eSignature Legislation
EU & Adriatic Region
A clear overview of the legal foundations for electronic signatures in the European Union
and the Adriatic / Western Balkans region — plus the direction of travel for the coming years.
EU legal backbone
Handwritten equivalence
Adriatic markets covered
Toward eIDAS 2.0
The eIDAS framework
Regulation (EU) No 910/2014 (eIDAS) and its 2.0 update create the common legal foundation
for electronic identification and trust services across the EU. Slovenia and Croatia, as full Member States,
apply eIDAS directly.
Three signature levels
Simple / SES → Advanced (AES) → Qualified (QES). Only a QES has the equivalent legal effect of a handwritten signature (Art. 25).
Mutual recognition
A QES based on a qualified certificate issued in one Member State is recognised as a QES in all other Member States.
Qualified Trust Service Providers
Only supervised QTSPs listed on the EU Trusted List can issue the certificates that underpin a legally equivalent QES.
eIDAS 2.0 direction
European Digital Identity Wallet, stronger trust services (including electronic archiving), and clearer rules for cross-border use.
Western Balkans & neighbouring markets
Serbia, Bosnia & Herzegovina, Montenegro, North Macedonia, Albania and Kosovo* have developed
(or are rapidly developing) electronic signature and trust-service laws that follow the same core logic as eIDAS.
Common hierarchy
Most frameworks distinguish Simple / Advanced / Qualified electronic signatures. QES generally carries the strongest legal effect, often equivalent to a handwritten signature.
National or recognised QTSPs
Qualified certificates are issued by national QTSPs or, in many cases, by providers that are recognised or practically accepted when aligned with eIDAS standards.
EU approximation
As part of the EU accession process, legislation is progressively aligned with eIDAS and the emerging eIDAS 2.0 requirements.
Non-discrimination principle
Electronic form cannot be denied legal effect solely because it is electronic — a principle present across the region.
Country highlights
High-level orientation only. Exact rules, recognition of foreign QTSPs and sector-specific requirements should be confirmed per market.
Serbia
Law on Electronic Document, Electronic Identification and Trust Services (aligned with eIDAS). Active local QTSPs and strong banking adoption of QES. QES has the legal effect of a handwritten signature.
- QES ≈ handwritten
- Local QTSPs + practical EU usability
- Mandatory QES for many company & reporting acts
Montenegro
eIDAS-aligned legislation and a growing trust-services market. Clear rules for electronic identification and signatures; active work on mutual recognition and Digital Identity Wallet readiness.
- eIDAS-aligned framework
- National + EU TSP orientation
- Wallet & cross-border roadmap
North Macedonia
Law on Electronic Documents, Electronic Identification and Trust Services explicitly aligned with eIDAS. Modern eID and trust-service regime; progress toward third-country Trusted List inclusion.
- eIDAS-aligned law
- eID + trust services
- Cross-border recognition goals
Bosnia & Herzegovina
Entity-level and state-level rules. Progressive digitalisation of public and private services; framework for AES / QES exists and continues to evolve toward fuller eIDAS approximation.
- AES / QES framework
- Entity & state rules
- Ongoing alignment
Albania
Electronic signature and trusted-services legislation in place. Growing digital public services and SEPA membership supporting deeper financial-sector digitalisation.
- Electronic signature law
- Trusted services regime
- Public-service digitalisation
Kosovo*
Electronic identification and signature framework in development. Part of the wider Western Balkans digital agenda and regional interoperability initiatives.
- e-signature / eID rules developing
- Regional digital agenda
- Framework evolving
Using EU Trust Service Providers
In most Adriatic / Western Balkan markets, EU-listed QTSPs and Qualified Digital Certificates can be used
and produce legally valid signatures — either by explicit recognition or through practical acceptance of eIDAS-aligned services.
Exact conditions differ by country and should always be verified.
What is typically accepted
QES based on an EU QTSP certificate, qualified timestamps from EU TSAs, and hybrid models (local identification + EU certificate) where permitted.
Advantages for banks
One high-assurance QTSP across multiple markets, faster time-to-market, consistent assurance levels, and better cross-border usability of signed documents.
What to verify locally
Explicit recognition of foreign / EU QTSPs, any registration or notification requirements, sector-specific rules (banking, insurance, public), and current supervisory practice.
rSign approach
Designed to work with EU-listed trust services where local law permits, while remaining flexible for local QTSP options when required.
Forecast: eSignatures in the Adriatic region
The direction of travel is clear: deeper alignment with EU standards, stronger cross-border interoperability,
and broader adoption of high-assurance (including qualified) electronic signatures in banking and public services.
1. Continued eIDAS / eIDAS 2.0 approximation
As EU candidate and potential candidate countries advance their accession agendas, national laws will continue
to converge with eIDAS and the European Digital Identity framework. Expect clearer rules on qualified certificates,
remote QSCDs, and electronic archiving.
2. Regional Digital ID Wallets & interoperability
The Western Balkans Six have committed to interoperable digital identity wallets and harmonised trust services
aligned with eIDAS 2.0 standards. A Balkan Identity Wallet concept and mutual recognition agreements are on the roadmap.
Cross-border use of electronic identities and signatures will become significantly easier.
3. Path toward third-country Trusted List inclusion
Several countries are actively working on the conditions for mutual recognition of qualified trust services
with the EU. Inclusion (or progressive recognition) on EU third-country trusted lists would further strengthen
the legal value of regionally created QES in EU contexts.
4. Higher adoption of QES in banking
Banks will increasingly prefer full QES for high-value products (loans, mortgages, guarantees) because of superior
non-repudiation and long-term evidentiary strength. In-app and remote QES models will grow as digital identity
infrastructure matures.
5. Stronger focus on long-term validation & archiving
Inspired by eIDAS 2.0, rules and market practice around electronic archiving, PAdES-LT/LTA levels and
preservation of validation data will become more explicit. Banks will need signatures that remain verifiable
for 10–30+ years.
6. Integration with broader digital finance
SEPA membership, e-invoicing mandates and digital public services create a stronger ecosystem in which
high-assurance electronic signatures become a natural, expected part of every serious financial process.
Practical implications
Choose the right signature level
Use full QES for high-risk / high-value contracts. Strong AES remains suitable for many standard documents. Both are legally recognised across the region.
Design for multi-country operations
Where EU QTSPs are usable, a single high-assurance provider simplifies operations across Serbia, Montenegro, BiH, North Macedonia, Albania and EU markets.
Cover the full customer journey
On-site (branch) identification + remote / in-app signing in one platform is the practical requirement for modern banking.
Prepare for long-term evidence
Combine strong signatures (AES or QES) with qualified timestamps and controlled archiving so documents remain verifiable for the full retention period.
How rSign is positioned for the region
One API, multiple markets
Same integration covers on-site, in-app and remote signing across the Adriatic region and the EU.
EU TSP ready
Designed to work with EU-listed Qualified Trust Service Providers where local law permits.
Full range of signature strengths
PAES (strong AES with biometrics), OQES / IQES / RQES (full QES) — choose the legal strength that matches the risk.
Archiving & validation ready
Qualified timestamps and evidence packages that support long-term validation and regulatory review.
Ready for today’s rules — and tomorrow’s
rSign delivers eIDAS-grade and regionally compliant electronic signatures
for banks operating in the EU and the Adriatic region.