Documents
For a QWAC
- Company registry extract or an equivalent document from the official register of the entity (for Portuguese companies, the certidão permanente access code is enough).
- Identification of the legal representative making the request.
- A power of attorney, if the applicant is not the legal representative.
- For public bodies: the founding act or the document that identifies the body and who represents it.
For a PSD2 QWAC, also
- The authorisation or registration number with the competent authority (Banco de Portugal or the authority of another Member State).
- The authorised PSD2 roles (account servicing, payment initiation, account information, card issuing).
How identity is verified
Article 24 of eIDAS requires the qualified provider to verify, by reliable means, the identity of the applicant and of the entity represented. Depending on the provider, this can be done with a qualified electronic signature of the representative (for example with a national eID such as the Portuguese Citizen Card or Chave Móvel Digital), by video identification, or in person. The company data is confirmed against official registers.
Timelines
Usually 3 to 7 business days once all documents are in. Incomplete paperwork is what causes most delays, so we review everything before submitting it to the provider. For later reissues, while the organisation validation can still be reused, it is much faster.
Multi-year subscriptions and reissues
Since March 2026, a public TLS certificate is valid for at most 200 days, and the limit will keep going down. That is why we sell QWACs as 1- to 5-year subscriptions, with reissues included for the whole term. You pay once, with a discount, and the certificate is reissued whenever needed.