Diia.Sign vs QES in Ukraine 2026: Where It's Accepted (and Where It Still Isn't)
You’re registering as a sole proprietor (Ukrainian: ФОП, FOP), filing a tax return, or signing a contract with a counterparty — and the system fires back “підпис не підтримується” (signature not supported). Sound familiar? Since February 2022, Diia.Sign has gone through 3 waves of expansion. And yet in 2026, not every registry or bank accepts it.
Diia.Sign is a QES generated by the accredited certification authority (ACSK) of the State Service for Special Communications (SSSCIP), linked to your BankID and stored on government-secured servers. It’s not a file. It’s not a USB token. Your signature lives in your phone — confirmed by Face ID or PIN. Under Cabinet of Ministers Resolution №193 of 17.03.2022, it carries the same legal force as a handwritten signature or file-based QES. But legal force and actual acceptance are two different things.
# Diia.Sign vs File-Based QES: The Real Difference
Both are QES. Don’t confuse them with the old EDS format — Ukraine’s legacy electronic digital signature lost validity on January 1, 2024, per SSSCIP decision. If you’ve got a key in the pre-Law №2155-IX format, it’s dead.
Diia.Sign is better for individuals and FOP in mobile-first scenarios. Need to submit a tax report, get a statement, or file a request at a TsNAP service center? Your phone does it in 30 seconds. A file-based QES is what you need when a system can’t reach the SSSCIP server directly — think desktop accounting software like M.E.Doc or legacy integrations.
Here’s what matters: when a system refuses Diia.Sign, that’s almost always an integration failure on the recipient’s end — not a legal defect in your signature. The bank or registry simply hasn’t set up the API. That’s technical inertia, not law.
# How the authentication actually works
When you sign with Diia.Sign, the app sends a request to the SSSCIP server, which generates a cryptographic timestamp. The receiving party verifies it through the public certificate registry at czo.gov.ua. If the receiving system doesn’t query that registry automatically — it can’t “see” your signature. That’s why legacy 1C integrations and corporate ERP systems like SAP, without custom development, don’t recognize Diia.Sign.
# How to Set Up Diia.Sign in 5 Minutes
The first 2 steps take under a minute. The whole process is 5 minutes max — if you have a biometric passport or ID card.
Step 1. Open the Diia app → tap “Sign” in the bottom menu.
Step 2. Verify your identity: via BankID (PrivatBank, monobank — Ukraine’s largest digital bank, Oschadbank, A-Bank, and others) or via Diia.ID with photo verification. BankID is faster.
Step 3. Enter your phone number and confirm via OTP. Set a PIN or enable Face ID for signing.
Step 4. You’ll get a notification that your QES is ready. Valid for 2 years from issuance.
One catch: no bank account means no BankID. In that case, Diia.ID photo verification can take up to 24 hours. But that’s rare — most users already have monobank or PrivatBank.
# What you’ll need
- Ukrainian ID card or biometric passport (a traditional paper passport book hasn’t worked for new QES issuance since 2024)
- A phone number linked to BankID
- Diia app version 3.0.0 or higher (current as of June 2026 — version 3.4.2)
Honestly, the process got much smoother after the March 2025 update. Before that, Diia.ID verification could hang for up to 3 days.
# Where Diia.Sign Is Accepted in 2026
Ukraine’s public sector has integrated Diia.Sign broadly by 2026. According to the Ministry of Digital Transformation’s official Q1 2026 report, more than 4.7 million Ukrainians have an active Diia.Sign — and 78% of government services on diia.gov.ua accept it.
Here’s what works without friction:
- Diia portal — all government services, certificates, statements, e-passport
- Tax Service cabinet (taxes.gov.ua) — FOP tax declarations, ESV (social contributions) reports
- Prozorro (Ukraine’s public procurement platform) — participating in tenders as a FOP or individual
- e-Court (court.gov.ua) — filing claims, appeals, procedural documents
- TsNAP service centers — most administrative service centers (confirm at your local branch)
- Military registry (TCC) — registration for military-age persons via digital services
- e-Prescription — signing medical documents via the eHealth system
- AgroRegistry — land declarations for agricultural businesses
- monobank, PrivatBank — remote account opening for individuals
Diia.Sign is also accepted by most Ukrainian insurers for online third-party liability (OSAGO) policies through aggregators. According to the Motor (Transport) Insurance Bureau of Ukraine (MTIBU), all top-10 insurers have accepted QES via Diia for electronic policies since January 2026.
# Where Diia.Sign Still Isn’t Accepted — and Why
This is the part that actually matters. And it’s where things get frustrating.
The notarial property registry (DRRP). Notaries handling real estate transactions work through the State Property Rights Registry (DRRP). The registry’s access regulations require a file-based QES with the notary’s personal hardware token. Diia.Sign is technically incompatible here — DRRP hasn’t integrated with the SSSCIP server at the API level for notarial acts. As of June 2026, the Ministry of Justice is running a pilot, but there’s no broad rollout.
Oschadbank — for FOP and legal entities. Oschadbank (Ukraine’s state savings bank) accepts Diia.Sign for individual customers in its mobile app. But opening a FOP account, signing corporate documents, or operating through the Oschadbank 24 business system still requires a file-based QES. This is confirmed in Oschadbank’s own FAQ (Business section, updated April 2026).
Ukrzaliznytsia (Ukrainian Railways) — corporate document flow. Buying train tickets as an individual? Fine. But if you’re a FOP or company signing contracts with Ukrainian Railways as a counterparty, their EDI system requires a file-based QES. No Diia.Sign integration on the corporate side.
Several commercial banks — check individually. FUIB, Ukrgasbank, Kredobank — depending on the operation, they may require a file-based QES for remote FOP account opening. Policies shift, so it’s worth calling their support lines before assuming.
Legacy desktop accounting software — 1C, M.E.Doc, FreeAgent. Desktop bookkeeping tools work with file-based QES through a local agent. They physically can’t reach the SSSCIP server. M.E.Doc version 11.01.014 (March 2026) added Diia.Sign support — but only in the web version, not the desktop client.
# Free QES for Sole Proprietors: Three Ways That Work
“How much does a QES cost for FOP?” still circulates in Ukrainian accounting chats with answers like “UAH 800 a year” (roughly $20). That’s outdated. Since 2022, three channels give you a QES at zero cost.
Option 1 — Diia.Sign (covered above). Free, 5 minutes, phone only. Works for the Tax Service, Prozorro, e-Court. Doesn’t work for notaries or some banks.
Option 2 — Tax Service ACSK (ca.tax.gov.ua). The certification authority of Ukraine’s State Tax Service issues file-based QES in .jks and .dat formats. Free for individuals and FOP. The process is online — register on the site, verify via BankID or in person at a TsNAP, receive your key within 20 minutes. This QES is accepted by all Ukrainian registries, including DRRP (for clients, not notaries themselves) and most banks.
Option 3 — Privat24 / PrivatBank QES. If you’re a PrivatBank customer, you can get a file-based QES directly inside the Privat24 app. Free. Works for the Tax Service, M.E.Doc, Prozorro. For notarial registries — not always, so confirm with your notary first.
Paid QES certificates (from providers like Ukrzaliznytsia, Attestation Services, DepositSign) only make sense if you’re working with foreign partners who need a token with European eIDAS validation, or if a corporate system demands a USB hardware token.
# What to Do When a System Rejects Your Signature
Got an error — “підпис недійсний” (invalid signature) or “тип підпису не підтримується” (signature type not supported)? Don’t panic. The logic is straightforward.
Step 1. Find out exactly what the system requires — Diia.Sign, file-based QES, or a specific format (JKS, PFX, DAT). This is usually stated in the error message or the service’s FAQ.
Step 2. If you need a file-based QES — get one via the Tax Service ACSK at ca.tax.gov.ua (20 minutes online) or through Privat24 (if you’re a PrivatBank customer).
Step 3. If the system doesn’t support QES at all — write to their support team asking about integration timelines. Since January 1, 2024, all government systems are legally required to accept QES. A refusal is a violation — and you can escalate it through the Government Hotline at 1545.
Step 4. For a notary — bring a file-based QES from the Tax Service ACSK. Diia.Sign won’t help until the Ministry of Justice changes the DRRP regulations. No workaround on that one.
But here’s the thing: in 2026, the situation is moving faster than it was a year ago. Before investing 20 minutes in getting a file-based QES, check the specific service’s current FAQ. monobank quietly expanded Diia.Sign support for FOP in May 2026 — with no major announcement.
# Registry and System Status — June 2026
# Why Banks and Registries Are Moving So Slowly
There’s no bad faith here. It’s technical debt. Integrating with the SSSCIP server requires API development, certification, and security audits — and for many banks and government registries, that sits behind more pressing wartime priorities in the queue.
According to the Ministry of Digital Transformation, in Q4 2025 they signed agreements with 11 banks to expand Diia.Sign support for corporate clients. Oschadbank and Ukreximbank are on that list — but public timelines haven’t been announced. Expecting this to land in 2026 with certainty would be optimistic.
The notarial registry is a different story. It’s not just a technical problem — it’s regulatory. Changing the Ministry of Justice and notarial chamber rules requires a formal legislative act. The pilot for electronic notarization with Diia.Sign has been under discussion since 2023. It’s moving — just slowly.
# How a 2nd-Group Single-Tax FOP Actually Uses Both Signatures
This is real practice, not theory — used by thousands of Ukrainian sole proprietors in 2026.
Diia.Sign handles daily tasks: filing the quarterly ESV (social contribution) report through the Tax Service cabinet, getting official statements, e-Court filings when needed, smaller Prozorro tenders. Phone, 30 seconds, done.
File-based QES from the Tax Service ACSK covers M.E.Doc, counterparties who demand a “classic” QES, and any notarial action. It lives on a USB drive and in an encrypted cloud backup.
That’s not extra work — getting both takes about 25 minutes total. And it eliminates 99% of signature headaches for the next year.
# See Also
- Credits and financing for small business and sole proprietors
- Business organization: registration, documents, registries
- Crypto exchanges and digital financial tools
- Currency and financial planning for Ukrainian business
Subscribe to Kompanion — we break down changes in Ukrainian legislation and digital services before they become a problem for your business.
Часто задаваемые вопросы
What's the difference between Diia.Sign and a regular QES?
Diia.Sign is a QES — but it's stored on SSSCIP government servers rather than on your computer. You sign through the Diia app using Face ID or a PIN. A regular file-based QES is stored locally, in .jks, .pfx, or .dat format. Both have identical legal standing, but some systems — notarial registries, legacy 1C integrations — only read the file format.
How do I get Diia.Sign in 2026?
Open the Diia app → 'Sign' section → verify via BankID or Diia.ID with photo verification → confirm your phone number. Takes 3–5 minutes. You'll need a biometric passport or ID card. The service is free.
Is QES free for sole proprietors (FOP) in Ukraine?
Yes. FOP can get a QES through three channels: Diia.Sign (free), the Tax Service ACSK at taxes.gov.ua (free), or Privat24 — for PrivatBank customers. Paid QES certificates (UAH 300–800/year, roughly $7–20/year) are only needed for specialized hardware tokens used in corporate systems or for working with foreign counterparties requiring eIDAS validation.
Where is Diia.Sign definitely not accepted in 2026?
Notaries registering real estate transactions through the State Registry of Property Rights (DRRP) require a file-based QES only. Ukrzaliznytsia (Ukraine's national railway) corporate document systems and some insurers haven't integrated Diia.Sign into their internal platforms. Oschadbank (Ukraine's state savings bank) accepts Diia.Sign for individuals but not for FOP or legal entities on certain operations.
What should I do if a system rejects Diia.Sign?
Get a free file-based QES through the Tax Service ACSK at taxes.gov.ua or via Privat24. The process takes 10–15 minutes. That resolves it for most registries. For notaries specifically, a file-based QES with confirmed identity is required — Diia.Sign won't work until the Ministry of Justice changes the DRRP regulations.