Compliance

What is this? The steps YORYX TRUST must complete before approval.

Who is it for? For anyone following our regulatory progress.

What can I do here? See the documents already published in the register. See the document register

A neat grid of small dark square tiles, a few of them faintly lit in teal.

The steps of our regulatory path

This path is presented as a sequence of steps with no announced schedule: each step depends on a decision of the national authority.

  1. File with the DGSSI the prior declaration required for non-qualified trust services.

  2. Have our practices assessed by a conformity assessment body.

  3. File the application for approval with the DGSSI.

  4. Publish the certification policy and the certification practice statement.

  5. Open the service to the public once the national authority has ruled.

  6. Submit to the continuous supervision of the national authority and notify it of any security incident.

Back to top

The standards we target

These standards are our working target. No conformity is claimed at this stage.

ETSI EN 319 401

Target: general requirements for trust service providers.

ETSI EN 319 403-1

Target: requirements for conformity assessment bodies.

ETSI EN 319 411-1

Target: requirements for trust service providers issuing certificates.

ETSI EN 319 411-2

Target: additional requirements for trust service providers.

ETSI EN 319 412

Target: electronic certificate profiles.

ETSI EN 319 421

Target: requirements for electronic timestamping services.

ETSI EN 319 422

Target: timestamp token protocols and profiles.

CEN EN 419 221-5

Target: trust cryptographic module.

Back to top

What is in place today

Back to top