most common cause of verification delays.
Signing process
Here's what will happen during your verification and signing session:
Scan your identity document
You'll be asked to photograph the front side of your identity document. In some cases, you may also be asked to photograph the back side.
The system will automatically scan your personal data. Should the scan be unsuccessful, you'll be asked to clarify the details.
Complete the liveness check
To confirm your physical presence, you will be asked to look at the camera and slowly move your head as instructed. This is an automated process, not a live video call, and no human is monitoring you in real time.
Please remove your glasses if possible, make sure your face is well lit, and follow the on-screen prompts.
Verify your phone number (if required)
You may be asked to verify your phone number or email address by entering a one-time code sent to you. The app or website you're using may have already completed this step.
Accept the certificate issuing terms
InfoCert will create a digital certificate in your name. You must accept InfoCert's terms and conditions to proceed.
This step is mandatory; InfoCert cannot issue your certificate without your acceptance.
Review and sign the document
The document(s) you need to sign will be displayed for your review. Please take a moment to read them. Once you are ready, we will automatically send a one-time code via SMS to your phone number.
Enter the code to confirm your signature. The document is now signed with a Qualified Electronic Signature in your name.
Verification is reviewed and completed
Your verification data undergoes a review process, typically completed in a few minutes, either automatically or by a Sumsub operator.
Once confirmed, you will be notified via the app or website. We then deliver the signed document to the organization you are signing with.
Once the process is complete, we will verify your identity and legally sign your document. No further action is required unless the organization reaches out to you with a specific request.
Your identity and your data
We understand that identity verification raises questions about what happens to your personal data. Here's what you should know.
What information is collected
Data from your identity document: your name, date of birth, document number, and nationality.
A biometric photo from your document and a liveness selfie
Your phone number and email address (if provided during the verification)
Who processes your data
Your data is processed by Sumsub on behalf of the organization you are signing with. InfoCert, a certified EU trust service provider, issues the qualified certificate in your name and processes your identity data to fulfill its function.
How your data is protected
All data is transmitted over encrypted connections.
Sumsub does not sell your personal data to third parties.
Data retention periods are governed by the agreement between Sumsub and the organization you're signing with, as well as by applicable law.
You have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact the organization you're signing up with - they are responsible for your data as the data controller. You can also find Sumsub's full Privacy Policy.
Common issues
Here are the most common issues and how to fix them quickly.
I didn't receive the SMS code
Wait 60 seconds, then tap "Resend code".
Verify that the phone number displayed on the screen is correct.
If you're in an area with poor signal, move to a better location and try again.
Some carriers may delay or block short-code messages — try restarting your phone or using a different network connection.
The liveness check keeps failing
Make sure you are in a well-lit room, facing a light source. Avoid a bright window or another light source behind you.
Remove glasses, hats, or anything covering your face.
Hold your device at eye level and follow the on-screen movements slowly and steadily.
Keep your device still, and move only your head.
My document is not being recognized
Place your document on a dark, flat surface with no reflections or glare.
Make sure all four corners are visible in the frame.
Avoid photographing through a plastic sleeve or laminate cover.
If your document is damaged or heavily worn, contact the issuing authority for a replacement before proceeding.
I'm being asked to accept terms from InfoCert — who are they?
InfoCert is an EU-certified Qualified Trust Service Provider (QTSP). They issue the digital certificate that makes your electronic signature legally valid under EU law. You must accept their terms for the signature to be issued.
My verification is stuck or pending for a long time
Most verifications are completed within a few minutes. Occasionally, a Sumsub operator must manually review it, which can take up to a few hours. You will be notified automatically when the review is complete. If you don't receive a notification after 24 hours, contact the organization you're signing with.
My verification was rejected
You should receive a notification explaining the reason for rejection. Common reasons include an expired document, a mismatch between your face and your document photo, or an inability to confirm your identity from the information provided. Contact the organization you're signing with — they will advise on next steps.
I'm concerned about sharing my ID and biometric data online
Sumsub is a trusted identity verification platform used by regulated financial institutions across the EU. Your data is processed under strict GDPR requirements. The biometric liveness check does not store a video recording — it is used only to confirm your real-time presence. For full details, see Sumsub's Privacy Policy.
FAQ
Is this the same as a regular email signature or e-signature?
No. A Qualified Electronic Signature (QES) is the highest legal level of electronic signature in the EU. Unlike a simple typed name or a standard e-signature, a QES is backed by a digital certificate issued in your name by a regulated authority, and it carries the same legal weight as a handwritten signature.
Do I need an existing digital certificate or special device?
No. A new certificate is created in your name during the verification process. You don't need any prior certificate, digital ID, smart card, or USB token. Everything happens through the app or website you're using.
What documents are accepted?
Passports, national ID cards, and residence permits from a wide range of countries are accepted. The document must be valid and not expired.
Can I sign from my phone?
Yes. The process works on smartphones, tablets, and computers with a camera. Make sure your browser or app is up to date for the best experience.
Will I receive a copy of the signed document?
Whether you receive a copy of the signed document depends on the organization you're signing with. Please contact them directly if you need a copy for your records.
What is the SMS code for? Is it safe?
The SMS code (OTP - One-Time Password) is sent to your verified phone number to confirm that you are actively authorizing the signing action. It works similarly to two-factor authentication used by banks. Never share this code with anyone - no Sumsub employee or support agent will ever ask for it.
Can I undo or cancel the signature after signing?
Once a Qualified Electronic Signature has been applied, it cannot be undone - just like a handwritten signature on a paper contract. If you have concerns about what you signed, contact the organization that asked you to sign the document.
I'm not in the EU. Can I still complete this process?
You may be able to complete the process depending on your document type and the requirements of the organization you're signing with. QES is legally recognized in all EEA member states, the UK, and Ukraine. If you are outside this area, contact the organization directly to confirm whether QES verification applies to your situation.