Trust Services Policy
This policy explains Firmato’s role in the trust-service chain and separates UESE ITALIA S.p.A.’s SaaS functions from trust services delivered by third-party providers.
1. Role of Firmato and UESE
Firmato provides orchestration, workflow, document management, audit and governance. Unless expressly stated and qualified, UESE ITALIA S.p.A. does not hold itself out as a qualified trust service provider. Qualified services are delivered by the selected or integrated QTSP.
2. Electronic signature levels
Firmato may orchestrate simple, advanced and qualified electronic signatures depending on enabled functions. The legal level depends on the process, identification method, certificate, tools and provider. The customer must choose a level consistent with the document and applicable form requirements.
3. Signer identification
Workflows may require OTP, KYC, liveness, certificate credentials or other factors. Verification of a Firmato account does not automatically satisfy identification requirements for every signature type.
4. Timestamps and seals
Where requested, qualified timestamps or seals are generated by the enabled provider. Firmato may retain operational references, hashes, transaction identifiers and available artifacts.
5. Audit and evidence
Firmato may retain logs, chained timelines, audit trails, hashes, callbacks and evidence dossiers. These support reconstruction of the workflow but do not, by themselves, make Firmato a qualified electronic archiving service.
6. Interoperability
A provider abstraction layer is used to reduce technology lock-in. Availability of a signature method or trust service depends on provider, country, plan and regulatory conditions.
7. Regulatory framework
This policy is interpreted under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183, relevant national rules and technical requirements applicable to the provider involved.
8. Versioning, precedence and evidence retention
Firmato records the version made available and, where the application flow provides for acceptance, the corresponding acceptance evidence including date, account and technical audit information. Material changes may require renewed acknowledgement or acceptance. Language and country are separate variables: language determines the linguistic version, while country determines the applicable national supplement.