Commission Implementing Regulation (EU) 2025/2162of 27 October 2025laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and the Council as regards the accreditation of conformity assessment bodies performing the assessment of qualified trust service providers and the qualified trust services they provide, the conformity assessment report and the conformity assessment scheme

Article 24(1c) of Regulation (EU) No 910/2014 with respect to the verification of the identity and attributes of persons to whom the qualified certificate or the qualified electronic attestation is to be issued;

Article 28(6) of Regulation (EU) No 910/2014 with respect to the issuance of qualified certificates for electronic signatures;

Article 38(6) of Regulation (EU) No 910/2014 with respect to the issuance of qualified certificates for electronic seals;

Article 45(2) of Regulation (EU) No 910/2014 with respect to the issuance of qualified certificates for website authentication;

Article 33(2) of Regulation (EU) No 910/2014 with respect to the qualified validation service for qualified electronic signatures;

Article 34(2) of Regulation (EU) No 910/2014 with respect to the qualified preservation service for qualified electronic signatures;

Article 42(2) of Regulation (EU) No 910/2014 with respect to the creation of qualified electronic timestamps;

Article 44(2) of Regulation (EU) No 910/2014 with respect to the provision of qualified electronic registered delivery services;

Article 29a(2) of Regulation (EU) No 910/2014 with respect to the qualified service for the management of remote qualified electronic signature creation devices;

Article 45j(2) of Regulation (EU) No 910/2014 with respect to the provision of qualified electronic archiving services

Article 45d(5) of Regulation (EU) No 910/2014 with respect to the issuance of qualified electronic attestation of attributes;

Article 45l(3) of Regulation (EU) No 910/2014 with respect to the recording of electronic data in a qualified electronic ledger;

(15) contains an assessment of the fulfilment of the requirements that apply to qualified trust service provider and to the relevant qualified trust services pursuant to Article 21 of Directive (EU) 2022/2555, and under the implementing acts that apply to that qualified trust service as adopted in accordance with of Article 21(5) of that Directive;

(16) contains a statement declaring, where applicable, the absence of any non-conformities, irrespective of their level of criticality; where any non-conformity is identified in the report, the report shall provide a plan of corrective actions and their timescale, provided by the qualified trust service provider and agreed by the conformity assessment body, together with the description of the planned evaluation tasks the conformity assessment body shall undertake to evaluate that those non-conformities have been corrected;

(17) contains, where appropriate and necessary, an indication of opportunities for improvement concerning the fulfilment by the qualified trust service provider and the qualified trust services it provides of relevant requirements;

(18) identify, for each stage of the conformity assessment, including documentation audit, implementation assessment and onsite inspections, the period in relation to which the assessment has been conducted and the time taken by the conformity assessment body in person-days to conduct the assessment;

(19) identify in the corresponding specific requirement report the detailed conformity assessment controls and control objectives that have been conducted during the assessment or include a reference to separately available assessment reports in which such information is included, provided that such separated assessment reports are:

(a) issued by conformity assessment bodies accredited in accordance with Regulation (EU) No 910/2014;

(b) endorsed by the conformity assessment bodies issuing the conformity assessment report;

(20) include the scope, the description, and the results of a significant set of tests or production samples and their assessment for all relevant and applicable types of outputs from the assessed qualified trust services;

(21) indicate the following deadlines:

(a) the deadline within which the next surveillance conformity assessment must be conducted;

(b) the deadline within which the next conformity assessment must be conducted in accordance with Article 20(1) of Regulation (EU) No 910/2014;

(22) contain an explicit declaration stating that the certification documents, including the conformity assessment report, are also intended for the use by the competent national supervisory body.