Once you make the decision to accept non-traditional handwritten signatures for your business documents, there is still some research to undertake. For a start, do you understand the finer points of the digital vs electronic signatures debate? This is a common problem for those who are just beginning to work with online signing and it is difficult to find a clear answer.This article is here to let you know the difference between the two and how you can use these signatures to save time and money. You will also learn how to create an easy-to0retrieve audit trail that ensures you remain compliant with the&nbsp;eIDAS Regulation&nbsp;and European Union law at all times. Keep reading to find out everything you need to know about digital and electronic signatures.<h2 style="text-align: start">What is a Digital Signature?</h2>Neither the EU’s eIDAS Regulation nor the&nbsp;ESIGN Act in the US, two major pieces of legislation regarding electronic signing, make any use of the term ‘digital signature’ at all. This is due to the fact that a digital signature is not a legal term, but rather a technical one. A digital signature is the&nbsp;mathematical algorithm&nbsp;that provides the digital thumbprint to identify the signer, whereas the actual signature itself is an electronic signature.That being said, many people use ‘digital signature’ and ‘electronic signature’ interchangeably, which is where some of the confusion lies.<h2 style="text-align: start">Difference Between Digital Signatures and Electronic Signatures</h2>The&nbsp;Uniform Electronic Transactions Act&nbsp;(UETA) in the United States refers to a digital signature as one that uses “using public key encryption technology” to be able to identify the signer. That is the equivalent of an Advanced Electronic Signature (AES) or Qualified Electronic Signature (QES) as defined in eIDAS in the EU. The real difference is geography in this case.The&nbsp;European Union Agency For Network And Information Security&nbsp;(ENISA) explains its definitions of the two terms when it says“QES are implemented by means of asymmetric cryptography. With this technology, each signatory owns a key pair made of a private and a public key (the technology is called the public key cryptography) and the so produced electronic signatures are called digital signatures.”Essentially, when we talk about companies in European Union member states using online tools to verify documents, we should use the phrase ‘electronic signature’ as that provides the more accurate description of what we are trying to achieve.<h2 style="text-align: start">What are Electronic Signatures Used For?</h2>You can use electronic signatures for different types of document, dependent on the level of security you require. Here is a guide to potential uses of Simple Electronic Signatures (SES), AES and QES.<table><tbody><tr><td colspan="1" rowspan="1">Type of Signature</td><td colspan="1" rowspan="1">Possible Uses</td></tr><tr><td colspan="1" rowspan="1">SES – Any form of electronic mark with no need to verify the identity of the signer</td><td colspan="1" rowspan="1"><ul><li>Parcel delivery person’s terminal</li><li>An ‘I Agree’ button on an app’s terms and conditions</li><li>Typing your name at the bottom of an email</li></ul></td></tr><tr><td colspan="1" rowspan="1">AES – Higher level of signer identification and ensuring the document can’t be changed after signing</td><td colspan="1" rowspan="1"><ul><li>Sending a One-Time Password (OTP) via SMS or email to verify login.</li><li>Employment contracts</li><li>Banking documents</li></ul></td></tr><tr><td colspan="1" rowspan="1">QES – Highest form of signer identification, backed by a certificate issued by a qualified trust service provider</td><td colspan="1" rowspan="1"><ul><li>Large commercial agreements</li><li>Major sales agreements</li><li>Mortgage documents</li></ul></td></tr></tbody></table><h2 style="text-align: start">Key Features of an Electronic Signature</h2>The key features of an electronic signature depend on the type of signature in question.<table><tbody><tr><td colspan="1" rowspan="1">Type of Signature</td><td colspan="1" rowspan="1">Key Features</td></tr><tr><td colspan="1" rowspan="1">SES (Sometimes known as a Basic Electronic Signature or BES)</td><td colspan="1" rowspan="1">Any kind of digital mark to indicate acceptance. This could be a scan of a wet signature, a recreation of a handwritten signature created on a computer program, an X typed in a box, your name typed out or anything else that serves to identify you.</td></tr><tr><td colspan="1" rowspan="1">AES</td><td colspan="1" rowspan="1">To be seen as Advanced, the signature must have the following features:<ul><li>You must be able to uniquely identify the signer through the signature and it should be linked to them</li><li>The signer must be in total control over the data used in creating the signature</li><li>It must be possible to identify whether anyone has changed the document following the signature. If it has been changed, the signature is invalidated.</li></ul></td></tr><tr><td colspan="1" rowspan="1">QES</td><td colspan="1" rowspan="1">To be seen as Qualified, the signature must have all features of an Advanced signature and:<ul><li>It should be created using a Qualified Signature Creation Device (QSCD)</li><li>The signer must be verified by a face-to-face meeting or equivalent process, such as a video call</li><li>Multi-factor authentication is required to ensure its validity.</li></ul></td></tr></tbody></table><h2 style="text-align: start">How Does it Work?</h2>A QES works in this manner:<ul><li>A qualified trust service provider (TSP) creates a qualified digital certificate that ensures the signature can be used only by the signer.</li><li>The Qualified Signature Creation Device creates a private key and a public key that ensure the signature is unique to the signer and cannot be forged.</li><li>The signatory uses the private key to sign the document.</li><li>The recipient uses the public key to verify the signer’s identity.</li></ul><h3 style="text-align: start">What is a Certificate Authority?</h3>TSPs are also known as&nbsp;certificate authorities&nbsp;(CA) and must be recognised and qualified by their country’s government if they want to be included on that nation’s, and the EU’s, trusted list.<h2 style="text-align: start">How Do You Digitally Sign a Document?</h2>To ensure a compliant electronic signature for your documents, you should use an online digital signing solution such as&nbsp;Signhost by Evidos. This is how it works:<ol><li>The signer identifies themselves through a method such as a passport selfie or their government ID, using one of a host of identification methods approved in the EU member states.</li><li>When you send a document to sign, the signer must verify their identity.</li><li>Then, they sign the document and confirm their signature.</li><li>You receive a transaction receipt to show that the signer was identified and verified, and has signed the document.</li></ol><h2 style="text-align: start">FAQ</h2><h3 style="text-align: start">Does a digital signature replace a handwritten one?</h3>A QES has the same legal status as a handwritten signature on documents within the EU. The level of security is such that, if the signatory disputes the fact that it is their signature on the document, the burden of proof is on them to show that they did not, rather than on the party that instigated the document.In addition, the&nbsp;eIDAS Regulation&nbsp;states that “an electronic signature shall not be denied legal effect and admissibility as evidence in legal proceedings solely on the grounds that it is in an electronic form or that it does not meet the requirements for qualified electronic signatures.”If both parties agree that an SES or AES will suffice for the purposes of an agreement between them, it can form an acceptable agreement. However, the issuer must consider that in a dispute&nbsp;they would need to prove the identity&nbsp;of the party who signed the document.<h3 style="text-align: start">What makes certificate-based digital signatures so secure?</h3>With a certificate-based digital signature like a QES, the certificate acts as a digital fingerprint to identify the signer as being the only person to have marked the document. They must verify themselves and then revalidate as they sign the document using the Public Key Infrastructure (PKI). This is why the EU bestows the same level of authority to a QES as a handwritten signature.<h2 style="text-align: start">Conclusion</h2>In terms of digital vs electronic signature, it is possible to see that a digital signature is essentially the technical term for the virtual fingerprint the signer leaves when they sign the document. If you are a business looking to use online technology to improve and streamline your processes, an electronic signature describes what you require. Signhost allows you to accept electronic signatures with ease and adheres to the identification methods favoured in all major EU markets. Try out Signhost for free here.

Once you make the decision to accept non-traditional handwritten signatures for your business documents, there is still some research.

large_IMG4.png

medium_IMG4.png

small_IMG4.png

thumbnail_IMG4.png

IMG4.png

Guide to Different Types of Electronic Signatures

Once you make the decision to accept non-traditional handwritten signatures for your business documents, there is still some research to undertake. For a start, do you understand the finer points of the digital vs electronic signatures debate? This is a common problem for those who are just beginning to work with online signing and it is difficult to find a clear answer.This article is here to let you know the difference between the two and how you can use these signatures to save time and money. You will also learn how to create an easy-to0retrieve audit trail that ensures you remain compliant with the eIDAS Regulation and European Union law at all times. Keep reading to find out everything you need to know about digital and electronic signatures.<h2 style="text-align: start">What is a Digital Signature?</h2>Neither the EU’s eIDAS Regulation nor the ESIGN Act in the US, two major pieces of legislation regarding electronic signing, make any use of the term ‘digital signature’ at all. This is due to the fact that a digital signature is not a legal term, but rather a technical one. A digital signature is the mathematical algorithmthat provides the digital thumbprint to identify the signer, whereas the actual signature itself is an electronic signature.That being said, many people use ‘digital signature’ and ‘electronic signature’ interchangeably, which is where some of the confusion lies.<h2 style="text-align: start">Difference Between Digital Signatures and Electronic Signatures</h2>The Uniform Electronic Transactions Act (UETA) in the United States refers to a digital signature as one that uses “using public key encryption technology” to be able to identify the signer. That is the equivalent of an Advanced Electronic Signature (AES) or Qualified Electronic Signature (QES) as defined in eIDAS in the EU. The real difference is geography in this case.The European Union Agency For Network And Information Security (ENISA) explains its definitions of the two terms when it says“QES are implemented by means of asymmetric cryptography. With this technology, each signatory owns a key pair made of a private and a public key (the technology is called the public key cryptography) and the so produced electronic signatures are called digital signatures.”Essentially, when we talk about companies in European Union member states using online tools to verify documents, we should use the phrase ‘electronic signature’ as that provides the more accurate description of what we are trying to achieve.<h2 style="text-align: start">What are Electronic Signatures Used For?</h2>You can use electronic signatures for different types of document, dependent on the level of security you require. Here is a guide to potential uses of Simple Electronic Signatures (SES), AES and QES.<table><tbody><tr><td colspan="1" rowspan="1">Type of Signature</td><td colspan="1" rowspan="1">Possible Uses</td></tr><tr><td colspan="1" rowspan="1">SES – Any form of electronic mark with no need to verify the identity of the signer</td><td colspan="1" rowspan="1"><ul><li>Parcel delivery person’s terminal</li><li>An ‘I Agree’ button on an app’s terms and conditions</li><li>Typing your name at the bottom of an email</li></ul></td></tr><tr><td colspan="1" rowspan="1">AES – Higher level of signer identification and ensuring the document can’t be changed after signing</td><td colspan="1" rowspan="1"><ul><li>Sending a One-Time Password (OTP) via SMS or email to verify login.</li><li>Employment contracts</li><li>Banking documents</li></ul></td></tr><tr><td colspan="1" rowspan="1">QES – Highest form of signer identification, backed by a certificate issued by a qualified trust service provider</td><td colspan="1" rowspan="1"><ul><li>Large commercial agreements</li><li>Major sales agreements</li><li>Mortgage documents</li></ul></td></tr></tbody></table><h2 style="text-align: start">Key Features of an Electronic Signature</h2>The key features of an electronic signature depend on the type of signature in question.<table><tbody><tr><td colspan="1" rowspan="1">Type of Signature</td><td colspan="1" rowspan="1">Key Features</td></tr><tr><td colspan="1" rowspan="1">SES (Sometimes known as a Basic Electronic Signature or BES)</td><td colspan="1" rowspan="1">Any kind of digital mark to indicate acceptance. This could be a scan of a wet signature, a recreation of a handwritten signature created on a computer program, an X typed in a box, your name typed out or anything else that serves to identify you.</td></tr><tr><td colspan="1" rowspan="1">AES</td><td colspan="1" rowspan="1">To be seen as Advanced, the signature must have the following features:<ul><li>You must be able to uniquely identify the signer through the signature and it should be linked to them</li><li>The signer must be in total control over the data used in creating the signature</li><li>It must be possible to identify whether anyone has changed the document following the signature. If it has been changed, the signature is invalidated.</li></ul></td></tr><tr><td colspan="1" rowspan="1">QES</td><td colspan="1" rowspan="1">To be seen as Qualified, the signature must have all features of an Advanced signature and:<ul><li>It should be created using a Qualified Signature Creation Device (QSCD)</li><li>The signer must be verified by a face-to-face meeting or equivalent process, such as a video call</li><li>Multi-factor authentication is required to ensure its validity.</li></ul></td></tr></tbody></table><h2 style="text-align: start">How Does it Work?</h2>A QES works in this manner:<ul><li>A qualified trust service provider (TSP) creates a qualified digital certificate that ensures the signature can be used only by the signer.</li><li>The Qualified Signature Creation Device creates a private key and a public key that ensure the signature is unique to the signer and cannot be forged.</li><li>The signatory uses the private key to sign the document.</li><li>The recipient uses the public key to verify the signer’s identity.</li></ul><h3 style="text-align: start">What is a Certificate Authority?</h3>TSPs are also known as certificate authorities (CA) and must be recognised and qualified by their country’s government if they want to be included on that nation’s, and the EU’s, trusted list.<h2 style="text-align: start">How Do You Digitally Sign a Document?</h2>To ensure a compliant electronic signature for your documents, you should use an online digital signing solution such as Signhost by Evidos. This is how it works:<ol><li>The signer identifies themselves through a method such as a passport selfie or their government ID, using one of a host of identification methods approved in the EU member states.</li><li>When you send a document to sign, the signer must verify their identity.</li><li>Then, they sign the document and confirm their signature.</li><li>You receive a transaction receipt to show that the signer was identified and verified, and has signed the document.</li></ol><h2 style="text-align: start">FAQ</h2><h3 style="text-align: start">Does a digital signature replace a handwritten one?</h3>A QES has the same legal status as a handwritten signature on documents within the EU. The level of security is such that, if the signatory disputes the fact that it is their signature on the document, the burden of proof is on them to show that they did not, rather than on the party that instigated the document.In addition, the eIDAS Regulation states that “an electronic signature shall not be denied legal effect and admissibility as evidence in legal proceedings solely on the grounds that it is in an electronic form or that it does not meet the requirements for qualified electronic signatures.”If both parties agree that an SES or AES will suffice for the purposes of an agreement between them, it can form an acceptable agreement. However, the issuer must consider that in a dispute they would need to prove the identity of the party who signed the document.<h3 style="text-align: start">What makes certificate-based digital signatures so secure?</h3>With a certificate-based digital signature like a QES, the certificate acts as a digital fingerprint to identify the signer as being the only person to have marked the document. They must verify themselves and then revalidate as they sign the document using the Public Key Infrastructure (PKI). This is why the EU bestows the same level of authority to a QES as a handwritten signature.<h2 style="text-align: start">Conclusion</h2>In terms of digital vs electronic signature, it is possible to see that a digital signature is essentially the technical term for the virtual fingerprint the signer leaves when they sign the document. If you are a business looking to use online technology to improve and streamline your processes, an electronic signature describes what you require. Signhost allows you to accept electronic signatures with ease and adheres to the identification methods favoured in all major EU markets. Try out Signhost for free here.

large_IMG1.png

medium_IMG1.png

small_IMG1.png

thumbnail_IMG1.png

IMG1.png

What type of e-signature do I need?

The European Union instigated the eIDAS Regulation, which came into action in 2016, as a way of building trust in the online environment. It featured legislation that standardised the correct use of electronic identification including electronic timestamps, certificate services for website authentication, electronic documents as well as&nbsp;<a target="_blank" rel="" href="https://www.evidos.com/electronic-certification">electronic seals</a>&nbsp;and&nbsp;<a target="_blank" rel="" href="https://www.evidos.com/electronic-signature">electronic signatures</a>&nbsp;across all EU member states.But, when creating a document, how do you know which to use between an electronic seal vs signature? And when do you need to use both? Read this article to find out.<h2 style="text-align: start">What Is An Electronic Seal?</h2>The&nbsp;<a target="_blank" rel="" href="https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv%3AOJ.L_.2014.257.01.0073.01.ENG">eIDAS Regulation describes</a>&nbsp;an electronic seal as “data in electronic form, which is attached to or logically associated with other data in electronic form to ensure the latter’s origin and integrity.”You can see an eSeal as being the digital equivalent of a stamp placed on a paper document to confirm its origin and integrity. The electronic seal can only be associated with a legal person or entity, rather than a natural person. There are two forms of eSeal described in eIDAS:<ul><li>Advanced Electronic Seals</li><li>Qualified Electronic Seals</li></ul>Using an electronic seal means that your organisation can&nbsp;prove the integrity of the information&nbsp;in a document without having to have one specific individual, such as the CEO, sign manually. This speeds up your workflow and saves the valuable time of the individual in question.<h4>Difference Between Electronic Seal And Electronic Signature According eIDAS</h4>Although electronic seals and e-signatures perform some of the same tasks, there are also a number of differences between the two items. This table shows you how seals and signatures differ:<h3 style="text-align: start">The Difference – Electronic Seal vs Electronic Signature</h3><table><tbody><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Electronic Seal</td><td colspan="1" rowspan="1">Electronic Signature</td></tr><tr><td colspan="1" rowspan="1">Who Uses It?</td><td colspan="1" rowspan="1">Legal persons and entities only.</td><td colspan="1" rowspan="1">Natural persons and entities, as well as legal persons and entities.</td></tr><tr><td colspan="1" rowspan="1">How is it Created?</td><td colspan="1" rowspan="1">Manually, by a natural person entitled to act on behalf of a legal entity issuing the seal, or using automation by information systems.</td><td colspan="1" rowspan="1">On the action of the signatory who verifies the content of the document before creating the signature using the relevant hardware needed for the type of e-signature.</td></tr><tr><td colspan="1" rowspan="1">What is the Intention?</td><td colspan="1" rowspan="1">To guarantee the authenticity and origin of the data within a document.</td><td colspan="1" rowspan="1">To show a commitment to or engagement with the content within the document and to verify the identity of the signer.</td></tr><tr><td colspan="1" rowspan="1">Versions</td><td colspan="1" rowspan="1"><ul><li>Advanced Electronic Seals</li><li><a target="_blank" rel="" href="https://www.enisa.europa.eu/publications/security-guidelines-on-the-appropriate-use-of-qualified-electronic-seals/at_download/fullReport">Qualified Electronic Seals</a></li></ul></td><td colspan="1" rowspan="1"><ul><li>Simple Electronic Signatures</li><li>Advanced Electronic Signatures</li><li>Qualified Electronic Signatures</li></ul></td></tr></tbody></table><h3 style="text-align: start">Advanced electronic seal (AdESeal) vs Advanced Electronic Signature (AES)</h3><table><tbody><tr><td colspan="1" rowspan="1">AdESeal</td><td colspan="1" rowspan="1">AES</td></tr><tr><td colspan="1" rowspan="1"><ul><li>uniquely linked to the seal’s creator</li><li>capable of identifying the seal’s creator</li><li>created using electronic seal creation data</li><li>can detect any changes made to the data after the seal creation</li></ul></td><td colspan="1" rowspan="1"><ul><li>uniquely linked to the signatory</li><li>capable of identifying the signatory</li><li>created using electronic signature creation data</li><li>can detect any changes made to the data after the signature</li></ul></td></tr></tbody></table><h3 style="text-align: start">Qualified electronic seal (QESeal) vs Qualified Electronic Signature (QES)</h3><table><tbody><tr><td colspan="1" rowspan="1">QESeal</td><td colspan="1" rowspan="1">QES</td></tr><tr><td colspan="1" rowspan="1"><ul><li>uniquely linked to the seal’s creator</li><li>capable of identifying the seal’s creator</li><li>created using a qualified seal creation device (QSealCD)</li><li>can detect any changes made to the data after the seal creation</li></ul></td><td colspan="1" rowspan="1"><ul><li>uniquely linked to the signatory</li><li>capable of identifying the signatory</li><li>created using a qualified signature creation device (QSCD)</li><li>can detect any changes made to the data after the signature</li></ul></td></tr></tbody></table>The QESeal and the QES provide the greatest security when it comes to e-seals and e-signatures. They have&nbsp;the same legal standing as their handwritten or stamped equivalents&nbsp;within the EU, whichever member state they were created in.eIDAS says of the QESeal,“Qualified electronic seal shall enjoy the presumption of integrity of the data and of correctness of the origin of that data to which the qualified electronic seal is linked.”<h2 style="text-align: start">Requirements For Electronic Seals</h2>The requirements for electronic seals centre around the identification of the party that created them. They should&nbsp;uniquely link to the creator&nbsp;so there is no doubt that the entity issuing the document is who it says it is. In addition, once the seal is placed on the document, you should be able to tell if anyone tampers with the contents afterwards. This is to maintain the integrity of the data contained within.A Qualified Electronic Seal must be created using a QSealCD and based on a qualified certificate issued by a Qualified Trust Services Provider on the&nbsp;<a target="_blank" rel="" href="https://webgate.ec.europa.eu/tl-browser/#/">EU Trusted List</a>.<h2 style="text-align: start">How Does an Electronic Seal Work?</h2>A QESeal uses a digital certificate issued by a certification authority (CA) in a member state to create a seal unique to the creator of the document that links to the text so that it cannot be changed.&nbsp;<a target="_blank" rel="" href="https://info.keyfactor.com/what-is-pki">Public Key Infrastructure (PKI) encryption</a>&nbsp;using a private key links the issuing user with the document uniquely via digital signatures (not to be confused with electronic signatures). The recipient of the document holds the public key which means they can tell if there has been any subsequent change of data within it. This ensures the validity and integrity of the sealed document.Usually, the individual tasked with issuing the seal on behalf of their organisation will have to use a smart card, enter a PIN or confirm their identity using a form of biometry, such as a fingerprint. This confirms they are who they say they are and are entitled to act for the legal entity sending the sealed document.The QESeal has the same legal effect for electronic transactions as a physical seal has in the offline InstilIf any legal proceedings arise, the creator of the seal cannot claim it did not provide it, as the organisation’s digital signature is intrinsically linked to it.<h2 style="text-align: start">Electronic Seal Use Cases</h2>There are many situations in which you might need to use an electronic seal. For example:<ul><li>Sending out a&nbsp;contract&nbsp;to a client or prospective employee, to ensure the document is legitimate and has not been altered between being sent by the organisation and received by the individual.</li><li>Previously to eIDAS, the CEO of an organisation might have had to be physically present in the office to sign contracts of carriage, for example. With an eSeal, authorised employees can seal these documents on the CEO’s behalf and&nbsp;close deals instantly, speeding up the process of work.</li><li>Instill trust&nbsp;in the recipient of sensitive information, such as financial reports where it is important to know that the data is correct and has not been adjusted.</li><li>The ability to seal multiple documents automatically comes in handy for&nbsp;invoicing en masse. Each document is sealed and timestamped, maintaining its integrity and also providing an easy-to-access audit trail to ensure the organisation’s compliance.</li></ul><h2 style="text-align: start">Limitations Of The Electronic Seal</h2>Although the electronic seal is extremely useful and essential for maintaining the integrity of documents that a legal entity sends out, it&nbsp;cannot replace electronic signatures. The seal merely guarantees authenticity so that the recipient can be sure that they have received the original, untampered document. In order to show intent to engage with the contents of a document, you must use an electronic signature.There are similarities between signatures and seals, but the differences are very important, too. These two technologies work together but perform different tasks. An electronic seal cannot take on both jobs on its own.Another limitation of the electronic seal is that it&nbsp;cannot be created on behalf of a natural person. That is, an individual cannot have their own e-seal. It is reserved purely for legal persons and entities, although natural persons within an organisation may be entitled to create seals on behalf of the company.<h2 style="text-align: start">FAQ</h2><h3 style="text-align: start">What type of documents can be sealed electronically?</h3>Any kind of document that you send out can be e-sealed. Whether it is a contract, a financial report, an invoice, a utility bill, a bank statement, medical information or even a customer retail receipt, sealing it electronically adds an extra level of security. In a world where customers are always on the lookout for phishing scams, an e-seal provides that guarantee that the document in question is genuine and safe to open and act upon.<h3 style="text-align: start">How do you seal a contract electronically?</h3>You can seal a contract electronically by using an&nbsp;electronic sealing solution. Simply generate the seal for your business and attach it to the documents you send out through that tool.<h2 style="text-align: start">Conclusion</h2>If your organisation wants to cut down on the use of paper processes, save time, speed up the contracting workflow and garner more trust with customers, using an electronic seal is a key part of that. When it comes to electronic seal vs signature, you often don’t have to choose between one or the other. They can complement each other. The seal provides the confidence that the document is safe to verify using the signature.<h2 style="text-align: start"></h2>

When creating a document, how do you know which to use between an electronic seal vs signature? And when do you need to use both? 

Blog

Guide to Different Types of Electronic Signatures

What type of e-signature do I need?

Electronic Seal or Signature?