Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Universign

VERIFIED
E-signature · France
Founded 2001 · universign.com ↗

Long-running French QTSP (originally Cryptolog International, 2001); merged into Signaturit Group (a Namirial Italian company).

In short

Universign, in the E-signature category, offers EU hosting with France as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

Universign was a long-running French Qualified Trust Service Provider (originally Cryptolog International, Paris, founded 2001). As of audit time universign.com 301-redirects to signaturit.com under the consolidated Signaturit Group / Namirial portfolio, with Universign now operating as one of four QTSPs inside that European trust-services group. Compliance posture inherits from the consolidated Signaturit Group and was revised at the 2026-07 re-verify: highest eIDAS QTSP qualifications, ANSSI-recognised French QES capability and regular regulator audits remain, but the Namirial parent was acquired by Bain Capital (US private equity) in 2025 (so eu_hq_us_funded, not eu_owned), and the shared Signaturit Platform runs at rest on Amazon Web Services with Twilio/SendGrid (US) for OTP and email (so cloud_act_exposure: material, not none). See the Signaturit listing and data/sub-processors/signaturit.yaml for the mapped detail; score 3/5, same tier as Signicat.

CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Universign

Universign is a long-running French Qualified Trust Service Provider originally founded in 2001 as Cryptolog International in Paris, one of the earliest French entrants in qualified electronic signatures, time stamping, and certificate authority services under the eIDAS framework (and ANSSI's national supervision). The platform built a strong reputation for QES (Qualified Electronic Signature) workflows used by French banks, insurance carriers, and public-sector buyers; before consolidation it operated as one of the four legacy French QTSPs alongside Yousign and Docaposte.

As of audit time universign.com 301-redirects to signaturit.com: Universign has been consolidated into the Signaturit Group (itself now a Namirial Italian company) and operates as one of four QTSPs inside the unified group. This consolidation simplifies procurement: a single contracting relationship gives buyers access to French ANSSI-attested QES via the Universign-legacy infrastructure, Spanish QTSP capabilities from the original Signaturit Solutions stack, and EBSI-prepared digital identity from the 2025-acquired Validated ID asset. The aggregate group sits inside the EU regulatory framework with Italian + Spanish + French national bars covered.

Best fit: existing Universign customers retained through the consolidation; French enterprises specifically requiring ANSSI-recognised QES; multi-country EU regulated workflows (financial services, insurance, public administration) that benefit from the consolidated multi-QTSP umbrella. Pricing is enterprise / volume-based and aligned with the broader Signaturit Group catalogue; see the parent listing for category context. Universign-branded and Signaturit-branded contracting sit under the same Namirial parent, so they now share the same sovereignty profile: a US-private-equity ultimate owner (Bain Capital, since 2025) and AWS hosting at rest. Buyers who need French ANSSI-supervised QES with no US-owned infrastructure in the at-rest path should compare Yousign, and buyers who can accept a Swiss jurisdiction should compare Skribble (cloud_act_exposure: none).

SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-07-06).
FEATURES

Capability matrix

Qualified signature (QES) Yes
Advanced signature (AES) Yes
Audit trail Yes
Templates Yes
In-person signing Yes
ID verification Yes
API / webhooks Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    ivnosys.com/signaturit-platform…
    Open ↗
  • Sub-processors list
    ivnosys.com/signaturit-platform…
    Open ↗
  • Terms of Service
    www.signaturit.com/legal…
    Open ↗
ALTERNATIVES

Alternatives in this category

Eversign (Xodo Sign)
Austria · Founded 2017
US-LINKED

Vienna-launched e-signature platform (eversign GmbH, 2017), acquired by Apryse (US/PDFTron) in 2022, rebranded as Xodo Sign.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
DIRECT
Signaturit (Namirial)
Spain · Founded 2013
EU-HOSTED

Barcelona-based Spanish digital-trust group (Signaturit, a Namirial company; parent Namirial acquired by Bain Capital, US PE, 2025), 4 QTSPs with highest eIDAS qualifications; platform hosted at rest on AWS.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL
Signicat
Norway · Founded 2006
EU-HOSTED

Trondheim-based pan-European eIDAS QTSP for digital identity, e-ID and qualified e-signatures; Nordic Capital-owned, EEA-hosted on US hyperscalers.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL