Read from the chip
The operator puts the document on the reader and the data arrives already signed by the state that issued it. Faster than typing, and no transcription errors to chase later.
xRA
The desk where a subscriber becomes a certificate holder. xRA is a registration authority platform for qualified trust service providers — identity proofing, evidence, and the certificate lifecycle that follows.
A trust service has two halves. One issues certificates; the other decides who deserves one. xRA is the second half: the counter where somebody presents a document, an operator checks it, and the decision is recorded well enough to stand up years later.
We carry registration, not signing. Private keys stay on the subscriber's card or inside the signature activation module — never with us. What we hold is the record of who was identified, by whom, and on what evidence.
One counter, three ways in
Entered by the operator
No reader, an older document, a chip that will not answer — the counter keeps working. The same checks apply; only the keyboard changes.
Filled in by the subscriber
Somebody completes the form on your portal and walks in later. The operator picks up what is already there and spends the appointment on the part that needs a person.
Whichever way the data arrives, it meets the same rules. Nobody becomes a client until every required check has passed — and a validation that ends in "no" leaves the evidence behind rather than a half-made record.
What the operator actually does
Checks the document
A list of security elements to work through — hologram, microprint, laminate, the edges of the photograph. Each one is ticked on its own and recorded on its own, because a single "I checked everything" says nothing about what was looked at. The list is yours to edit when a new series is issued.
Confirms the person
A one-time code to the address and the number, read back by the subscriber standing at the counter. The code never appears on the operator's screen: one the operator can see would prove nothing.
Prints, signs, files
Contract, terms and consent come out of your own templates, get signed by hand, and go back in as the signed copy. Which documents an enrolment produces is a setting, not a code change — providers disagree, and both are accommodated.
Hands over the credential
A smart card or token written at the desk, or a remote-signing credential the subscriber uses from their phone. Both start from the same verified record.
Nothing is issued on trust
A certificate is not created in anyone's name until their identity has been verified in person and every document you require is on file, signed. That rule lives inside the platform rather than in the screens on top of it, so there is no path around it — not a different button, not an integration, not a hurried day.
Every check, every refusal and every disclosure is written down, and an operator can read their own record. When an auditor asks what happened at a counter three years ago, the answer exists.
Built for how trust services really run
Several certificate authorities
Run more than one, side by side, each with its own credentials and its own rules about what a certificate may contain. A certificate is issued from the authority it belongs to.
Standard desk hardware
Full-page document readers and the current generation of smart cards and USB tokens. What a desk can do depends on the equipment in front of the operator, and the platform reports honestly which of it is available.
Your own network
Installed on your infrastructure and able to run completely closed, with no outbound internet. For a regulated provider that is usually not a preference but a requirement.
A pilot mode that stays honest
Before qualification, or during a trial, the locks can stand aside while every unmet requirement stays visible on screen and in the record. A test installation should never be mistaken for a compliant one.
Modules you can add
Billing and invoicing
Invoices raised from the order the operator already took, submitted straight to e-Factura, with incoming bank payments reconciled automatically so a paid invoice closes itself.
Support desk
Email, the contact form on your site and the telephone, all arriving in one place, with each ticket attached to the subscriber it concerns. Already running a helpdesk? We extend into it instead of asking anyone to work in two.
Talk to us about your service
Every registration authority is shaped by the regulator it answers to and the counters it runs. Tell us about yours and we will show you how xRA fits it.
Get in touch