PKI · Electronic signature · Visible electronic stamp
Your keys.
Your signatures.
Your documents.
A public key infrastructure, a qualified electronic signature platform and a visible electronic stamp (CEV) platform: three products we build ourselves, deployed on your infrastructure or on ours. You keep control of the keys. We answer for the result in production.
A technical conversation, not a product demo.
eIDAS Qualified Trust Service Provider
Qualified status under Regulation (EU) No 910/2014
Engagements across 6 countries
Tunisia · Côte d’Ivoire · Benin · Chad · Burkina Faso · Mauritania
We don’t only integrate. We build.
Three products built in-house, proven in production, deployable on your infrastructure or ours. When a fix is urgent, it doesn’t wait on a third party’s calendar.
Public key infrastructure
The key stays with you
States, banks, ministries, operators
A certification authority operated in your name, on your territory, built for signing on an HSM: national root, internal authority or delegated registration authorities.
- Offline root authority and intermediate authorities
- Signature certificates on an HSM, activated remotely
- Delegated registration authorities (Remote Trust AED)
- Key ceremony conducted and documented
Electronic signature
Signing binds you. Only if you can prove it did.
Public bodies, banks, insurers, operators
Qualified electronic signature and server sealing, as a web application for your teams and an API for your systems. The keys stay under your control, in an HSM or on a token.
- PAdES, XAdES and CAdES formats, creation and validation to ETSI EN 319 102
- Multi-signer workflows, in parallel or in sequence
- Timestamping and an audit trail for every transaction
- Homologated by ANCE, certified eIDAS QTSP
Visible electronic stamp
The document is checked where it is presented
Public bodies, registries, issuers of official documents
A signed 2D barcode printed on the document itself. It is checked by scanner, on paper as on screen, offline and with no access to the issuing system.
- Stamp generation and verification, by API or by application
- Offline verification on Android and iOS, mobile SDK
- Management of CEV certificates and document templates
- Built to 2D-DOC (ANTS) and ISO 22376:2023
No vendor agreement steers our recommendation
We are tied to no vendor. The platform we recommend follows from the programme’s constraints: sovereignty, certification level, existing estate, cost of operation. We stay accountable for the result in production whichever product is chosen. The choice follows the requirement, never the other way round.
PKI, electronic signature, visible stamp: one chain of evidence
The public key infrastructure issues the certificates. The electronic signature platform puts them in the hands of signers and of your applications. The visible electronic stamp carries the evidence onto the printed document. Each part deploys on its own, on your infrastructure; together they form a chain with no link living at a third party.
The three products
Four steps, and nothing unplanned between them
- 01
Scoping
Architecture and policies
Audit of what exists, authority hierarchy, signature levels, documents to stamp. Certificate policies and practice statement, all written before anything is bought.
- 02
PKI foundation
HSM, authorities and ceremony
Supply and installation of the HSMs, key ceremony of the root authority, then the intermediate authorities, the OCSP responder and timestamping brought into production.
- 03
Services
Signature and visible stamp
The electronic signature service and the visible electronic stamp go live. Pilot applications are integrated by API and accepted with your teams.
- 04
Operations
Training and handover
Training for PKI administrators, registration operators and developers, skills transfer, then transition support through to your teams’ full autonomy.
The expensive mistake is building the wrong foundation
A certification authority or a signature platform is operated for a decade. What you settle at scoping (deployment architecture, signature types, functional scope) you carry for all of it. We come in before that, and we train the people who will hold the infrastructure afterwards.
Advisory
We work the decision before it costs anything: what the regulatory framework requires of you, what your existing estate already imposes, and what your teams will still be able to operate in five years.
- Scoping study and authority architecture
- Certificate policy and certification practice statement
- Platform and HSM selection, with no vendor tie
- Inventory and audit of the existing certificate estate
- Preparation for homologation and compliance audit
Training
A PKI your teams cannot operate is a PKI you are renting from someone. We train the people who will hold it, through to full handover.
- PKI and electronic signature fundamentals
- Day-to-day operation of a certification authority
- Key ceremony: roles, secret holders, written record
- Separate sessions for technical teams and for decision-makers
- Skills transfer at the end of a programme
The facts, and where to check them
Certifications and homologations
eIDAS certification of the platform
Qualified trust service, certified on a PKI and HSM-based electronic signature deployment built with our products. The certificate names the “Remote Trust CA” authority policies.
- Regulation (EU) No 910/2014
- Accredited, independent certification body
- Periodic surveillance audits after it
- EN 319 401, 411-1/-2, 412-1/-2/-5
Six ANCE homologations, every signature type
The National Electronic Certification Agency (ANCE) has homologated the platform for every signature level recognised in Tunisia, from the token to the visible stamp.
- Qualified signature on an HSM, at ANCE or on your premises
- Qualified signature on a USB token
- Legal-entity seal and the visible electronic stamp
- Mobile ID backed by the national identity (E-Houwiya)
National and institutional PKIs deployed
HAICOP
TunisiaOverhaul of the PKI and trust-services foundation of the national public procurement platform
NACEF · CIMF
TunisiaTrust services of the Ministry of Finance Information Technology Centre
ANSSI
Burkina FasoNational electronic signature platform, migration to the new version under way
ASIN
BeninNational trust services and the visible electronic stamp
Port Autonome de Cotonou
BeninDeployment of the NGSIGN electronic signature platform
SIGMAP
MauritaniaPublic procurement and purchasing management information system
Our clients · Key accounts
Governments and public agencies
Banks and insurers
Pharmaceutical industry and distribution
Other sectors
Standards we build to
PAdES signatures for PDF, XAdES for XML, created and validated to the ETSI standards. The references that make evidence hold up.
- PAdES · ETSI EN 319 142 · Baseline B, T, LT, LTA
- XAdES · ETSI EN 319 132 · Baseline B, T, LT, LTA
- CAdES · ETSI EN 319 122
- Validation · ETSI EN 319 102
- eIDAS (UE) n° 910/2014
- ETSI EN 319 411-1 / 411-2
- ETSI EN 319 421 / 319 422
- X.509 · RFC 5280
- Common Criteria (HSM)
- 2D-DOC (ANTS) · ISO 22376:2023
Let’s talk about your needs before we talk about product.
Tell us the regulatory framework and the scale you’re aiming at. We’ll tell you what actually needs building, including if it turns out to be less than you thought.