Safelayer develops solutions whose security excellence is evaluated by independent bodies. All Safelayer products obtain, among others, CC certification, the most representative of the sector.

Common Criteria EAL4+

eal4Common Criteria (CC) is an international standard (ISO/IEC 15408) that defines criteria for assessing the security of IT products and/or systems.The CC certificate is the benchmark adopted by the ICT sector to provide the necessary and sufficient guarantees for quality and reliability. Safelayer products have the following levels of assurance:

  • KeyOne PKI 4.0 (CA/XRA/VA) and KeyOne ePassport (CSCA/CVCA/DV) 4.0 with a CC EAL4+ (ALC_FLR.2) guarantee level in compliance with the security level 3 CIMC Protection Profile ("Certificate Issuing and Management Component", NIST). For more information:
  • KeyOne 3.0 with a CC EAL4+ (ALC_FLR.2) guarantee level in compliance with the security level 3 CIMC Protection Profile ("Certificate Issuing and Management Component", NIST). For more information:
  • TrustedX 3.0 with a CC EAL4+ (ALC_FLR.2) guarantee level in compliance with the USA Government "US Government Family of Protection Profiles. Public Key-Enabled Applications For Basic Robustness Environments", USMC (United States Marine Corps). For more information:

ISO 9001:2015

iso9001ISO 9001 regulations are international rules and guidelines for managing quality systems. Since their initial publication in 1987, they have achieved global recognition as the basis for establishing quality management systems.

Safelayer certifies its Quality Management System using the ISO standards. Safelayer currently has the ISO 9001:2008 certification stamp of quality for the design and development of security software and consulting and training services for integrating identity and trust management solutions.

UNE 166002:2014

une166002With the aim of driving innovation in all its products and fostering R&D&I as a differentiating competitive factor, Safelayer has obtained the UNE 166002:2014 certification.

The UNE 166002 "R&D&I Management: R&D&I Management System Requirements" standard sets out guidelines for effectively organizing and managing research, development and innovation activities based on tools such as the early identification of opportunities for technological evolution or the creativity maximisation applied to all company activities. The result is a highly effective and efficient R&D&I management system that guarantees excellence in the companies certified with this standard.

ETSI member and ESI Technical Committee member

ETSI member logo SmallSafelayer is member of ETSI (European Telecommunications Standards Institute), the recognized european standards body – European Standards Organization (ESO) – dealing with telecommunications, broadcasting and other electronic communications networks and services. ETSI is supporting European regulations and legislation through the creation of Harmonised European Standards. Only standards developed by the ESOs CEN (Committee European Normalization), CENELEC (Comité Européen de Normalisation Electrotechnique) and ETSI are recognized as European Standards (EN - European Standards).

In addition, Safelayer is member of the ESI (Electronic Signatures and Infrastructures) Technical Committee, in which we are collaborating in different working groups.

From an electronic signature perspective, the bodies working on the standards for the eIDAS framework are CEN and ETSI organizations. Safelayer is involved in working groups of both CEN and ETSI organizations.


ETSI Logo blueSafelayer has taken part since 2007 in the XAdES Remote Plugtest interoperability tests organized by the European Telecommunications Standards Institute (ETSI). The company also participated in the precursor to these tests run by the Next Generation Electronic Commerce Promotion Council of Japan (ECOM).

The ETSI Remote Plugtests is an interoperability event open to developers of software products or services that implement the XAdES (XML Advanced Electronic Signature), PAdES (PDF Advanced Electronic Signature), CAdES (CMS Advanced Electronic Signature) and ASiC (Associated Signature Container) standards for assuring the quality of their solutions and implementations.


Mobile World Congress
February 25 - 28, 2019 | Barcelona, Spain

Smart City Expo World Congress
November 13 - 15, 2018 | Barcelona, Spain

World eID and cybersecurity
September 24 - 26, 2018 | Marseille, France

September 3 - 7, 2018 | Barcelona, Spain

Security Document Worldecurity Document World
June 25 - 27, 2018 | London, United Kingdom

Digital Trust & Paperless Conference
April 24, 2018 | Prague, Czech Republic

RSA Conference
April 16 - 20, 2018 | San Francisco, USA

Govern Digital
March 21 - 22, 2018 | Barcelona, Spain

Mobile World Congress
February 26 - March 1, 2018 | Barcelona, Spain

Jornadas CERES
February 7 - 8, 2018 | Madrid, Spain

November 28 - 30, 2017| Cannes, France

World eID and Cybersecurity
September 25 - 27, 2017 | Marseille, France

Security Document World
June 26 - 28, 2017 | London, UK

eSignature in Public Administrations
June 7, 2017 | Madrid, Spain

June 5 - 7, 2017 | Szczecin, Poland

May 21 - 23, 2017 | Dubai, UAE

We use cookies to improve our website and your experience when using it. Cookies used for the essential operation of this site have already been set. To find out more about the cookies we use and how to delete them, see our Privacy Policy.I accept cookies from this site