# Compliance

What is this? The steps YORYX TRUST must complete before approval.

Who is it for? For anyone following our regulatory progress.

What can I do here? See the documents already published in the register.

- [See the document register](https://trust.yoryx.ma/en/publications)

## The steps of our regulatory path

This path is presented as a sequence of steps with no announced schedule: each step depends on a decision of the national authority.

- File with the DGSSI the prior declaration required for non-qualified trust services.

- Have our practices assessed by a conformity assessment body.

- File the application for approval with the DGSSI.

- Publish the certification policy and the certification practice statement.

- Open the service to the public once the national authority has ruled.

- Submit to the continuous supervision of the national authority and notify it of any security incident.

- Back to top

## The standards we target

These standards are our working target. No conformity is claimed at this stage.

## ETSI EN 319 401

Target: general requirements for trust service providers.

## ETSI EN 319 403-1

Target: requirements for conformity assessment bodies.

## ETSI EN 319 411-1

Target: requirements for trust service providers issuing certificates.

## ETSI EN 319 411-2

Target: additional requirements for trust service providers.

## ETSI EN 319 412

Target: electronic certificate profiles.

## ETSI EN 319 421

Target: requirements for electronic timestamping services.

## ETSI EN 319 422

Target: timestamp token protocols and profiles.

## CEN EN 419 221-5

Target: trust cryptographic module.

- Back to top

## What is in place today

- A dedicated legal entity, YORYX TRUST SASU, separate from the group's product companies.

- A registered office in Morocco, in Marrakech.

- A single point of contact for any regulatory or security question.

- This site opens no accounts and has no form asking for your name or contact details. The site application does not measure its audience. However, the systems that deliver pages and protect the site process technical connection data, such as IP addresses.

- Back to top