Trusted lists

Lists Tindom carries

The engine re-synchronises every list hourly and checks each list’s signature before using it. “Issued” and “Next update” are the operator’s own dates; “Synchronised” is the last time the engine downloaded and accepted the list.

EU/EEA trusted lists

The national lists of the EU and EEA member states, reached through the European Commission’s List of Trusted Lists. A qualified service on these lists can reach A+; a non-qualified one is capped at B.

Recognised third countries

Lists of countries recognised through an eIDAS Article 14 agreement, published by the Commission in a separate list. Legally equivalent to EU-qualified, so they can reach A+.

National lists outside eIDAS recognition

Supervised national schemes with no EU mutual recognition. Capped at B.

Commercial trust lists, and where Tindom departs from the scale

The Document Trust Grade recognises established commercial trust lists, with a ceiling of B. Tindom carries none, because of licensing restrictions: the best-known, the Adobe Approved Trust List (AATL), is not licensed for use in third-party services. We call them trust lists rather than trusted lists, because under eIDAS “trusted list” means a list with a statutory basis, and these are run under contract.

This is the one point where Tindom’s grades depart from the scale. A signature that chains only to a commercial trust list is graded D by Tindom, not recognised, where a validator carrying that list could reach B. To see whether Adobe Acrobat trusts a certificate, open the file in Acrobat.

Read the scale →

Regulated lists under evaluation

Statutory trust schemes outside the lists above, and how close each is to being loadable. A survey, not a roadmap: a scheme listed here is not a commitment to add it. Added national lists would be graded as national lists outside eIDAS recognition (ceiling B) unless an EU agreement recognises them.

A list is added when it has a statutory basis and a named supervisory body, and is published in a signed, machine-readable form whose signing certificate can be pinned.

Checked 22 Oct 2026.

Missing a scheme you rely on? Tell us.

How validation works is set out in the practice statement.