Signature Types: BES, AdES, QES

Detailed comparison of the three electronic signature levels.

Overview

Torvus supports three levels of electronic signatures, each with increasing security, identity assurance, and legal weight:

Level	Full Name	Security	Legal Weight	Setup Time	Cost
BES	Basic Electronic Signature	Basic	Valid	Instant	Free
AdES	Advanced Electronic Signature	Enhanced	Strong	1-2 days	$10/signature
QES	Qualified Electronic Signature	Maximum	Equivalent to handwritten	1-2 weeks	$50/signature

Choosing the Right Level:

Most users should use AdES for important documents (legal, financial, contracts)
Use BES for low-risk, internal, or non-critical documents
Use QES for high-value, regulated, or cross-border documents requiring maximum legal weight

BES (Basic Electronic Signature)

What It Is

BES is a standard electronic signature that provides basic cryptographic proof of document signing with minimal identity verification.

Technical Implementation:

X.509 certificate (self-issued or Torvus-issued)
RSA 2048-bit signature
SHA-256 document hash
Server-provided timestamp
Email-based identity (no ID verification)

Requirements

Account Setup:

✅ Torvus account (verified email address)
✅ Two-factor authentication enabled
✅ Password + 2FA code to sign

Identity Verification:

Email verification only (no ID documents required)
2FA provides assurance signer controls account
No video verification or biometric checks

Setup Time: Instant (available immediately upon account creation)

Legal Recognition

United States:

✅ Valid under ESIGN Act
✅ Valid under UETA
✅ Legally binding for most contracts and agreements
⚠️ Lower evidentiary weight than AdES/QES (if disputed in court)
⚠️ May not be accepted by banks, government agencies, or regulated industries

European Union:

✅ Recognized as "Electronic Signature" under eIDAS
⚠️ Lower legal weight than AdES or QES
⚠️ May not be sufficient for legal or financial documents

Other Jurisdictions:

Generally accepted for non-critical documents
Varies by country and document type

Use Cases

Appropriate for:

✅ Internal company documents (policies, memos, internal agreements)
✅ Non-binding agreements or memoranda of understanding (MOU)
✅ Low-value transactions (under $1,000)
✅ Personal documents (not requiring legal weight)
✅ Draft documents or preliminary agreements
✅ Acknowledgments and confirmations

Not appropriate for:

❌ Legal documents (contracts, wills, trusts, powers of attorney)
❌ Financial documents (loan agreements, investment contracts)
❌ Real estate documents (leases, purchase agreements)
❌ Regulated industry documents (requiring proven identity)
❌ High-value contracts ($10K+)
❌ Documents where dispute is likely or high-stakes

Verification

What Verifiers See:

Signature Status: ✅ Valid
Signed by: John Smith
Email: john.smith@email.com
Date: March 15, 2025, 3:42 PM PST
Signature Type: BES (Basic Electronic Signature)

Certificate: Self-signed or Torvus-issued
Identity Verification: Email only (not ID-verified)

Document Integrity: ✅ Document has not been modified since signing

Verification Confidence: Basic (email address proves signer controls that email, but not real-world identity)

Example Signature Block

═══════════════════════════════════════════════════════════
ELECTRONIC SIGNATURE

Signed by: John Smith
Email: john.smith@email.com
Date: March 15, 2025 at 3:42:17 PM PST

Signature Type: BES (Basic Electronic Signature)
Signature Method: Torvus Security Digital Signature
Certificate Fingerprint: SHA-256:4A3B2C1D8E9F...

This document has been electronically signed using a Basic Electronic
Signature (BES). The signature is cryptographically bound to the document
and any modifications will invalidate the signature.

Signer Identity: Email-verified account (john.smith@email.com)
Two-Factor Authentication: Verified at time of signing

═══════════════════════════════════════════════════════════

Pricing

Free (included with Pro plan and above)

Unlimited BES signatures
No per-signature fee

AdES (Advanced Electronic Signature)

What It Is

AdES is an enhanced electronic signature that includes strong identity verification and meets legal requirements for "Advanced Electronic Signature" under eIDAS (EU) and equivalent standards in other jurisdictions.

Technical Implementation:

X.509 certificate issued by Torvus Certificate Authority (trusted CA)
RSA 2048-bit or 4096-bit signature
SHA-256 document hash
Trusted timestamp from Time Stamp Authority (TSA)
Government ID verification + video liveness check
Full audit trail (device, IP, identity verification records)

Requirements

Account Setup:

✅ Business or Enterprise plan
✅ Two-factor authentication enabled
✅ Government-issued ID verification
✅ Video selfie (liveness check)
✅ Certificate issuance (1-2 business days)

Identity Verification Process:

Step 1: ID Document Upload

Upload government-issued ID (driver's license, passport, national ID)
Both sides of ID required
ID must be current (not expired)
Supported countries: US, Canada, UK, EU, Australia, and 100+ others

Step 2: Video Selfie

Record short video holding ID next to face
Liveness detection (proves you're a real person, not photo/video replay)
Face matching (compares video to ID photo)

Step 3: Verification Review

Automated verification (typically 5-10 minutes)
Manual review if automated verification fails (1-2 business days)
Verification result: Approved / Rejected / Needs More Info

Step 4: Certificate Issuance

Certificate issued by Torvus Certificate Authority
Certificate valid for 1 year (renewal required annually)
Certificate tied to verified identity (name, date of birth, ID document)

Setup Time: 1-2 business days (instant if automated verification succeeds)

Legal Recognition

United States:

✅ Meets ESIGN Act requirements for electronic signatures
✅ Meets UETA requirements
✅ Strong evidentiary weight in court (ID verification + audit trail)
✅ Accepted by banks, legal institutions, and most businesses
✅ Suitable for legal and financial documents

European Union:

✅ Meets eIDAS requirements for Advanced Electronic Signature (AdES)
- Uniquely linked to signatory ✅
- Capable of identifying signatory ✅
- Created using means under signatory's sole control ✅
- Linked to data in such a way that any subsequent change is detectable ✅
✅ High legal weight (second highest after QES)
✅ Accepted by banks, government agencies, legal institutions
✅ Suitable for most legal and financial needs

Other Jurisdictions:

Strong recognition in Canada, UK, Australia, and 60+ countries
Equivalent to "Advanced" or "Enhanced" electronic signature in most jurisdictions

Use Cases

Appropriate for:

✅ Contracts ($1K-$100K value)
✅ Legal documents (wills, trusts, powers of attorney - if permitted by state law)
✅ Real estate documents (leases, purchase agreements under $100K)
✅ Financial documents (loan agreements, investment contracts)
✅ Employment agreements and HR documents
✅ Medical documents (consent forms, healthcare directives)
✅ Business agreements (NDAs, partnership agreements, service contracts)
✅ Vendor and supplier contracts
✅ Most business and legal needs (default recommendation)

Not appropriate for:

❌ Very high-value contracts ($100K+ - consider QES)
❌ Government or regulatory filings (may require QES)
❌ Cross-border transactions in jurisdictions requiring QES
❌ Documents requiring notarization (QES may replace notary, AdES cannot)

Verification

What Verifiers See:

Signature Status: ✅ Valid
Signed by: John Michael Smith
Date of Birth: January 1, 1980 (verified)
Date: March 15, 2025, 3:42 PM PST
Signature Type: AdES (Advanced Electronic Signature)

Certificate: Issued by Torvus Security Certificate Authority
Serial Number: 0x4A3B2C1D
Valid From: January 1, 2025
Valid Until: January 1, 2026

Identity Verification:
- Government ID: Driver's License #D1234567 (California)
- ID Expiration: December 31, 2028
- Video Liveness Check: Passed ✅
- Face Match: 98.7% confidence ✅

Timestamp: March 15, 2025, 3:42:17 PM PST
Timestamp Authority: DigiCert Timestamp Authority (trusted TSA)

Document Integrity: ✅ Document has not been modified since signing

Audit Trail:
- IP Address: 203.0.113.42 (San Francisco, CA, USA)
- Device: Chrome 120.0 on macOS 14.1
- 2FA: Verified via authenticator app

Verification Confidence: High (government ID + video liveness + face match + audit trail)

Example Signature Block

═══════════════════════════════════════════════════════════
ADVANCED ELECTRONIC SIGNATURE (AdES)

Signed by: John Michael Smith
Date of Birth: January 1, 1980
Date: March 15, 2025 at 3:42:17 PM PST

Signature Type: AdES (Advanced Electronic Signature)
Signature Standard: PAdES (PDF Advanced Electronic Signature)

Certificate Information:
- Issuer: Torvus Security Certificate Authority
- Serial Number: 0x4A3B2C1D
- Signature Algorithm: RSA 2048-bit with SHA-256
- Valid From: January 1, 2025
- Valid Until: January 1, 2026

Identity Verification:
- Government-Issued ID: Verified ✅
  ID Type: Driver's License (California)
  ID Number: D1234567
  ID Expiration: December 31, 2028
- Video Liveness Check: Passed ✅
- Face Match: 98.7% confidence ✅

Timestamp:
- Time: March 15, 2025 at 3:42:17 PM PST
- Timestamp Authority: DigiCert Timestamp Authority
- Timestamp Standard: RFC 3161

This document has been signed with an Advanced Electronic Signature (AdES)
meeting the requirements of eIDAS Regulation (EU) No 910/2014 and the
Electronic Signatures in Global and National Commerce Act (ESIGN Act) in
the United States.

The signature is cryptographically bound to the document. Any modifications
to the document after signing will invalidate the signature.

Verification: To verify this signature, open this PDF in Adobe Acrobat
or any PAdES-compatible PDF reader and view the signature panel.

═══════════════════════════════════════════════════════════

Pricing

$10 per signature (Business and Enterprise plans)

Includes: Certificate issuance, ID verification, timestamp, audit trail
Volume discounts: 100+ signatures/month (contact sales)

QES (Qualified Electronic Signature)

What It Is

QES is the highest level of electronic signature, legally equivalent to a handwritten signature in the European Union and recognized with maximum legal weight worldwide.

Technical Implementation:

Qualified certificate issued by Qualified Trust Service Provider (QTSP)
QTSP certified under eIDAS (EU) or equivalent (other jurisdictions)
Qualified Signature Creation Device (QSCD): Hardware Security Module (HSM) or smart card
RSA 4096-bit signature (or ECC P-384)
SHA-256 or SHA-384 document hash
Qualified timestamp from eIDAS-certified Timestamp Authority
In-person identity verification (notary or certified verification center)
Complete audit trail maintained for 10+ years

Requirements

Account Setup:

✅ Enterprise plan
✅ In-person identity verification (notary public, video notary, or certified verification center)
✅ Government-issued ID + secondary ID (passport, birth certificate, etc.)
✅ QSCD enrollment (hardware security module or smart card)
✅ Qualified certificate issuance (1-2 weeks)

Identity Verification Process:

Step 1: Schedule In-Person Verification

Book appointment with notary public, authorized verification center, or video notary (Enterprise only)
Bring: Government-issued ID (passport preferred), secondary ID, proof of address

Step 2: In-Person Verification

Notary or verification agent reviews IDs
Verifies identity matches IDs
May collect biometric data (fingerprint, photo) depending on jurisdiction
Completes verification certificate

Step 3: QSCD Enrollment

Option A: HSM (Hardware Security Module) - Remote, managed by Torvus
- Private key generated and stored in Torvus HSM (FIPS 140-2 Level 3 certified)
- You never see or have access to private key (highest security)
- Sign documents via Torvus interface (HSM signs on your behalf)
Option B: Smart Card - Physical card you keep
- Smart card mailed to you
- Private key generated and stored on card (cannot be extracted)
- Insert card into reader to sign documents
- You control card (you're responsible for securing it)

Step 4: Qualified Certificate Issuance

Qualified Trust Service Provider (QTSP) issues certificate
Certificate includes verified identity (full legal name, date of birth, ID document)
Certificate stored on QSCD (HSM or smart card)
Certificate valid for 1-3 years (renewal required)

Setup Time: 1-2 weeks (includes in-person verification and certificate issuance)

Legal Recognition

European Union:

✅ Legally equivalent to handwritten signature (eIDAS Article 25)
- "A qualified electronic signature shall have the equivalent legal effect of a handwritten signature."
✅ Highest legal weight (cannot be challenged on grounds of signature type)
✅ Accepted by all banks, government agencies, legal institutions
✅ Can replace notarization for many document types
✅ Cross-border mutual recognition (all 27 EU member states)
✅ Required for certain regulated documents (government filings, high-value contracts)

United States:

✅ Meets ESIGN Act highest standards
✅ Maximum evidentiary weight in court
✅ Accepted by federal agencies (SEC, FDA, IRS in some cases)
✅ Accepted by state agencies (varies by state)
✅ Can replace notarization in some states (but not all - check state law)
✅ Strongest form of electronic signature available

Other Jurisdictions:

✅ Recognized in 60+ countries with eIDAS mutual recognition or equivalent
✅ UK: UK eIDAS (post-Brexit equivalent)
✅ Switzerland: ZertES (Swiss equivalent to eIDAS QES)
✅ Strong recognition in Canada, Australia, and Asia-Pacific

Use Cases

Appropriate for:

✅ High-value contracts ($100K+)
✅ Government filings and regulatory submissions (SEC, FDA, etc.)
✅ Cross-border transactions (EU/international)
✅ Real estate transactions (deeds, purchase agreements over $100K)
✅ Corporate documents (board resolutions, shareholder agreements)
✅ Documents requiring notarization (QES can replace notary in many jurisdictions)
✅ Regulated industries (finance, healthcare, legal) where maximum assurance required
✅ Situations where signature may be challenged or disputed (extra legal protection)
✅ Documents with multi-year legal retention requirements

Not appropriate for:

❌ Low-value or non-critical documents (overkill, use BES or AdES)
❌ Internal company documents (AdES sufficient)
❌ Situations where other party cannot verify QES (some legacy systems)

Verification

What Verifiers See:

Signature Status: ✅ Valid (Qualified Electronic Signature)
Signed by: John Michael Smith
Date of Birth: January 1, 1980
Date: March 15, 2025, 3:42 PM PST
Signature Type: QES (Qualified Electronic Signature)

Qualified Certificate:
- Issuer: Torvus QTSP (Qualified Trust Service Provider)
- QTSP Status: eIDAS-Certified ✅ (EU Trusted List)
- Serial Number: 0xQTSP-8F7E6D5C
- Signature Algorithm: RSA 4096-bit with SHA-256
- Valid From: January 1, 2025
- Valid Until: January 1, 2028

Identity Verification:
- Method: In-person verification by notary public
- Notary: Jane Doe, Notary Public (License #NP123456, California)
- Date of Verification: December 15, 2024
- Government ID: US Passport #123456789 (issued 2020, expires 2030)
- Secondary ID: California Driver's License #D1234567
- Biometric Data: Photo and signature on file

QSCD (Qualified Signature Creation Device):
- Type: Hardware Security Module (HSM)
- Certification: FIPS 140-2 Level 3 ✅
- Key Storage: Private key stored in tamper-resistant HSM
- Key Control: Sole control of signatory (2FA required to authorize signing)

Timestamp:
- Time: March 15, 2025 at 3:42:17.328 PM PST
- Timestamp Authority: NIST-Certified Qualified Timestamp Authority
- Timestamp Standard: ETSI TS 101 861 (qualified timestamp)

Document Integrity: ✅ Document has not been modified since signing

Legal Equivalence:
This signature has the same legal effect as a handwritten signature under:
- eIDAS Regulation (EU) No 910/2014, Article 25
- Electronic Signatures in Global and National Commerce Act (ESIGN Act), US

Audit Trail: Complete audit trail maintained for 10 years (available on request)

Verification Confidence: Maximum (in-person verification + QSCD + QTSP + qualified timestamp)

Example Signature Block

═══════════════════════════════════════════════════════════
QUALIFIED ELECTRONIC SIGNATURE (QES)
═══════════════════════════════════════════════════════════

Signed by: John Michael Smith
Date of Birth: January 1, 1980
Place of Birth: San Francisco, California, United States
Date: March 15, 2025 at 3:42:17.328 PM PST

Signature Type: QES (Qualified Electronic Signature)
Signature Standard: PAdES-EPES (qualified level)

═══════════════════════════════════════════════════════════
QUALIFIED CERTIFICATE INFORMATION
═══════════════════════════════════════════════════════════

Issuer: Torvus Security QTSP (Qualified Trust Service Provider)
QTSP Status: eIDAS-Certified (EU Trusted List)
QTSP License: QTSP-EU-2025-001
Serial Number: 0xQTSP-8F7E6D5C
Signature Algorithm: RSA 4096-bit with SHA-256
Valid From: January 1, 2025
Valid Until: January 1, 2028 (3-year validity)

Certificate Policy: eIDAS QCP-n (Natural Person)
Certificate Type: Qualified Certificate for Electronic Signatures

═══════════════════════════════════════════════════════════
IDENTITY VERIFICATION
═══════════════════════════════════════════════════════════

Verification Method: In-person identity verification
Verified by: Jane Doe, Notary Public
Notary License: NP123456 (California)
Date of Verification: December 15, 2024
Location: San Francisco, California, United States

Identity Documents:
1. Primary ID: US Passport #123456789
   Issued: June 15, 2020
   Expires: June 15, 2030
   Issuing Authority: US Department of State

2. Secondary ID: California Driver's License #D1234567
   Issued: March 1, 2020
   Expires: December 31, 2028
   Issuing Authority: California Department of Motor Vehicles

Biometric Data: Photo and signature captured and stored securely
Face Match: 99.8% confidence ✅

═══════════════════════════════════════════════════════════
QUALIFIED SIGNATURE CREATION DEVICE (QSCD)
═══════════════════════════════════════════════════════════

Device Type: Hardware Security Module (HSM)
Manufacturer: Thales Luna HSM
Certification: FIPS 140-2 Level 3 (US), eIDAS QSCD (EU)
Certificate: Common Criteria EAL4+

Key Generation: Private key generated within HSM (never exported)
Key Storage: Tamper-resistant hardware security module
Key Control: Sole control of signatory
  - Two-factor authentication required to authorize signing
  - PIN code: Under signatory's sole control
  - No shared access or key escrow

═══════════════════════════════════════════════════════════
QUALIFIED TIMESTAMP
═══════════════════════════════════════════════════════════

Timestamp: March 15, 2025 at 3:42:17.328 PM PST
Timestamp Authority: NIST-Certified Qualified Timestamp Authority
Timestamp Serial: 0xTS-2025-03-15-4A3B2C1D
Timestamp Standard: ETSI TS 101 861 (eIDAS qualified timestamp)
Accuracy: ±1 second (UTC synchronized)

═══════════════════════════════════════════════════════════
LEGAL NOTICE
═══════════════════════════════════════════════════════════

This document has been signed with a Qualified Electronic Signature (QES)
in accordance with:

European Union:
- eIDAS Regulation (EU) No 910/2014
- Article 25: "A qualified electronic signature shall have the equivalent
  legal effect of a handwritten signature."

United States:
- Electronic Signatures in Global and National Commerce Act (ESIGN Act)
- Uniform Electronic Transactions Act (UETA)

This signature provides the highest level of legal assurance and cannot be
challenged on the grounds that it is in electronic form.

═══════════════════════════════════════════════════════════
DOCUMENT INTEGRITY
═══════════════════════════════════════════════════════════

Document Hash (SHA-256): 4A3B2C1D8E9F0A1B2C3D4E5F6A7B8C9D...
Signature Valid: ✅ Yes
Document Modified: ❌ No

Any modifications to this document after signing will invalidate the
signature. The cryptographic binding ensures the document remains exactly
as signed.

═══════════════════════════════════════════════════════════
VERIFICATION
═══════════════════════════════════════════════════════════

To verify this signature:
1. Open this PDF in Adobe Acrobat Reader (free)
2. View signature panel (left sidebar or Document → Certificates)
3. Click on signature for detailed verification

Online Verification: https://verify.torvussecurity.com
Enter Document ID: QES-2025-03-15-4A3B2C1D

═══════════════════════════════════════════════════════════
AUDIT TRAIL
═══════════════════════════════════════════════════════════

Complete audit trail maintained for 10 years, including:
- Identity verification records (notary certificate, ID scans)
- Signing event logs (IP address, device, timestamp)
- Certificate chain and revocation status
- All cryptographic evidence

Audit trail available on request to authorized parties.

═══════════════════════════════════════════════════════════

Signature ID: QES-2025-03-15-4A3B2C1D
Generated: March 15, 2025 at 3:42:17 PM PST
Document Pages: 10

═══════════════════════════════════════════════════════════

Pricing

$50 per signature (Enterprise plan only)

Includes: In-person identity verification, QTSP certificate, QSCD (HSM or smart card), qualified timestamp, 10-year audit trail retention
Volume discounts: 50+ signatures/month (contact sales)
Setup fee: $500 (one-time, includes in-person verification and QSCD enrollment)

Side-by-Side Comparison

Technical Comparison

Feature	BES	AdES	QES
Certificate Type	Self-signed or basic CA	Standard X.509	Qualified certificate (QTSP)
Key Size	RSA 2048-bit	RSA 2048/4096-bit	RSA 4096-bit or ECC P-384
Hash Algorithm	SHA-256	SHA-256	SHA-256 or SHA-384
Timestamp Type	Server timestamp	TSA (Timestamp Authority)	Qualified TSA (eIDAS)
ID Verification	Email only	Government ID + video	In-person + notary
Device Security	Software	Software	QSCD (HSM or smart card)
Private Key Control	User (software)	User (software)	QSCD (hardware)
Certificate Authority	Self or Torvus	Torvus CA	QTSP (eIDAS-certified)
Audit Trail	Basic	Detailed	Complete (10-year retention)
Long-Term Validity	1 year	1 year	10+ years (with qualified timestamp)

Legal Comparison

Feature	BES	AdES	QES
ESIGN Act (US)	Valid	Valid (strong)	Valid (maximum weight)
UETA (US)	Valid	Valid (strong)	Valid (maximum weight)
eIDAS (EU)	Simple e-signature	AdES (advanced)	QES (equivalent to handwritten)
Evidentiary Weight	Basic	High	Maximum
Notarization Replacement	No	No (most jurisdictions)	Yes (many jurisdictions)
Cross-Border Recognition	Limited	Strong	eIDAS mutual recognition
Regulatory Acceptance	Limited	Strong	Required for some filings
Legal Presumption	None	Strong presumption of validity	Cannot be challenged on form

Use Case Comparison

Document Type	BES	AdES	QES
Internal memos	✅ Perfect	⚠️ Overkill	❌ Overkill
Low-value contracts (under $1K)	✅ Good	✅ Better	❌ Overkill
Medium contracts ($1K-$100K)	⚠️ Risky	✅ Perfect	✅ Extra secure
High-value contracts ($100K+)	❌ Not recommended	✅ Good	✅ Perfect
Legal documents (wills, trusts)	❌ Not recommended	✅ Good	✅ Perfect
Real estate documents	❌ Not recommended	✅ Good (under $100K)	✅ Perfect ($100K+)
Financial documents	❌ Not recommended	✅ Perfect	✅ Extra secure
Government filings	❌ Not accepted	⚠️ Sometimes	✅ Required
Regulated industry	❌ Not recommended	✅ Good	✅ Perfect
Cross-border (EU)	⚠️ Limited	✅ Good	✅ Perfect
Notarization replacement	❌ No	❌ No	✅ Yes (many jurisdictions)

Cost Comparison

Feature	BES	AdES	QES
Plan Required	Pro ($29/mo)	Business ($99/mo)	Enterprise (custom)
Per-Signature Fee	Free	$10	$50
Setup Fee	None	None	$500 (one-time)
ID Verification	Free	Included	Included (in setup fee)
Certificate Renewal	Free (annual)	Included	Included
Volume Discounts	N/A	100+ sigs	50+ sigs

Example Annual Cost (100 signatures/year):

BES: $348/year (Pro plan only, no per-signature fee)
AdES: $2,188/year (Business plan $1,188 + 100 sigs × $10)
QES: Custom pricing (Enterprise plan + $500 setup + 100 sigs × $50 = ~$5,500+ first year)

Choosing the Right Signature Level

Decision Tree

Start: What type of document are you signing?

1. Internal company document (memo, policy, non-binding)?
   → Use BES

2. Low-value transaction (under $1,000)?
   → Use BES (if low-risk) or AdES (if you want extra security)

3. Legal or financial document (contract, agreement, loan)?
   → Is value under $10K?
      → Use AdES
   → Is value $10K-$100K?
      → Use AdES (AdES is sufficient, QES is extra secure but optional)
   → Is value over $100K?
      → Use QES (maximum legal protection)

4. Real estate document (lease, purchase agreement)?
   → Is value under $100K?
      → Use AdES
   → Is value over $100K or is this a deed/title?
      → Use QES

5. Government filing or regulatory submission?
   → Check requirements (many require QES)
   → Use QES

6. Cross-border transaction (EU/international)?
   → Is other party in EU or country requiring QES?
      → Use QES (eIDAS mutual recognition)
   → Otherwise:
      → Use AdES

7. Document requiring notarization?
   → Check if QES can replace notary in your jurisdiction
   → If yes: Use QES
   → If no: Use AdES + traditional notary

8. High-risk document (likely to be disputed or challenged)?
   → Use QES (maximum legal protection)

9. Unsure / want best balance of cost and legal weight?
   → Use AdES (recommended default for important documents)

Recommendation by Industry

Legal Services:

Client agreements: AdES
Court filings: QES (if accepted by court)
Internal documents: BES

Financial Services:

Loan agreements: AdES ($1K-$100K) or QES ($100K+)
Investment contracts: QES
Account opening: AdES
Internal approvals: BES

Real Estate:

Leases: AdES
Purchase agreements: AdES (under $100K) or QES ($100K+)
Deeds and titles: QES
Disclosures: AdES

Healthcare:

Consent forms: AdES
Healthcare directives: AdES or QES
Medical records release: AdES
Internal documents: BES

Technology/SaaS:

Customer contracts: AdES
Terms of service: BES (clickwrap) or AdES (negotiated)
Vendor agreements: AdES
Internal approvals: BES

Government/Public Sector:

Check requirements (varies by agency and document type)
Many filings require QES
Internal documents: BES or AdES

FAQ

Can I upgrade a BES signature to AdES or QES later?

No. You must re-sign the document with the higher signature level. The original BES signature remains valid but cannot be "upgraded."

If I sign with QES, does the other party need QES to sign?

No. Each party can sign with their own signature level. A contract can have one QES signature and one AdES signature (or even one handwritten signature). Each signature is independently valid.

Does QES really replace notarization?

In some jurisdictions, yes. QES can replace notarization for many document types in the EU and some US states. However:

Check your local law (varies by state/country and document type)
Some documents still require traditional notary (e.g., wills in many US states)
Real estate transactions often require notary (though QES is gaining acceptance)

Best practice: Consult with attorney to confirm QES is accepted for your specific use case.

How long are signatures valid?

BES: Valid as long as certificate is valid (1 year, then renew) AdES: Valid as long as certificate is valid (1 year) + TSA timestamp extends validity QES: Valid indefinitely with qualified timestamp (10+ years)

Long-term validity: AdES and QES use trusted timestamps to ensure signatures remain verifiable even after certificates expire.

What if my certificate is revoked?

If you revoke your certificate: You cannot create new signatures, but existing signatures remain valid (signatures prove document was signed when certificate was valid).

If you discover compromise: Revoke certificate immediately and notify all parties who received signed documents from you.

Can I use AdES/QES in the US?

Yes. While eIDAS is EU regulation, the signature types are defined by international standards (PAdES, XAdES, etc.) and are recognized worldwide. AdES and QES provide strong legal weight under ESIGN Act and UETA in the US.

Do I need QES for a $1M contract?

Recommended but not required. AdES is legally sufficient for most contracts, even high-value. QES provides extra legal protection (maximum weight, cannot be challenged on form), which is valuable for high-stakes contracts where dispute is more likely.

Cost-benefit: $50 for QES is cheap insurance on a $1M contract.

Document Signing Overview: Introduction to document signing
Document Management: Uploading and organizing documents
Security Best Practices: Protecting sensitive documents
Legal Resources: Terms of service and legal information

Last Updated: October 8, 2025

Overview​

BES (Basic Electronic Signature)​

What It Is​

Requirements​

Legal Recognition​

Use Cases​

Verification​

Example Signature Block​

Pricing​

AdES (Advanced Electronic Signature)​

What It Is​

Requirements​

Legal Recognition​

Use Cases​

Verification​

Example Signature Block​

Pricing​

QES (Qualified Electronic Signature)​

What It Is​

Requirements​

Legal Recognition​

Use Cases​

Verification​

Example Signature Block​

Pricing​

Side-by-Side Comparison​

Technical Comparison​

Legal Comparison​

Use Case Comparison​

Cost Comparison​

Choosing the Right Signature Level​

Decision Tree​

Recommendation by Industry​

FAQ​

Can I upgrade a BES signature to AdES or QES later?​

If I sign with QES, does the other party need QES to sign?​

Does QES really replace notarization?​

How long are signatures valid?​

What if my certificate is revoked?​

Can I use AdES/QES in the US?​

Do I need QES for a $1M contract?​

Related Guides​

Overview

BES (Basic Electronic Signature)

What It Is

Requirements

Legal Recognition

Use Cases

Verification

Example Signature Block

Pricing

AdES (Advanced Electronic Signature)

What It Is

Requirements

Legal Recognition

Use Cases

Verification

Example Signature Block

Pricing

QES (Qualified Electronic Signature)

What It Is

Requirements

Legal Recognition

Use Cases

Verification

Example Signature Block

Pricing

Side-by-Side Comparison

Technical Comparison

Legal Comparison

Use Case Comparison

Cost Comparison

Choosing the Right Signature Level

Decision Tree

Recommendation by Industry

FAQ

Can I upgrade a BES signature to AdES or QES later?

If I sign with QES, does the other party need QES to sign?

Does QES really replace notarization?

How long are signatures valid?

What if my certificate is revoked?

Can I use AdES/QES in the US?

Do I need QES for a $1M contract?

Related Guides