SPI-S v3.2: Electronic Signatures Powered by 50+ Years of Trust-Service Expertise 

SPI-S v3.2 is the Product of
Accumulated Experience.

Our engineers, legal experts, and PKI architects have spent two decades doing the actual work, helping Trust Service Providers achieve and maintain their eIDAS qualification, deploying solutions across EMEA. We know what it takes to build a solution that survives a qualification audit, integrates into real enterprise workflows, and stays compliant as regulations evolve because we have done it, repeatedly, for clients and for ourselves.

Two decades. Multiple markets.
Real deployments.

Our team’s experience is not theoretical. Since the early 2000s, we have been building electronic signature infrastructure in Europe at a time when most organizations were still printing and scanning contracts.

The result is a team that understands the full picture: the regulatory requirements, the technical architecture, the integration realities, and the operational challenges of running a trust service at scale.

20+

Years in trust services
ecosystem

25+

solutions deployed across
EMEA

50+

Years combined expertise : cryptography, PKI, law, software

SPI-S v3.2 Core Capabilities 

A complete electronic signature platform covering the full trust chain: from certificate issuance to long-term validation.

Three signature levels (SES / AES / QES)
Simple, Advanced, and Qualified Electronic Signatures : properly implemented according to ETSI standards, not approximated. Each level carries a different legal weight and is appropriate for different document types and jurisdictions. 

Electronic sealing

Beyond individual signatures, SPI-S v3.2 supports electronic seals, allowing organizations to apply an institutional signature to documents on behalf of a legal entity, not an individual. Seals are used for automated document workflows, batch processing, invoices, certificates, and any output requiring organizational authentication rather than a personal signature. 

Timestamping

Timestamps anchored to a Time Stamp Authority providing proof of the exact time a document was signed or sealed. The level of qualification of the timestamp depends on the infrastructure deployed. Essential for legal proceedings, audit trails, and regulatory compliance. 

LTV-compliant signatures
Long-Term Validation (LTV) compliance ensures your signatures remain legally valid and verifiable decades from now even after the signing certificates expire. This is critical for contracts, deeds, and regulatory filings that must be enforceable long-term. 

Full PKI infrastructure
Built on a complete PKI stack: Root CA, Intermediate CA, HSM-backed key management, and CRL publication all operated under strict CP/CPS policies. 

REST API & seamless integration

Fully documented REST API for embedding signature workflows directly into any CRM, ERP, DMS, or custom application. Sandbox access available. Designed for a seamless integration of the signature in your workflows. 

Remote & in-person signing

SPI-S v3.2 supports multiple signing modes: remote signing flows (email link, OTP, mobile) as well as signing with a cryptographic key stored on a secure device such as a QSCD (Qualified Signature Creation Device: smart card, cryptographic token, or equivalent). Adaptable to your business process without rebuilding it. 

A Compliance Posture built on documented proof 

SPI-S v3.2 does not claim compliance; it demonstrates it. The solution has been deployed and operated in conformity with the following standards and regulatory frameworks.

One Deployment Model.

Full Control. 

SPI-S v3.2 is deployed On-Premises within your own infrastructure or a sovereign hosting environment of your choice. There is no shared cloud, no multi-tenant architecture. Your data, your keys, your environment.

This is not a limitation. It is a deliberate choice, made for organizations that operate in regulated sectors where data sovereignty is not optional.

The Signature Portal 

A ready-to-use web interface for managing and executing signature workflows. Your users access it directly. No technical knowledge required. Configurable to your branding and your document processes.

The API 

A fully documented REST API for integrating signature capabilities directly into your existing systems CRM, ERP, DMS, or custom applications. Designed so the signature disappears into the workflow rather than interrupting it. Sandbox access and technical documentation provided from day one.

PKI infrastructure setup & support 

SPI-S v3.2 comes with full support for deploying the underlying PKI infrastructure: the trust chain that makes every signature legally valid. This includes Root CA and Intermediate CA setup, HSM configuration and key management, CRL publication, Certificate Policy and Certification Practice Statement documentation, and ongoing operational support. You do not need to bring PKI expertise in-house. We bring it to you.

Ongoing compliance & qualification support

Regulations evolve. Our team stays ahead of them. We accompany you through the qualification process if you are seeking to become a Trust Service Provider in your jurisdiction, and we maintain the compliance posture of the platform as standards are updated.

Who this is for

Banks, insurance companies, government agencies, ministries, trust service providers, and any organization that requires airtight legal validity, complete data sovereignty, and a signature infrastructure built to last. 

Recognized under the laws that matter

SPI-S v3.2 compliance architecture was designed from the ground up to be portable across jurisdictions. Below is how it maps to the key regulatory frameworks relevant to organizations operating in the GCC, Europe, and Africa.

United Arab Emirates : Federal Decree-Law No. 46 of 2021

The UAE Electronic Transactions and Trust Services Law establishes legal equivalence for electronic signatures when backed by qualified certificates from recognized trust service providers. SPI-S v3.2 PKI architecture and ETSI-compliant certificate policies align with the technical requirements outlined under this framework, enabling legally binding signatures for contracts and transactions under UAE law.

European Union : eIDAS Regulation (EU 1183/2024)

eIDAS defines three levels of electronic signature (Simple, Advanced, and Qualified) and establishes cross-border legal recognition across EU member states. The solution implements all three levels in full accordance with ETSI EN 319 standards. Our team's two decades of eIDAS-compliant platform deployment means no interpretation gap between the regulation and the implementation.


Morocco : Law 43-20

Morocco's Law 43-20 on Trust Services for Electronic Transactions, modeled after eIDAS, establishes the regulatory framework for electronic signatures in the Kingdom. The platform is declared by DGSSI at the Simple and Advanced levels. Qualified level accreditation is underway and represents the highest level of legal recognition under Moroccan law.

Africa : Côte d'Ivoire & Senegal


In Côte d'Ivoire and Senegal, the team has been directly involved in PKI deployments and has worked alongside local regulatory bodies as they developed their electronic trust frameworks. SPI-S platform architecture is built to support trust service provider qualification in each of these jurisdictions, providing a ready-made path to local compliance for regional operators.

Where SPI-S is deployed today 

Across regulated industries that require airtight legal validity and smooth user experience.
PKI Council
Our expertise at your service
RNTrust experts provide customized solutions to design, deploy, and manage robust, secure, and compliant PKI infrastructures, including HSMs and cryptographic tokens. We help organizations meet regulatory requirements, strengthen digital trust, and optimize their security posture.
  • Compliance with the strictest international standards such as TDRA, the eIDAS Regulation, etc.

  • Training, planning, and monitoring adapted to your security objectives 

Secure your digital future with trusted cybersecurity, compliance, and advanced electronic signature solutions.

Copyright 2026, RNTrust Group. All Rights Reserved.