What Is eIDAS? And why does it matter for your contracts?
Pina Vetter
på
Gode råd
Security & Compliance
Ever wondered if an e-signed location agreement or co-production contract would actually hold up if things went wrong? That's what eIDAS is for. It's the EU regulation that makes electronic signatures legally valid. In this post, we explain what it covers, the three levels of electronic signature and when each one matters, and clear up a common myth about what "legally binding" actually requires.
eIDAS stands for "electronic IDentification, Authentication and trust Services." It's an EU regulation (its formal name is Regulation (EU) No. 910/2014) that sets the rules for electronic signatures, digital identities, and other "trust services" across Europe. It came into force in 2016, replacing an older and much patchier set of national rules, and it applies directly in every EU member state without needing to be rewritten into local law first. That matters for anyone working across borders, which, if you've ever coordinated a co-production, a festival submission, or a crew spread across three countries, is probably you.
Why filmmakers and producers should care about eIDAS
Contracts are the backbone of this industry: release forms, NDAs, crew agreements, distribution deals, co-production contracts, consent forms for minors or vulnerable subjects. Most of these get signed electronically now, and eIDAS is why a signature typed into an eIDAS-compliant platform like Connie carries real legal weight instead of existing in a grey zone.
The regulation does two things worth knowing
First, an electronic signature can't be thrown out in court just because it's electronic. Article 25 is explicit about this: a signature can't be denied legal effect or admissibility solely for being in electronic form. So if a difficult client argues your e-signed contract "doesn't count," that argument doesn't hold up.
Second, it creates mutual recognition across EU countries: a signature valid in Denmark is valid in Portugal, Germany, everywhere in the EU (and the EEA). That's what makes electronic contracting workable for an industry where a production company, its crew, and its distributor might each be based in a different country.
The three levels of electronic signature under eIDAS, explained without the jargon
This is often where people get confused, so here's the plain version. eIDAS defines three tiers of electronic signature, and they're not interchangeable, because each one carries a different level of legal weight.
Simple electronic signature (SES)
This is the broadest category and covers almost anything: typing your name at the end of an email, ticking an "I agree" box, drawing your signature with a finger on a screen. It's legally valid and can't be dismissed just for being electronic, but if a dispute ever landed in court, you'd need other evidence to back up who actually signed and when. Most everyday production paperwork, like release forms or standard crew agreements, works perfectly well at this level. On Connie, this is the default option: signers get a secure link by email (or a Public SignPage) and sign with a swipe or a long press, no app or login required.
Advanced electronic signature (AES)
This is a step up. It has to be uniquely linked to the signer, capable of identifying them, and set up so that any later change to the document is detectable. In practice, this usually means the platform verifies your identity before letting you sign, and locks the document afterward so any tampering would be obvious. It gives you strong identity assurance without the extra steps of the highest tier, which makes it a good fit for contracts that matter but don't need the full weight of a notarized-style process, think distribution agreements or NDAs with new partners. On Connie, for example, it's available as an option in Denmark, Sweden, and Finland, using national ID methods (MitID, BankID, and the Finnish Trust Network) rather than being a default everywhere.
Qualified electronic signature (QES)
This is the highest tier, the only one eIDAS treats as legally equivalent to a handwritten signature everywhere in the EU. It requires a certificate from an accredited "qualified trust service provider" and high-standard identity verification, often an ID check or video call. It's typically reserved for higher-stakes situations, like large financing agreements or certain public sector filings, so most production contracts won't need it unless a partner or lawyer specifically requires it.
The useful rule of thumb: the more money, risk, or legal exposure attached to a contract, the more signature strength you probably want. A standard extras release doesn't need the same level as a seven-figure co-production agreement.
What this means for your day-to-day paperwork
You don't need to become a compliance expert to benefit from any of this. The practical takeaway is simpler: when you're signing or sending contracts electronically within the EU, you want a tool that's genuinely eIDAS-compliant, not just designed to look official. A few things worth checking:
Is the provider clear about which signature level (SES, AES, or QES) it offers, and can you choose the right one for the contract at hand?
Is there an audit trail showing who signed what, and when?
Is the platform also GDPR-compliant? GDPR and eIDAS are related but separate pieces of EU law, and both matter if you're handling personal data, like a filmmaker collecting consent forms from documentary subjects.
A platform that takes this seriously will usually say so plainly, rather than burying it in fine print. Connie, for example, seals every signed document so it can't be altered afterward, and adds an official timestamp, whether the signature is Simple or Advanced. That gives you a stronger paper trail than the law strictly requires.
A quick myth to clear up
eIDAS doesn't require every contract to use the highest signature tier. A lot of people assume "legally binding" automatically means "qualified electronic signature," and that's not the case. For the vast majority of commercial, HR, and production-related agreements, a simple or advanced electronic signature is entirely sufficient and holds up in practice across the EU. Reserve the heavier verification processes for the situations that genuinely call for them.
A few quick answers
Is an electronic signature legally binding in the EU?
Yes. Under eIDAS, an electronic signature can't be denied legal effect just because it's electronic. The exact type you need depends on the contract, but a simple electronic signature is enough for most day-to-day agreements.
Does eIDAS apply outside the EU?
eIDAS is EU law, but it also applies across the EEA, and many countries outside the EU have their own frameworks that mirror it closely.
What's the difference between an electronic signature and a digital signature?
They're often used interchangeably, but "digital signature" usually refers to the underlying cryptographic technology, while "electronic signature" is the legal term used in eIDAS. Learn more about that distinction in our article on electronic vs digital signatures.
If you want to go deeper into how this plays out in practice on Connie specifically, our help center has more detail on choosing the right authentication method for your contracts and on whether eSignatures hold up legally.
Where to check the details yourself
If you want to go to the source rather than take a blog post's word for it, the European Commission maintains a clear overview of the regulation and its practical implications:
Contracts will never be the most glamorous part of making films, but understanding why your e-signature actually holds up, and when you might need a stronger one, means one less thing to worry about when you're focused on the work that actually matters.
Start a free trial now, find more information about Connie here, or book a demo session to learn more.
Important notice: Connie is not a law firm and this article should not be relied on as legal advice.
Related reading
Tidligere indlæg:
