Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

Signaturit (Namirial)

VERIFIZIERT
E-Signatur · Spain
Gegründet 2013 · signaturit.com ↗

Barcelona-based Spanish digital-trust group (Signaturit, a Namirial company; parent Namirial acquired by Bain Capital, US PE, 2025), 4 QTSPs with highest eIDAS qualifications; platform hosted at rest on AWS.

Kurzfassung

Signaturit (Namirial) aus der Kategorie E-Signatur bietet EU-Hosting mit Spain als Hosting-Standort, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko.

Bewertungsnotizen

Signaturit Group is the Barcelona-headquartered Spanish digital-trust group operating four Qualified Trust Service Providers with the highest eIDAS qualifications, regularly audited by national regulators, and strengthened in February 2025 by the acquisition of Validated ID (the first QTSP prepared for eIDAS 2, with the EBSI-compliant VIDwallet). Two sovereignty caveats corrected at the 2026-07 re-verify, both from primary sources the original audit missed: (1) ownership — the combined group is co-controlled by two US private-equity firms: Namirial S.p.A. was acquired by Bain Capital (US, Boston) in 2025 (~€1.1B valuation, closed ~July 2025), and Signaturit was itself PSG Equity (US, Boston) backed, the two merging in July 2025 with Ambienta (IT) and founders/management as minority holders, so the group is eu_hq_us_funded, not the eu_owned recorded in May; (2) CLOUD Act — the published Signaturit Platform DPA sub-processor annex shows the platform is hosted at rest on Amazon Web Services (US-owned; EU servers in Ireland) with OTP/SMS and transactional email via Twilio and SendGrid (US), so exposure is material, not none. eIDAS QTSP status, a public DPA and EU data residency remain genuine strengths; the score sits at 3/5, the same tier as Signicat, capped by the US-owned at-rest sub-processor and the US-PE parent.

CLOUD ACT
OWNERSHIP
SUB-PROCS
17 · 9 US
Geprüfte Signale
Jurisdiktion
  • EU-/Angemessenheits-Hosting
  • EU-/Angemessenheits-Betreiber
  • Keine US-CLOUD-Act-Exposition
Transparenz
  • Öffentlicher AVV
  • Unterauftragsverarbeiter offengelegt
  • Open-Source-Clients
  • Zertifizierung durch Dritte
JUMP TO
OVERVIEW

Über Signaturit (Namirial)

Signaturit Group is a Barcelona-headquartered Spanish digital-trust services group, now consolidated under the Italian parent Namirial S.p.A. (Senigallia, Italy), itself one of Europe's largest Qualified Trust Service Providers (QTSPs) under eIDAS. The group operates four Qualified Trust Service Providers under one corporate umbrella, holds the highest eIDAS qualifications (Qualified Electronic Signatures, Qualified Electronic Seals, Qualified Time Stamps, Qualified Website Authentication Certificates), and is regularly audited by national regulators across the EU member states where it operates. The product surface covers digital identity verification, identity wallets, qualified electronic signatures, certificate creation and management, document verification, digital preservation, certified communications (email, SMS), KYC, and electronic notifications.

In February 2025 Signaturit acquired Validated ID, the Barcelona-based digital-identity pioneer founded in 2012 and notably the first Qualified Trust Service Provider prepared for eIDAS 2 with the EBSI-compliant VIDwallet mobile identity wallet (EBSI is the European Blockchain Services Infrastructure built under the European Commission's digital-identity strategy). The merger consolidates Signaturit's leadership in EU digital trust services and aligns the group with the upcoming eIDAS 2 framework rollout. Combined with parent Namirial, the resulting group is among the largest pure-play EU digital-trust providers serving banks, insurance, telecoms, public sector, and regulated industries.

Two sovereignty caveats, corrected at the July 2026 re-verify and both drawn from primary sources the original audit missed. Ownership: the combined group is co-controlled by two US private-equity firms. Namirial was acquired by Bain Capital (US, Boston) in a 2025 deal valuing it at roughly €1.1B (closed around July 2025), and Signaturit was itself backed by PSG Equity (Providence Strategic Growth, US, Boston) before the two agreed to merge in July 2025; the 2026 cap table runs Bain Capital, Ambienta (the Italian PE seller, reinvested as a minority), PSG Equity and the founders and management. Barcelona and Senigallia remain the operating headquarters, so the group is recorded as eu_hq_us_funded (EU-headquartered, US-capital-controlled) rather than fully EU-owned. Infrastructure: the published Signaturit Platform sub-processor annex shows the platform is hosted at rest on Amazon Web Services (a US-owned provider, with EU servers in Ireland), and one-time-password SMS and transactional email run through Twilio and SendGrid (both US, processing partly in the US), which places the listing at cloud_act_exposure: material. The eIDAS QTSP status, the public DPA and the EU data-residency posture are still real strengths.

Best fit: regulated industries requiring Qualified Electronic Signatures (QES) under eIDAS: Spanish public sector, French / Italian banks, EU-wide financial services subject to PSD2 and AML/KYC, healthcare workflows requiring qualified signatures. Pricing is enterprise / volume-based; specific entry-tier EUR figures were not captured at audit. On eIDAS qualification Signaturit sits alongside Yousign (FR), Skribble (CH) and Universign (FR) among the strongest picks in this directory; buyers whose priority is the cleanest ownership-and-sub-processor story with no US-owned infrastructure in the at-rest path should weigh Skribble (Switzerland, cloud_act_exposure: none) above the Namirial-group options, which now share the same AWS hosting and US-PE parent.

SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · 17

Quelle ↗
  • Amazon Web Services EMEA SARL US
    Luxembourg

    Primary hosting / storage of information on the platform (servers in Ireland, EU) — customer data at rest

  • Atlassian Pty Ltd US
    Australia

    Project/incident tracking and collaboration (processing in Ireland, EU); ultimate parent Atlassian Corp is US (Delaware) incorporated

  • Cloudflare, Inc. US
    United States

    Content Delivery Network / web traffic protection (processing in EU, Spain)

  • Functional Software, Inc. (Sentry) US
    United States

    Error analysis/detection and log monitoring (processing in EU, Spain)

  • Mailgun Technologies, Inc. US
    United States

    Inbound email parsing for the signaturit.com MX domain (processing in EU: Belgium/Germany)

  • SendGrid, Inc. US
    United States

    Transactional email from the platform (processing in the US, SCCs + adequacy)

  • Twilio Inc US
    United States

    OTP codes via SMS required to complete signature requests (servers in the US, SCCs + adequacy)

  • Twilio Ireland Ltd US
    Ireland

    SMS/RCS/WhatsApp/Telegram/email messaging (processing in EU and USA; international transfer to US for US-bound recipients); Twilio group is US-owned

  • Zendesk, Inc US
    United States

    Customer-service ticketing (processing in Ireland, EU)

  • CM Communication Platform & Technology, S.L.U. EU
    Spain

    SMS / messaging (EU processing)

  • Link Mobility Italia S.r.l EU
    Italy

    SMS/RCS/WhatsApp/Telegram/email messaging (EU processing)

  • LINK Mobility Spain SL EU
    Spain

    SMS / messaging (EU processing)

  • Lleidanetworks Serveis Telemàtics, S.A. EU
    Spain

    SMS / messaging (EU processing, Spain)

  • Mitto AG EU
    Switzerland

    SMS/RCS/WhatsApp/Telegram/email messaging (EU processing)

  • Namirial S.p.A. EU
    Italy

    Routing service for SMS/RCS/WhatsApp/Telegram/email messaging (parent group; controlled by Bain Capital, US PE, since 2025)

  • Veridas Digital Authentication Solutions, S.L. EU
    Spain

    Video ID product only: facial biometrics, liveness detection, OCR ID extraction (EU processing)

  • Vonage B.V. EU
    Netherlands

    SMS/RCS/WhatsApp/Telegram/email messaging (EU processing); ultimate parent Ericsson (Sweden)

9 von 17 Unterauftragsverarbeitern sind in den USA registriert. CLOUD-Act-Risiko anwendbar.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen · keine gelistet

Wir haben die Website des Anbieters und die Register der Zertifizierungsstellen geprüft. Keine aktiven Zertifizierungen gefunden zum Zeitpunkt der letzten Prüfung (2026-07-06).
FEATURES

Funktionsmatrix

Qualifizierte Signatur (QES) Ja
Fortgeschrittene Signatur (AES) Ja
Audit-Trail Ja
Vorlagen Ja
Massenversand Ja
Signieren vor Ort Ja
Identitätsprüfung Ja
API / Webhooks Ja
INTEGRATION & ZUGRIFF
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Preise & Tarife

KOSTENPFLICHTIG
Individuelle Preise

Kontaktieren Sie den Anbieter für Staffel- oder Mengenpreise.

Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    ivnosys.com/signaturit-platform…
    Öffnen ↗
  • Liste der Unterauftragsverarbeiter
    ivnosys.com/signaturit-platform…
    Öffnen ↗
  • Nutzungsbedingungen
    www.signaturit.com/legal…
    Öffnen ↗
ALTERNATIVES

Alternativen in dieser Kategorie

Eversign (Xodo Sign)
Austria · Gegründet 2017
US-VERBUNDEN

Vienna-launched e-signature platform (eversign GmbH, 2017), acquired by Apryse (US/PDFTron) in 2022, rebranded as Xodo Sign.

Öffentl. AVV Subprozessoren Open Source
FROM
CLOUD ACT
DIRECT
Signicat
Norway · Gegründet 2006
EU-GEHOSTET

Trondheim-based pan-European eIDAS QTSP for digital identity, e-ID and qualified e-signatures; Nordic Capital-owned, EEA-hosted on US hyperscalers.

Öffentl. AVV Subprozessoren Open Source
FROM
CLOUD ACT
MATERIAL
Skribble
Switzerland · Gegründet 2018
EU-SOUVERäN

Zurich-based Swiss e-signature platform with dual ZertES + eIDAS QES via Swisscom partnership; ISO 27001, 4,000+ DACH customers.

Öffentl. AVV Subprozessoren Open Source
FROM
CLOUD ACT
NONE