Isolated Security Domain
The SAM runs in its own isolated security domain within ProvenCore TEE OS.
Scale Your Digital Signature Infrastructure
Deploy Advanced and Qualified signatures with a certified hardware foundation.
We simplify the complexity of eIDAS audits while ensuring high-performance, long-term trust for your signing services.
Certified trust for AdES and QES levels
Streamlined path to QTSP status
THE PROBLEM
The Complexity of Digital Signatures
Legacy HSM architectures often lack the flexibility needed for modern cloud-first operations, creating a misalignment with today's automation needs.
While AdES allows for flexible architectures, achieving QES status requires rigorous audits and the use of a certified device, making compliance costly and time-consuming for providers.
Costly re-certifications for QES
Rigid HSM systems lacking cloud scalability
Complex sole-control requirements for AdES
THE SOLUTION
Signature Activation with ProvenHSM
ProvenHSM provides a tamper-resistant environment for Signature Activation Modules (SAM), allowing them to be embedded directly for maximum security.
This architecture reduces the trusted computing base and simplifies conformity assessments while providing direct, low-latency access to internal cryptographic tokens.
Direct SAM embedding for QSCD compliance
Minimized attack surface and latency
eIDAS v1 Qualified Signature Application
This application supports qualified remote electronic signatures under Regulation EU 910/2014. It runs inside the ProvenHSM network-attached HSM on top of the ProvenCore formally proven trusted execution environment.
Controlled auditable execution environment
Flexible deployment for QTSPs
CAPABILITIES
What This Application Does
The eIDAS v1 Qualified Signature Application provides a secure runtime environment for qualified remote signature workflows, where regulatory control is enforced independently from business applications and identity services.
Signature Activation Module (SAM) Logic
Enforcement of Signer Sole Control and Intent
ARCHITECTURE
How It Runs on ProvenHSM
The application runs as an isolated workload inside ProvenHSM, protected by the ProvenCore TEE operating system.
Optional HSM Alongside
Cryptographic HSM functionality can run alongside it, in a separate isolated domain.
Explicit & Auditable
All interactions between components are explicit and auditable.
Controlled Exposure
No generic cryptographic interface is exposed unless explicitly required by the deployment model.
DEPLOYMENT
Deployment Options
The application supports deployment models commonly used by QTSPs and ISVs.
Bundled SAM + HSM
This monolithic QSCD runs the SAM and HSM applications on one ProvenHSM.
CERTIFICATION
Certification Status & Roadmap
Certification is typically driven by the ISV providing the SAM software, with ProvenRun supporting integration and evaluated configurations.
By isolating applications and minimizing shared trusted code, ProvenHSM helps reduce evaluation scope and timelines compared to monolithic designs.
Pending certifications 2026
Certification FIPS
EAL 5+ Common
Current Status
An MVP is available today for demonstration, evaluation, and early integration. The current implementation is not yet Common Criteria certified.
AUDIENCE
Who This Is For
Designed for professionals operating qualified trust infrastructures.
Qualified Trust Service Providers (QTSPs)
Deploying or modernizing qualified remote signature services.
Independent Software Vendors (ISVs)
Developing SAM or SSA products and looking for a certification-oriented execution platform.
Security Architects & CTOs
Responsible for long-term maintainability, auditability, and regulatory alignment.
BENEFITS
Exclusive Benefits of Using ProvenHSM
ProvenHSM combines high-density multi-tenancy with formal security proofs to deliver a signing platform that exceeds standard compliance requirements.
