E-Sign Compliance
Last updated on 8 September 2026
This page explains the electronic-signature laws that govern digital documents — ESIGN, UETA, eIDAS, and selected other frameworks — and how SignFree assesses its product against them. It is an honest product assessment, not a legal opinion.
SignFree provides Simple Electronic Signatures (SES) with email or SMS OTP, an audit trail, and a tamper-evident Integrity Seal on completed PDFs. The seal is cryptographic and self-signed. It is not a CA-backed certificate and not a Qualified Electronic Seal. SignFree is not a Qualified Trust Service Provider (QTSP).
Compliance status overview
| Regulation | SignFree status |
|---|---|
| ESIGN / UETA | Supported (SES) |
| eIDAS SES | Supported |
| eIDAS AES | Not provided |
| eIDAS QES | Not provided |
| ZertES (Switzerland) | Not provided |
ESIGN Act (United States)
Supported (SES)
The Electronic Signatures in Global and National Commerce Act (ESIGN) is a U.S. federal law from 2000. It treats electronic signatures and records as legally valid for many interstate and foreign commercial transactions when they meet technology-neutral conditions.
Key requirements
| Requirement | Description |
|---|---|
| Intent to sign | The signer must show they meant to sign the document. |
| Consent | Parties must agree to transact electronically. |
| Consumer disclosure | Some consumer contexts require a clear statement before consent. |
| Record retention | Electronic records must stay accurate and accessible later. |
| Association | The signature must be tied to the record that was signed. |
Exclusions
ESIGN does not cover every document type. Common exclusions include:
- wills, codicils, and testamentary trusts;
- some family-law documents (for example adoption or divorce);
- court orders and official court papers;
- certain utility-cancellation notices;
- some hazardous-materials transport documents.
Whether a specific U.S. document is sufficient remains a question for counsel.
UETA (United States)
Supported (SES)
The Uniform Electronic Transactions Act is the state-level counterpart to ESIGN. Most U.S. states have adopted it (New York uses its own Electronic Signatures and Records Act). Federal ESIGN lets a state modify some ESIGN rules if it adopts UETA or an equivalent. In practice the tests are close.
Key requirements
- intent to sign;
- consent to electronic transactions;
- retention of the record in electronic form;
- attribution of the signature to the signer.
eIDAS (European Union)
The Electronic Identification, Authentication and Trust Services regulation applies across EU member states. It defines three signature levels with different technical bars and legal effects.
Signature types (brief)
| Level | What it is | Legal effect | SignFree |
|---|---|---|---|
| Simple (SES) | Electronic data attached to or associated with a document and used to sign. Intent is enough; no qualified certificate. | Admissible as evidence; weight varies by use. | Provided |
| Advanced (AES) | Uniquely linked to the signer, able to identify them, created under their sole control, and bound so later changes are detectable. | Higher evidentiary weight than SES. | Not provided |
| Qualified (QES) | AES plus a qualified certificate from a QTSP and a qualified signature creation device, with strict identity proofing. | Equivalent to a handwritten signature across the EU. | Not provided |
SignFree’s Integrity Seal, OTP, and device signals strengthen SES evidence. They do not meet AES or QES: the seal is self-signed, signers do not use a personal certificate under their sole control, and SignFree does not verify government identity.
Other jurisdictions
Most countries have some electronic-signature law. A few examples:
| Jurisdiction | Framework | Notes |
|---|---|---|
| United Kingdom | UK eIDAS / Electronic Communications Act 2000 | Keeps an eIDAS-like split after Brexit. |
| Canada | PIPEDA and provincial laws | Federal and provincial rules both apply. |
| Australia | Electronic Transactions Act 1999 | Technology-neutral approach. |
| Switzerland | ZertES | Qualified-signature rules at federal level. SignFree does not provide ZertES QES. |
| Brazil | MP 2200-2, ICP-Brasil | PKI-based digital signatures. |
| India | IT Act 2000, Aadhaar e-KYC | Recognizes electronic signatures; some uses need Aadhaar-style verification. |
| China | Electronic Signature Law | Some uses require a “reliable” electronic signature. |
| Japan | Electronic Signatures Act | Three-tier system similar to eIDAS. |
Rules and exclusions differ by country and document type. Confirm with local counsel for cross-border or regulated files.
How SignFree supports compliance
SignFree is built to support SES requirements that appear across ESIGN, UETA, and eIDAS SES:
Intent to sign
- Signers act on signature fields instead of a silent default.
- The signing screen shows the document being signed.
- Parties can download the completed file.
Consent
- Recipients are told they are being asked to sign electronically.
- Consent is captured in the signing flow and stored with the audit trail.
Record retention
- Signed documents stay in the account and remain available to the parties.
- Completed PDFs can be downloaded at any time.
Document integrity
- Completed PDFs receive the Integrity Seal.
- Later edits can be detected; a PDF reader can show that the file changed after sealing.
- The seal is self-signed. It is not a CA or QTSP guarantee of identity.
Signer identification
- Delivery is tied to a specific email address.
- The signer portal uses email plus a one-time code (email OTP on Free; SMS OTP on Pro).
- Signing activity is logged with timestamps and verification records.
Audit trails
Each envelope keeps an audit trail of the signing process. Typical recorded events include:
| Event | What is recorded |
|---|---|
| Document created / sent | Timestamp, sender, recipients, delivery method |
| OTP / access verification | Verification method and result (email or SMS OTP) |
| Consent and intent | That the signer accepted electronic records and confirmed they meant to sign |
| Signature applied | Timestamp, signer identity (name and email), field activity |
| Document completed | Timestamp and Integrity Seal on the finished PDF |
The trail is evidence of who was asked to sign, how they authenticated, and when the file was finished. It does not replace a qualified certificate or government-ID check.
What SignFree does not provide
| Capability | Status |
|---|---|
| Qualified Electronic Signatures (QES) | Not supported. Requires a QTSP. |
| Advanced Electronic Signatures (AES / AdES) | Not supported. Needs personal certificates and identity proofing. |
| Government or KYC identity verification | Not built in. Access is email or SMS OTP. |
| Qualified certificates / CA issuance | Not issued. The Integrity Seal is self-signed. |
| Notarization or legal advice | Not offered. We do not witness or guarantee legal sufficiency. |
| SOC 2, ISO 27001, or eIDAS QTSP certification | Not held. We will update the Trust Center if that changes. |
| Industry-specific regimes (for example healthcare or finance) | Not certified as a vertical compliance product. Confirm with counsel. |
If the document or jurisdiction requires AES or QES, use a QTSP or another provider. SignFree is the wrong tool for those files.
Disclaimer
This page is general information for education only. It is not legal advice. Electronic-signature rules vary by jurisdiction, document type, and facts. Some acts still exclude electronic form entirely.
Consult qualified legal counsel in your jurisdiction before you rely on an electronic signature for a specific use.
Related
- Compliance
- Trust Center — what SignFree is and is not
- Security & compliance overview
- Terms and Conditions
- Privacy Policy