What is an audit trail and why does it make a signature valid?

·5 min read

When someone signs electronically, what gives the document legal strength isn't just the drawn signature, but being able to prove who signed, when, and that the document wasn't altered afterward. That's exactly what the audit trail provides.

What an audit trail records

A good audit trail records, at the moment of signing, data such as the exact date and time, the signer's IP address, the device and browser used, an approximate location, and a verification method such as a code sent to the signer.

Why it matters in a dispute

Most electronic-signature laws require two things to give a document validity: that the signature be attributable to a person and that the document be kept intact. The audit trail is precisely the evidence that backs both points if someone challenges the signature.

How Firmiu applies it

Firmiu generates an audit trail on every signature: IP, device, location, timestamp and a four-digit verification code. All of that information travels with the signed PDF, so the document is backed without you having to do anything extra.

Frequently asked questions

What is an electronic signature audit trail?

It's the record of everything surrounding the signature: who signed, their email, the exact date and time in their timezone, IP address, browser and operating system, approximate location and the code verification. It's what turns a signature image into evidence.

Why does the audit trail matter in a dispute?

Because if someone denies having signed, the trail documents the moment and context of that signature. Without it you only have an image on a PDF; with it, you have a verifiable record of consent you can present as evidence.

How do you prove the document wasn't altered afterwards?

With the SHA-256 fingerprint, a unique identifier computed from the file's contents. Change a single character in the PDF and the fingerprint changes completely. Firmiu prints that fingerprint and a reference number on the certificate page, so you just recompute the hash of the document presented and compare.

Start signing for free

Create your free account and sign your first document in minutes.

Create free account