Certyneo Review: EU-Hosted eIDAS Signatures from €9 with a 10-Year Audit Trail

The eIDAS regulation defines three legally distinct signature levels, and the right level depends on the risk and legal weight required. Simple electronic signatures (SES) — a typed name or a click-through — are sufficient for low-risk agreements: NDAs, event registrations, internal approvals. Advanced signatures (AES) add SMS-OTP authentication and a cryptographic link between signer and document, appropriate for employment contracts, service agreements, and lease mandates. Qualified signatures (QES) require identity verification through a certification authority — typically a video or in-person ID check before the signing session — carry the legal weight of a wet-ink signature across all EU member states, and are mandatory in regulated sectors: healthcare consent, notarized real estate transfers, and bank mandates. Most eIDAS platforms ask you to commit to one signature level at signup. Certyneo handles all three from a single account, and the selection happens per document — SES for an internal policy, AES for a client contract, QES for a regulated transaction — without switching platforms or plans. The QES adds €9.90 per signature on top of the subscription; for workflows that only occasionally need QES alongside frequent AES contracts, the per-document model is more economical than a dedicated QES-only platform. Teams deploying QES for regulated-sector workflows should model the per-signature cost at their expected monthly transaction volume before selecting a plan tier.

Since the Schrems II ruling in 2020, transatlantic document routing is not a purely theoretical compliance issue — it's one that legal, procurement, and banking clients increasingly raise before signing contracts. US-based platforms routing data through US infrastructure require either Standard Contractual Clauses or additional documentation to satisfy GDPR's Chapter V transfer requirements. For law firms, healthcare providers, defense subcontractors, and financial institutions, that conversation often ends before a trial is requested. Certyneo runs entirely on EU sovereign infrastructure with no US data transit, and publishes this as a structural commitment rather than a contractual workaround. The platform explicitly addresses Cloud Act and FISA extraterritoriality risks — meaning documents stored on Certyneo are not subject to US government access requests, which is a distinct issue from GDPR compliance alone. More useful for long-term archive decisions: the platform implements open standards — ETSI EN 319 142 for PDF signatures and RFC 3161 for trusted timestamps — so any third party can verify a signed document without a Certyneo account. This also means Certyneo has no lock-in leverage over your archive: your signed documents remain independently verifiable using public tools regardless of what happens to the platform. In a compliance audit, 'here is the document, here is the public standard it adheres to' is a cleaner answer than relying on a proprietary audit report from a platform that may not be your vendor in five years.

Three features extend Certyneo beyond the signature step into the full document lifecycle: The AI contract generator creates draft agreements from a description — covering common EU document types including NDAs, service agreements, client mandates, and employment agreements. The output is a draft, not legal advice, but for standard document categories in EU and OHADA legal frameworks it substantially reduces the time between 'I need a contract' and 'ready to send for signature.' For freelancers and SMEs who currently start from a blank page or a half-remembered template, the generator removes the setup step that most delays sending. Payment collection during signing (Business plan, €39/mo) attaches a payment request — deposit or full amount — to the signing step. Without this, most service businesses send a contract, wait for the signature, then send a separate payment link — two tools, two follow-up chains. Certyneo collapses both into one step: the counterparty signs and pays in the same session. For freelancers requiring a 50% deposit before starting work, this removes the second tool from the process entirely. The 10-year encrypted document archive covers the legal retention requirement for commercial contracts in France and most EU jurisdictions — referenced against French Civil Code Article 1379 — without a separate archival service. Documents remain verifiable throughout their full retention period with the complete cryptographic audit trail: timestamp, signer identity method, IP address, and signature metadata.

The REST API and webhook support are available from the Standard plan (€19/mo) — the entry point for teams integrating signing into a CRM or deal workflow. Pre-built connectors include HubSpot, Salesforce, Zapier, Make, and Slack, covering the most common SME stack configurations without requiring custom API work for standard use cases. The Standard plan supports 100 envelopes/month across 10 users, with custom branding on the signing experience and 25 reusable templates. Business Pro (€99/mo) raises the API rate limit to 300 requests/minute and adds SAML SSO with support for Okta, Azure AD, and Google Workspace — relevant for larger teams or companies with centralized identity management. Reusable templates are available from the Personal plan (€9/mo, up to 5 templates), so even single-user workflows benefit from the template library without manually re-creating recurring document structures.

The clearest fit is a European SME, freelancer, or regulated professional who needs legally-binding signatures on a recurring basis and needs documents to stay on EU infrastructure from draft through archival. Each 'envelope' in Certyneo is one document sent for signature, regardless of how many signatories are included — so a contract with three signers counts as one envelope against the monthly allowance. The Personal plan (€9/mo) works for independent professionals sending up to 25 contracts per month with advanced signature — a freelance consultant signing client agreements, a real estate agent processing mandates, an accountant handling client authorizations. Standard (€19/mo) serves teams of up to 10 who need shared templates, API access, and custom branding on the signing experience. The qualified signature add-on (QES, €9.90/signature) extends Certyneo into regulated sectors where a wet-ink legal equivalent is required by law: bank mandates, healthcare consent in certain member states, notarized real estate transactions, and government procurement. Note that QES requires pre-signing identity verification of each signer — typically via a video or in-person session — which adds a workflow step that AES does not require. Organizations primarily needing QES at volume should model the per-signature cost against their expected monthly transaction count before selecting a plan. Certyneo is less suited to companies whose document workflows primarily involve US counterparties already locked into DocuSign or Adobe Sign ecosystems, or organizations where non-EU jurisdiction compliance is the primary requirement. The platform is optimized for the European legal and compliance environment.