Selecting an eSSL means distinguishing organisational duties, software requirements and the scope of an attestation. Use this overview and official sources to prepare your requirements.
The main framework comprises Act No. 499/2004 Coll., Decree No. 259/2012 Coll. and the National Standard for Electronic Records Management Systems. Duties depend on the organisation's legal status and records management arrangements.
Check the named system, version, scope and validity. Published attestations and related information are available from the Czech Standardization Agency's attestation centre and the Ministry of the Interior.
Using attested software still requires appropriate processes, roles and internal rules. We help compare those requirements with current practice and plan the necessary changes.
Alongside the software evidence, address export, migration, integration and support. These belong in the requirements and acceptance scenarios before a contract is signed.
A cross-border project needs an owner for each record, a retention schedule, access rules and an agreed disposal process. Country and sector requirements should be mapped before configuration, particularly where several legal entities share a platform.
For UK public authorities, the section 46 records management Code of Practice provides guidance on keeping, managing and disposing of records. It is not a software certification. The organisation's status, applicable legislation and archival responsibilities still need to be established.
Receipt or creation → Registration and filing → Routing and handling → Completion and closure → Storage and retention periods → Appraisal procedure → Transfer to archive / Authorised destruction. The procedure determines the outcome; not every document is transferred to an archive.
The organisation's status and Act No. 499/2004 Coll., particularly sections 3 and 63, determine the duties. Retaining documents, performing statutory records management and using attested eSSL are different requirements with their own conditions and exceptions.
It assesses a system against specified Czech requirements. Check the actual product, version and validity. It does not confirm that every customer has configured and used the system correctly, or that another country's rules are met.
Consult the official information from the Czech Standardization Agency's attestation centre and the Ministry of the Interior. Match it to the offered system and request the relevant evidence from the supplier.
No. Product assessment and review of an organisation's practices serve different purposes. A review can reveal gaps between internal procedures, configuration and what staff actually do.
Not automatically. Follow the applicable appraisal and disposal procedure, including archival selection where required. Other retention duties or a hold may prevent deletion even after the scheduled period.
A Submission Information Package carries documents and related metadata into an archival process. It is not simply a ZIP of files. Its structure and validation depend on the applicable standard and receiving archive.
The visible mark alone does not establish the signer's identity or document integrity. Distinguish appearance, the signing technology and the level required for the transaction, including in a signing workspace.
No. Language is separate from legal requirements. Retention, disposal, signatures, access and archival transfer must be designed for the jurisdiction and sector in which the system is used.
No. It is guidance for records management by public authorities. A supplier's software and the organisation's procedures need to be assessed against the requirements that actually apply to the project.