Ready to start signing documents electronically? With increasing levels of digitization in all areas of work and life, the need for a secure method of signing electronic documents is greater than ever.
But how do you choose the right product for your needs? Electronic signatures can be simple, advanced or qualified, with their level of security determining how they are treated in court. Also, signing can take place on a variety of devices, some of which are more user-friendly than others.
Today, we will look at the different options you have when choosing an electronic signature. Also, we’ll show you which has the widest application and is the best solution for the greatest number of scenarios.
Types of Electronic Signatures Bases on Security and Assurance
Depending on their legal weight and reliability, electronic signatures are divided into simple, advanced, and qualified. Here are the main differences between them.
Simple Electronic Signature (SES)
Simple electronic signatures have the lowest level of assurance. They are not protected by passwords or cryptography. The SES’s legal validity depends on both parties agreeing to accept it.
Most often, a simple eSignature looks like a checkbox or a button. You might see it, for example, when you agree to a website’s privacy policy or accept the terms of use of a software program during installation.
As you might have guessed, this signature is not secure enough to be suitable for more sensitive transactions. Actions that are more legally or financially binding require a more sophisticated kind of electronic signature.
Advanced Electronic Signature (AdES)
Advanced eSignatures are a step up in terms of security because they come with some form of cryptographic protection. This makes the identification of the signer more reliable. Consequently, this type of eSign is suitable for some transactions with businesses and institutions, though not all.
Whether an advanced or qualified electronic signature is required in a given scenario is not up to the signer. The risk of the transaction is determined by the person or organization requesting the signature – they will tell you if you need to sign with an AdES or QES.
For example, a bank may accept an advanced electronic signature for opening a deposit account but require a qualified one when applying for a credit card.
Qualified Electronic Signature (QES)
Qualified signing features the highest level of security. In addition to cryptographic protection mechanisms, it requires thorough identity verification of the signature holder.
The qualified eSign has a reverse burden of proof. That is to say, in litigation concerning a document signed with QES, the burden falls on the party attempting to challenge the validity of the signature, not the other way around. The QES is always legally valid by default.
It is for this reason that qualified electronic signatures are an appropriate solution even for highly sensitive transactions. For example, banks with a higher degree of digitalization allow online loan applications with a QES, many government institutions accept electronic applications signed with a QES, etc.
Types of Electronic Signatures by Device
In addition to their legal weight, electronic signatures differ in the medium through which the signature is made.
Smart Cards
Smart cards are physical cards equipped with a special chip that the signer uses to authenticate themselves. They work similarly to how ATMs read debit or credit cards by the chips in them to find out which bank account they are linked to.
Although this type of medium is notable for its high security, it requires a special reader for the card, making it less convenient than other signing methods, especially when signing on the go.
USB Tokens
This signature requires a USB stick that plugs into the computer to affix the signature. In addition, the user must also enter a PIN code to confirm the signature. That is, even if another person has access to the USB token, if they do not know the holder’s PIN, they cannot sign on their behalf.
For the USB token to work, the user must also install the appropriate signing certificates on their computer. This adds another security measure by ensuring that the token only works on the computer where the certificate is installed. You can install the certificates on more than one computer and use the USB token with all devices you set up.
Despite their high level of security, USB tokens can also be inconvenient to use because of the installations and the need for the user to coordinate several steps – possession of the device, the PIN code, and the certificates on the computer. Plus, losing the USB stick happens more often than you’d think.
Mobile/Remote Electronic Signatures
Remote or mobile electronic signatures are applied directly through the user’s mobile device. Evrotrust’s mobile app is an example of this method since our QES is applied to documents directly through the app.
With this type of signature, the user goes through an initial electronic identification entirely online. It includes scanning a valid ID document and passing a video liveness check. The user also creates their own password and enters their biometric data (fingerprint, facial recognition) to be able to access their signature in the future.
So, when you need to sign, all you need to do is log into the app – with a PIN or with a facial scan, according to the preferences you set in the settings. Biometrics is the best option as no one else will be able to use your signature, even if they have access to your mobile device and it’s unlocked.
Since this signature is entirely on the mobile device and requires nothing more than a simple app installation, it is the most convenient option for most people. It doesn’t require dealing with certificates or carrying around additional items like USBs or card readers.
Which Type of Electronic Signature Is the Ultimate Winner?
Considering the advantages and disadvantages of all types of electronic signatures, the best combination is a mobile qualified electronic signature. Here is why:
- It has the highest legal validity;
- It’s valid by default;
- It is always available on the user’s mobile phone without the need for a computer;
- No need to carry additional devices (readers, USB tokens) with you;
- No need to install certificates.
Thus, the mobile QES offers the best balance between security and convenience, making it the most appropriate solution for most cases.
Also, even if a service only requires a simple or advanced signature, you can access it with a qualified eSign, too. In other words, you can use QES for transactions that require a simple or advanced electronic signature.
Download the Evrotrust mobile app to sign personal documents today. Alternatively, if you’re looking for a solution for your business, contact our team to get a personalized quote tailored to your needs.
