You are here

Fees

Fees

These are the charges tScheme makes for approval. These fees do not include the cost of assessment, which is agreed between the applicant and their selected assessor.

Approval Fees

(Effective from 1st September 2017)

Certification Authority (CA) Service
Approved trust service type Approval type and scope Approval fee Annual renewal fee
Complete package, from registration to full certificate management. “tScheme Approved” PKI Service £20,000, including up to 100 RA points of registrant access. (See general note 3). £6,000

Notes: If the optional Signing Key Pair Management Profile is not appropriate, the approval and annual renewal fees are reduced to £18,000 and £5,400 respectively.

Identity Provider (IDP) Service
Approved trust service type Approval type and scope Approval fee Annual renewal fee
Complete package, from registration to full credential management. “tScheme Approved” non-PKI Service £17,000, including up to 100 RA points of registrant access. (See general note 3). £4,800

Notes: If the optional Attribute Registration Profile is not appropriate, the approval and annual renewal fee are reduced to £14,000 and £4,200 respectively.

Additional Registration Agent
Approved trust service type Approval type and scope Approval fee Annual renewal fee
For each additional Registration Agent operating under a full CA or IDP service. “tScheme Approved” Service “Agent RA” (as an extension to the Service Approval above) £3,000, for up to 100 RA points of registrant access. (See general note 3). £600

Notes: There is no additional certificate liability and the applicant is not seeking independent approval.

Outsourced or Specialist Trust Service
Approved trust service type Approval type and scope Approval fee Annual renewal fee
Service seeking independent approval against specific Profiles (Note 4). “tScheme Approved” Service Base Profile £4,000, plus: £3,000 for Registration Authority and/or £2,000 for each other applicable Approval Profile. (See general note 4). £1,800 Base; plus £600 for each additional Profile.

Notes: Although not necessarily a full CA or IDP service, it fulfils the requirements for service approval in that it has policy and practice statements, subscribers and relying parties (usually independent TSP partners), statements of liability acceptance and so on. It must be fully assessed against all of the criteria in the Profiles that apply to it.

CA Registration Service
IDP Identity Registration Service
IDP Attribute Registration Service
Approved trust service type Approval type and scope Approval fee Annual renewal fee
  “tScheme Approved” Service Base Profile £4,000, plus £3,000 for CA, Identity or Attribute Registration. Covers up to 100 points of registrant access or identity verification.(See general notes 3 and 4). £2,400

 

General Notes

  1. Service providers seeking approval are required to sign a Registered Applicant agreement with tScheme prior to commencement of assessment. The fee payable on signing is £5,000 and then a further £5,000 annually until either the service is Approved or the Registered Applicant status lapses, however £5,000 is then rebated against the final Approval Fee provided Approval is granted within one year of the payment of that Registration Fee; otherwise the Registration Fee is non-returnable.
  2. Along with Approval against applicable Profiles as detailed above, service providers can ask tScheme to consider for inclusion in a Grant of Approval, explicit endorsement of conformance to certain recognised externally produced standards or guidelines. If accepted, the fee for such inclusion is £1,000 per standard or guideline with an annual Renewal Fee of £300 per standard or guideline. Further details can be found in the tScheme document ‘tSd0244 - Required Assessment Procedures’, which is available in the library under the ‘supporting documents’ section.
  3. An incremental fee will be applied, at the ‘Agent RA’ approval and renewal rates, for each block of registrant access points above the following thresholds: 100, 250, 500, 1000, 2000, 3000, 4000 and so on.
  4. Taken with the Fee of £3,000 for the Certification Authority or Identity Provider Profile, the cost of an Approval against all of the individual Service Profiles is therefore £20,000 for a CA and £17,000 for an IDP - the same as for the full CA/IDP Service Approval.

Getting tScheme approval

Approval usually takes at least three months, but it can be quicker.

MORE >

Using the tScheme mark

The tScheme mark lets users know that your service offers the highest levels of trust.

MORE >

Our members

We’re a member-led not-for-profit organisation.

MORE >