Signature levels
Two eIDAS-defined levels, set per signature profile. An educational overview, not legal advice.
IgniSign offers two electronic signature levels as defined by the eIDAS regulation: the simple electronic signature, where the signer is authenticated by email, and the advanced electronic signature, where a second factor or an identity verification is added and recorded in the proof. The level is set per signature profile. IgniSign does not offer qualified electronic signatures.
Simple electronic signature (SES)
Authentication
One factor: an email link (BySide) or a signer secret held by your application (embedded).
Identity
Declared by the requester.
Proof
Signed PDF, signature files, audit log.
Typical use
Internal approvals, acknowledgements, low-risk agreements.
Advanced electronic signature (AES)
Authentication
Two factors: the email link or signer secret, plus a one-time SMS code, TOTP or passkey.
Identity
Verified, either by the second factor registered during identification or by an automated ID document and selfie check, open banking or SSN verification.
Proof
Signed PDF, signature files, audit log with the identity and authentication evidence.
Typical use
Business contracts and agreements where who signed matters.
What the proof contains, at both levels
Signed PDF
The document, the visible signatures and a signature summary page, bound together. PAdES format.
Signature files
PKCS#7, XMLDSig or JWS for data and hash-only documents, with the certificate of the application environment, so any verifier can check the integrity of the signed content.
Audit log
A timestamped record of the signing session: who was invited, how they authenticated, when they signed. The signer's identity and the evidence of verification live here and in the proof document, not in the certificate.
What IgniSign does not offer
Qualified electronic signatures, qualified certificates and national eID schemes as signer identification. If your flow legally requires a qualified electronic signature, IgniSign is not the right tool; we will tell you so.
Both levels are electronic signatures as defined by the eIDAS regulation, with different levels of security and verification; their legal effect depends on the applicable law and on your use case. Ask your legal advisor to match a level to your use case.
Choosing a signature level
Legal frameworks overview
Pricing per level
Questions about levels
Does IgniSign offer qualified electronic signatures?
No. IgniSign provides simple and advanced electronic signatures. If your flow legally requires a qualified electronic signature, IgniSign is not the right tool.
What is the difference between a simple and an advanced electronic signature at IgniSign?
With a simple electronic signature the signer is authenticated by email. With an advanced electronic signature a second factor (one-time SMS code, TOTP or passkey) or an identity verification (automated ID document check, open banking or SSN) is added and recorded in the proof.
How do I choose the level?
The level is a property of the signature profile you attach to a request. Both levels are electronic signatures as defined by the eIDAS regulation; their legal effect depends on the applicable law and on your use case, so match the level to the risk of the document with your legal advisor.
Is the signer's identity in the certificate?
No. Signatures are created with the signing key and certificate of the application environment. The signer's identity and the evidence of authentication and identity verification are recorded in the signature proof document and in the audit log.
Create your API key
See pricing