Digital Nomad
Digital Signatures Upgraded in Ukraine: What Individuals and Businesses Need to Know
Ukraine transitions to the “Kupina” cryptographic standard for qualified electronic signatures—ensuring stronger security and requirements.
By NomadicTax Research Team • 5-8 min read • September 16, 2026
## What is the “Kupina” Standard?
Ukraine has introduced the **Kupina** national cryptographic standard for **qualified electronic signatures**, designed to replace outdated algorithms and improve overall cybersecurity. This standard was formally rolled in on **1 September 2026**, following preparatory work that began on **26 August 2026**, when the State Tax Service began issuing certificates under Kupina. ([tax.gov.ua](https://www.tax.gov.ua/en/mass-media/news/print-1045106.html?utm_source=openai))
## Who Needs to Be Aware?
Affected groups include:
- Individuals and businesses who **use qualified electronic signatures** for tax filings, legal contracts, or government submissions.
- Providers of **electronic trust services**; Ukraine’s State Tax Service is one such provider and has updated its systems accordingly. ([tax.gov.ua](https://www.tax.gov.ua/en/mass-media/news/print-1045106.html?utm_source=openai))
- Any citizen or entity whose previous certificates were issued under older cryptographic standards and are nearing expiry.
## What Doesn’t Change Immediately
While the standard shifts, the following remain consistent:
- **Existing certificates** remain valid **until their individual expiration dates**. No immediate re-issuance is required. ([tax.gov.ua](https://www.tax.gov.ua/en/mass-media/news/print-1045106.html?utm_source=openai))
- Systems continue to **support both the old and new standards** during the transition period to maintain interoperability. Users shouldn’t experience service disruptions. ([tax.gov.ua](https://www.tax.gov.ua/en/mass-media/news/print-1045106.html?utm_source=openai))
## Actionable Checklist for Businesses and Individuals
| Task | Recommended Steps |
|------|--------------------|
| Confirm compliance | Check if your current electronic signature certificate uses an older algorithm. If yes, ensure you plan ahead for renewal under Kupina. |
| System readiness | Ensure software and platforms that validate signatures are updated to recognize the Kupina standard. This may involve updating cryptographic libraries and certificate validation tools. |
| Training & documentation | Inform staff and partners about the change. Ensure workflows and legal documents referencing signatures are updated if they mention specific algorithms. |
| Security review | Longer term, review your security protocols to assess whether you’re using best practices in cryptographic key management. |
## Use Cases & Implications
- A tech company submitting VAT filings through Ukraine’s e-tax system will now need to ensure their portal accepts Kupina-signed documents.
- An individual signing real-estate contracts digitally will remain unaffected until their current signature expires, but subsequent signatures must comply with Kupina.
- Trust service providers need to manage certificate lifecycles under the new standard and make sure validation on relying parties’ systems stays robust.
## Big Picture Benefits
- **Greater security**: Kupina is more resistant to modern cyber-threats than legacy encryption methods.
- **Alignment with national strategy** to modernize digital government and protect sensitive data.
- **Legal certainty**: Documents signed under old standards retain legal force, helping avoid transitional ambiguity.
## Final Thoughts
- No rush: existing signatures remain valid until they expire. Plan renewals accordingly.
- Inspect software compatibility and ensure that relying parties (banks, courts, government agencies) validate Kupina signatures properly.
- If you’re a service provider in the digital trust ecosystem, engage proactively—for example by updating validation services, issuing clear guidance to customers, and ensuring compliance with the new standard.
By taking these steps early, individuals and entities can avoid disruption and benefit from stronger, more secure digital interactions.