What is a digital signature?

A digital signature, also referred to as an Advanced Electronic Signature (AES or AESign) or a Qualified Electronic Signature (eIDAS, EU), is a type of electronic signature that is backed by a digital certificate (x.509) that complies with the strictest eSign legal regulations.

A digital signature uses cryptographic methods to ensure the authenticity and integrity of electronic documents.

With Confidence.

Book a Demo

How digital signatures work

A digital signature is a mathematical technique used to validate the authenticity and integrity of a message or an electronic document.

A digital signature is based on public-key cryptography, using a public key algorithm to generate two keys - one public, and one private.

In most countries, a digital signature is the equivalent of a handwritten signature, as it offers more inherent security than a simple electronic signature. A digital signature cryptographically seals the message (or document), making it tamper-evident.

A digital signature provides evidence of identity, which can be digitally verified using trust indicators that are built into the signatures and embedded into the document.

SIGNATURES EXPLAINED

What is SigniFlow's approach to digital signatures?

SigniFlow's approach to digital signatures means we are able to offer more flexibility and control over the type of signatures used compared to that offered by most eSign competitor platforms.

With SigniFlow, you have the option to request signers to sign with an electronic or digital signature, enforce a personal digital certificate, or a combination thereof. This allows you to build workflows that suit the legal requirements of your business or a specific document. SigniFlow supports various secure signature creation devices, including USB tokens, smart cards, and cloud-based x.509 digital certificates.

SigniFlow is "certificate-agnostic", meaning you can use almost any certificate authority (CA) or timestamp authority (TSA), with support for many CAs and trusted authorities through the European Union Trusted List (EUTL) and globally through the Adobe Approved Trust List (AATL).

Digital signatures are a core offering of SigniFlow. We also offer cryptography as a service (CaaS) for customers who have their own app or workflow software and merely want digital signature functionality built in without having to deploy Public Key Infrastructure.

E-SIGNATURE WORKFLOW

Digital signature features

When signing with a digital signature using SigniFlow, you will typically find the following digital signature features embedded. This may vary, depending on your security settings and user preferences, which are configurable in the system.

DIGITAL CERTIFICATES

All signatures are created using digital X.509 standard for public-key certificates.

TIMESTAMPING

Timestamping is applied through a trusted Timestamping Authority (TSA).

LONG-TERM VALIDATION

Embedded record of the state of the certificate at the time of signing.

TAMPER-EVIDENT

Document content is protected from start to end using cryptographic algorithms.

PDF AUDIT

Full auditable X.509 trusted AATL embedments for every signer in the workflow.

AUDIT TRAIL

An automated history of events are logged against a unique document ID.

SECURE AUDIT LOG

Audit logs are written and sealed into the document using steganography.

AATL and EUTL

Supports Adobe® Accredited Trust List and European Union Accredit Trust List.

IDENTITY

Multi-factor authentication and AD, LDAP, OAuth, SAML, and other options are available.

GEO-LOCATION

Embedded auditable record of the geographical location of signatories.

Core eSignature Features

Included in Business License

Fast, image or font-based electronic signatures
Documents are sealed and made tamper-evident using a digital signature (seal)
A digital signature contains a Timestamp and has Long Term Validation (LTV) enabled
This eSignature is similar to, or the same type of signature as, that found as the standard offering in most competing eSign solutions, and it conforms to the specifications of BES - Basic Electronic Signature

X.509 cryptography is used to apply the signature
Supports Adobe Approved Trust List (AATL) and Adobe European Union Trust List (EUTL)
Seals the document and makes it tamper-evident every time a signature is applied
Document is sealed and tamper-evident during the workflow
Includes a TSA Trusted Timestamp in every signature
Includes Long Term Validation (PAdES_Standard_(ETSI_EN_319_142)
Supports font- and image-based eSignatures
This signature is unique to SigniFlow and is classified as a cryptographic digital signature
This signature is more secure than a BES and has the properties of an AES (Advanced Electronic Signature)

Free feature packaged with all SigniFlow Business Workflow licenses
Easily activate FaceSign when creating a workflow
Select which signers in the workflow need to take a selfie when signing
When the signer taps on the “Sign Here” button, their camera will activate and prompt them to take a selfie
The photo of the signer that is captured is embedded in the digital or electronic signature in the PDF
The photo and audit details of the capturing session are recorded in the audit log for an extended body of evidence

A quick video selfie verifies that the person is alive
Security certified as the #1 anti-spoofing, 3D liveness solution in the world
Select which signers in the workflow need to take a selfie and/or do the liveness test when signing
When the signer taps on the “Sign Here” button, their camera will activate and prompt them to undergo the liveness test
The photo of the signer that is captured during the liveness test is embedded in the digital or electronic signature in the PDF
The photo and audit details of the liveness session is recorded in the audit log for an extended body of evidence
Proves 12.8 million to 1 that that the face embedded with the signature is the person who signed the document
Paid service – per signature transactions using Liveness

The following security properties are standard in SigniFlow's digital signature offering, at no additional cost:

Digital Certificate: All signatures are created using the digital X.509 standard for public key certificates
Timestamping: Timestamping is applied through a trusted Timestamping Authority (TSA)
Long Term Validation: An embedded record of the state of the certificate at the time of signing
Tamper Evident: Document content is protected from start to end using cryptographic algorithms
3 x Audit Logs (body of evidence): PDF, SigniFlow system generated events, embedded Steganography (replicating a Write Once Read Many - or W.O.R.M. - environment)
Embedded Identity: The identity and authentication data of the signer is embedded in the digital certificate
Geolocation: The geolocation of the signer is embedded in the digital certificate

FULL FEATURES OVERVIEW

News Watch takes a look at digital signatures

This two-minute video review produced by News Watch takes a look at the security use-case of SigniFlow's digital signatures.

Public Key Infrastructure

Public key infrastructure (PKI) is a set of roles, policies, hardware, software, and procedures needed to create, manage, distribute, use, store and revoke digital certificates and manage public-key encryption for digital signatures.

SigniFlow's certified, international datacentres are enabled with public-key cryptography services for digital signatures.

AFRICA

South Africa - North and South.

ASIA PACIFIC

Australia East, Malaysia and Singapore.

EUROPE

Netherlands - North.

SOUTH AMERICA

Brazil - Sao Paulo.

UNITED KINGDOM

United Kingdom - London.

UNITED STATES OF AMERICA

United States East - Virginia

Features

Businesses everywhere have spoken - and we've listened. We get you. Dealing with customers and suppliers, each with their own systems and processes, can be a tedious task.

You need more than just eSign workflow. You need an intuitive tool that understands your day at the office.

We get your office hours

Finally, a software company that has actual people giving its customers - and their customers - 24/7 online support, for free. Our support ninjas are the best in the game.

Industry-leading infrastructure

Connect to any of our 8 international data centres and experience true 99.9% uptime. Over the past 24 months, we've exceeded our 99.5% uptime target across all regions.

IT Security Management

Our Information Security Management System is ISO27001:2013 certified and our Quality Management System is ISO9001: 2015 certified by TÜV Rheinland.

Compliance is our game

SigniFlow's international, segregated security infrastructure ensures customer data is processed in accordance with the most stringent international privacy and cross-border data protection laws, such as GDPR, LGPD and POPI.

Certifications

International Best Practices

Why choose SigniFlow?

Increased Security

World-class, industry-leading modern infrastructure and technology that addresses the security use case.

More Choice

Brand it your way, deploy it where you want it, and sign with the compliant eSignature type of your choice.

Simplicity

A solution that offers peace of mind and simplicity, without compromising on security or compliance.

Affordability

There is no reason to pay the prices our competitors charge. Get a quotation from us and compare.

Request a Quote

Deployment Options

Cloud (SaaS)

Get online in minutes

Connect to any of our global Cloud Services in your region. Register for a free trial account, or visit our pricing plans page and subscribe today.

Your Cloud

Own deployment

Our SigniFlow's Private tenant technology allows you to deploy SigniFlow in your favourite Data Centre (DC). We support modernised, containerised environments as well as Virtual Machine environments, suitable for all private and public DC’s.

On-Premise

Bring it in-house

SigniFlow Private Tenant technology caters for the most demanding security use cases. Deploy SigniFlow in your private network and manage your own security while streamlining connectivity with your legacy systems and workflow tools.

Hybrid

Let us do the lifting

SigniFlow’s Private Tenant Hybrid technology features robust infrastructure solutions, fortified by industry-leading security features like 24/7 M-XDR cybersecurity monitoring, SOC2 level managed WAF and uptime monitoring and reporting services.

deployment modes

24/7 Online support

We understand your office hours. SigniFlow offers 24/7 online support to all customers.

No matter where you are and no matter what time it is, we are always online to help you meet your deadlines.