LuxTrust is a qualified trust service provider and certification authority based in Capellen, Luxembourg. It provides digital identities for private individuals, qualified electronic signatures for businesses and public bodies, and the LuxTrust Mobile app, which replaced the physical token that was deactivated at the end of 2024. Its professional offers include the COSI electronic signature service, customer identification and authentication, electronic archiving, time-stamping, SSL certificates and a managed data-encryption service. The encryption service is run together with POST Luxembourg and Thales, with LuxTrust hosting and operating the solution.
The company's website names POST Luxembourg as its shareholder and describes the shareholding as entirely European, with no single majority owner outside the EU. It presents itself as a qualified trust service provider listed on the EU trusted list and as an operator of vital importance under national rules. For the encryption service, the company states that the keys remain under the customer's sole control, but the website does not name the data-centre location. For a European organisation this is a Luxembourg provider under EU trust-service regulation.