What makes an electronic signature legally binding?

Last updated September 11, 2026

In the United States an electronic signature has the same legal effect as ink — but only when the record can show certain things. This is what those things are, and what to look for in whatever you use.

The two laws

The ESIGN Act (the Electronic Signatures in Global and National Commerce Act, 2000) is federal and says a signature, contract or record may not be denied legal effect solely because it is electronic.

UETA (the Uniform Electronic Transactions Act) is the state-level counterpart, adopted in nearly every state. It does the same work at state level and is where most of the detail lives for ordinary contracts. The two overlap heavily; the practical upshot is that electronic signing is well-settled law in the US, not a grey area.

The four things a signature has to demonstrate

Validity is not a property of the signature image. It is a property of the record around it. Four elements matter:

1. Intent to sign

The signer has to have meant to sign. Drawing a signature, typing a name into a signature field, or clicking a clearly-labelled button all qualify — a name that merely appears in a document does not.

2. Consent to do business electronically

Under ESIGN this is a separate, affirmative step, not something buried in terms of service. For consumer transactions there are additional disclosure requirements. In practice: the signer should be shown a consent notice and have to agree to it before signing, and that agreement should be recorded.

3. Association of the signature with the record

The signature has to be logically connected to the document it signs, in a way that would reveal tampering. This is why a good service produces one finished file containing both the signed pages and the audit record, and fingerprints it — commonly with a SHA-256 hash, so any later alteration changes the hash.

4. Retention and reproduction

Everyone entitled to the record must be able to keep it and reproduce it. In practice that means every party gets a copy of the completed document, and can retrieve it later.

What a defensible audit trail contains

If a signature is ever questioned, the certificate is the evidence. A weak one records that a document was signed. A useful one records, for every signer:

• When they consented to sign electronically, with IP address and browser
• When they submitted their signature, with IP address and browser
• Confirmation that they reviewed the full document, not only the signature page
• Every time an invitation was sent or resent, and to which address
• A cryptographic fingerprint of the finished document

Worth knowing before you sign anything: that certificate is delivered to everyone on the document. Your IP address and timestamps are visible to the other parties. That is the point of it, but people are often surprised.

Documents that are excluded

ESIGN and most state UETA versions carve out categories entirely, or impose formalities that electronic signing does not provide. Do not sign these electronically:

• Wills, codicils and testamentary trusts
• Anything requiring notarisation, a witness, or wet ink under applicable law
• Adoption, divorce and other family-law matters
• Court filings, orders and pleadings
• Notices of eviction, foreclosure or repossession of a primary residence
• Termination of utility services, or cancellation of health or life insurance benefits
• Product recall notices, and documents accompanying hazardous materials in transport

This is a summary and requirements vary by state and transaction. The fuller list is in section 6 of our Terms. When in doubt, paper and a lawyer.

Does the price of the service change any of this?

No. Nothing in ESIGN or UETA refers to what you paid. A signature collected through a $1.00 envelope that records consent, review, intent and a fingerprint is not weaker than one collected through a $540-a-year seat that records the same things. What higher tiers buy is workflow — templates, integrations, bulk sending — and in some cases stronger identity verification, which is a genuine difference for high-value transactions where you need more assurance than control of an email address.

The question to ask a provider is not what it costs. It is: show me the certificate.

How we implement each requirement

• Intent: signers draw or type a signature and confirm intent before submitting.
• Consent: a separate disclosure screen that must be accepted before the document opens.
• Review: the signing page will not accept a signature until every page has been displayed.
• Association: one combined PDF of the signed pages plus the Certificate of Completion, fingerprinted with SHA-256.
• Retention: the completed document is emailed to the sender and every signer, kept indefinitely, and recoverable through find my document.