One domain
QWAC
€250/year
QWAC · eIDAS
The website certificate with legal standing across the European Union.
A QWAC (Qualified Website Authentication Certificate) binds your website to an organisation whose identity has been verified by a qualified trust service provider. It is the highest level of website validation in the EU.
- eIDAS qualified providers
- Recognised by browsers (Article 45)
- PSD2 version for payments
Who needs it
When an ordinary certificate is not enough.
Banks and payments
PSD2 requires a QWAC from payment service providers that access accounts through APIs, with the authorisation number and the PSD2 roles in the certificate.
Public bodies
Public services and regulated organisations that need to prove their website's identity with a legal presumption in every Member State.
Trust services and healthcare
Platforms handling sensitive data that want the organisation's identity confirmed at the qualified, audited and supervised level.
Questions
QWAC, explained.
What changes with eIDAS 2?
Regulation (EU) 2024/1183 amended Article 45 of eIDAS: browsers must recognise QWACs and may not impose additional requirements on qualified providers. The QWAC becomes the European way to prove who is behind a website.
Which documents are needed?
An official extract from the business register, an identity document of the legal representative and sometimes a power of attorney. For PSD2, also the authorisation number from the national competent authority and the authorised roles. We tell you exactly what is missing before submitting.
Does a QWAC replace the normal SSL certificate?
Yes. A QWAC is a complete TLS certificate: it encrypts the connection like any other and adds the qualified identity.
Request a quote
Questions about QWAC?
Tell us what you need it for and which domains you want to cover. We confirm whether a standard QWAC or a PSD2 QWAC is the right one.
Prefer to talk? +351 210 205 164
weekdays, 9:00 to 18:00 Lisbon time
By email: support@sooma.com