Electronic signature and certification in Algeria: the company guide

Chapter 01

Signature, certificate, seal: what exactly is each one?

Three things blur together in everyday conversation, while the law draws sharp lines between them.

Law 26-02 adds two neighbouring services: electronic timestamping, which binds a document to a given instant and proves its existence at that instant, and electronic registered delivery, which produces proof of sending and receipt between identified parties. Together these form the "trust services": those on which a document's legal fate can depend.

A clarification that avoids many mistakes: the legal definition of the signatory is a natural person. A company never "signs" all by itself — an identified manager or representative always signs on its behalf. The seal completes this mechanism in the name of the legal person.

The new law also distinguishes, as its predecessor did, two levels within the instruments themselves. An advanced signature or seal meets four conditions: unambiguous linkage to its holder, identification, detection of any subsequent alteration, and creation data kept under high control by the holder (art. 4). A qualified signature or seal is an advanced one plus two further conditions: it rests on a qualified certificate and is created by a qualified device (art. 5). The distinction is no lexical nicety: assimilation to handwriting and the seal's presumption are granted at the second level only. When comparing commercial offers, always ask whether the certificate opens the qualified level or merely the advanced one.

Chapter 02

What value does an electronically signed document carry in court?

Two articles carry the entire evidential regime, and both survived the change of law untouched.

Rule 2 — non-discrimination. A signature failing those conditions is not void for that reason: it cannot be denied legal effect or refused in court merely because it is electronic (art. 9 of Law 15-04; art. 16 of the new law, now extended to seals and timestamps). It will be weighed like any evidence — with the reliability debate that the qualified signature extinguishes in advance.

In management terms: routine exchanges can stay on simple means, provided you accept carrying the burden of proving their reliability in a dispute. Heavy acts — transfers, guarantees, long-term framework agreements — deserve the qualified chain, because it reverses that risk. We develop the evidential side, sanctions included, in the companion article to this guide.

Chapter 03

Law 26-02: what changes, what continues?

Published in Official Gazette No. 14 of 18 February 2026, Law No. 26-02 rebuilds the general framework: it organises "trust services" for electronic transactions and electronic identification, creates a single national authority — a specific public establishment that will supervise, control and itself provide trust services (arts. 47-48) — and widens the legal palette to instruments the previous framework ignored: electronic seals, timestamps, electronic registered delivery, website-device authentication certificates, electronic archiving.

But Article 115 repeals Law 15-04, and this is where careful reading matters. Three transitional safeguards keep the system running:

One notable exception: Article 114 subjects everything, except the penal title, to forthcoming regulatory texts. Offences under the new law are therefore punishable right away, while the rest awaits its decrees. And Article 112 prepares what comes next: the authority will itself provide trust services in the economic domain until effective competition emerges between private providers.

An assumed point of vigilance: until those implementing texts are published, any month may change modalities. This guide will be revised at each publication — its update date is the proof.

Chapter 04

Who issues certificates today, and which should you choose?

The architecture inherited from Law 15-04 has three tiers, all maintained through the transition: the National Electronic Certification Authority reporting to the Prime Minister, which approves certification policies; the Governmental Authority, serving the public branch; and the Economic Authority — the AECE, embodied by ARPCE, the post and telecommunications regulator — which supervises and controls certification for the benefit of the public.

In the economic branch, the offer has been live since 16 February 2025, the official launch date of electronic signature and certification services announced by the AECE communiqué. Three products make up the « THI9A » range, presented as qualified certificates compliant with the law, secured on FIPS 140-2 certified devices and valid for two years with unlimited use:

The choice follows function, not hierarchy: everyone authorised to bind the company receives a personal signature certificate; the company receives its seal for documents it issues in its own name; staff interacting with administrative portals benefit from THI9A-ID's dual use. A typical SME starts with the seal plus one certificate for the manager — then extends according to real needs measured over a few months.

Chapter 05

How does your company actually obtain its certificates?

The process described by the economic authority takes four steps, organised around its registration portal dedicated to public and private economic operators (the "AECE RA Portal", at ra.aece.dz):

One complementary service is worth knowing from the start: the authority offers a free validation service for the signatures and seals it has issued. Your partners can verify your documents — keep that in mind when negotiating signature clauses in contracts.

Between order and delivery, three internal organisational decisions avoid weeks of rework. First, allocate the secure devices: who keeps their key on a personal smartcard versus a shared device — the second option undermines the decisive condition of exclusive control. Second, batch the face-to-face appointments: grouping every signer into a single day saves both the representative and the company. Third, decide in advance who signs renewal requests as expiry approaches, so the company's signing capability never stops because the authorised person was travelling. These small details separate a quiet rollout from one reopened every month.

Chapter 06

In which procedures is electronic signature already required or useful?

This is not theory: two major procedures already rest expressly on the electronic route.

Elsewhere, the frontier is less advanced than believed. At our verification date, the tax and social portals we consulted open onto access codes supplied by the administrations, not onto a qualified certificate: remote tax or social filing does not, by itself, justify buying a fleet of certificates. Between businesses, however, qualified electronic signatures naturally fit repetitive contractual flows — purchase orders, general terms, amendments — where they eliminate printing, scanning and postal chasing.

One methodological warning before any purchase decision: sort your uses by the question each document must answer. Proving the document comes from the company? That is the seal's job. Proving a specific individual committed? That is the personal signature's job. Merely logging securely into a portal? Authentication suffices — no need to involve signature at all. Companies that confuse these three questions end up with surplus certificates in some places and missing ones elsewhere; drawing that line cleanly is the first thing we measure in framing sessions.

Chapter 07

Which rules make your signature enforceable on the day of a dispute?

An electronic signature is not judged on court day; it is prepared at signing time. Six rules cover most situations we see arrive too late:

• Check the certificate before every major commitment: validity period current, issuer identifiable, use consistent with the purpose for which it was issued — the law punishes using a certificate for purposes other than its own.
• Keep exclusive control of your creation devices: a PIN shared with an assistant, a permanently plugged key, a shared workstation — each shortcut destroys the very condition of qualification.
• Sign the final file, not a draft: any later alteration must be detectable; a document edited after signature loses its chain.
• Keep the signed file in its original form, as Article 4 of Law 15-04 requires: a paper printout is not an archive, it is a copy.
• Timestamp sensitive exchanges: a qualified timestamp benefits from a presumption of accurate date and time — invaluable as soon as priority or limitation periods are questioned.
• Document internal authorisations: who in the company may sign what, on what mandate. This is the register the logic of Article 44 of Law 15-04 already imposes on the provider side — replicate it internally.

Chapter 08

Loss, compromise, dispute: what do you do, what do you risk?

The liability regime reads as three concentric circles.

On the holder's side, the rule is strict: from handover of the certificate, you are solely responsible for the confidentiality of your creation data, and must request revocation as soon as you doubt that confidentiality or the accuracy of the certificate's information (art. 61). Revocation — requested by the holder or pronounced ex officio — is final; a revoked certificate is not "unlocked", a new one is requested.

On the counterparty's side, whoever relies on a qualified certificate benefits from the issuing provider's liability: the provider answers for harm caused by inaccurate information or missed revocation, unless it proves absence of negligence (arts. 53-54). That grounds the whole system's reliability — and is precisely why checking a certificate's status before a heavy commitment costs nothing.

On the criminal side finally, thresholds are high and applicable since the new law's publication: false statements to obtain a certificate (art. 66 of Law 15-04: 3 months to 3 years and DA 20,000 to 200,000); holding, disclosing or using another's signature creation data (art. 68: up to 3 years and DA 5,000,000); using the certificate for other purposes (art. 74: fine up to DA 200,000). Legal persons face fivefold fines. These amounts date from the former regime; the penal title of Law 26-02, immediately applicable, reorganises offences around trust services — the two readings go together, as developed in the companion article.

When an incident occurs, the sequence is not improvised: establish facts, revoke, inform affected counterparties, reissue, then rebuild the trail of what was signed during the suspect window. That is the subject of one of the workbook sheets accompanying this guide. One question always follows: what becomes of documents signed by the revoked certificate before revocation? Signatures validly affixed do not lose force because the certificate was later revoked — which is exactly why dating every signature and recording the certificate's status matters. What was signed during the window of doubt, just before and after revocation, is the first object of scrutiny: there your internal register and timestamps become your primary defence, and there the seriousness of the internal organisation built in calm days gets measured.