Evidence and validity

For every signing, Tillor records who signed, when and how, and seals the PDF so that any later change is visible. The result is a simple electronic signature, suitable for rental contracts, house rules, waivers and terms. For documents where the law requires a stronger signature, Tillor is not the right place.

What is on the evidence pages?Copy link to this section

The signed PDF gets one or more Signing evidence pages at the end. They show:

• the title of the document, the request, your organisation, the number of pages and when the request was created, sent and completed
• two fingerprints of the file: of the PDF as you uploaded it, and of the signed pages before the evidence pages were added. If a single character in the file changes, the fingerprint no longer matches
• per signer: name, role, type, email address, phone number and language, when the link went out and when that person first opened the page, the time of signing, the IP address and the device
• how the signer was confirmed: with a one-time code, which channel the code went to and when, or signed in to Tillor for staff
• the sentence the signer agreed to, exactly as it appeared on screen
• what the signer filled in: every text, date and checkbox field with its value, including what was left empty
• the signature and the initials as they were drawn, and on which pages they appear. A typed signature appears as an image of the typed name, just like a drawn one
• how the signing was done: on the signing page via the link, in Tillor by a signed-in staff member, or on the tablet at reception (with a code, or with the identity confirmed by a staff member)
• the audit trail: every step with time, who and from which IP address and device. For example Signing link sent, Signing page opened, Verification code sent, Wrong code entered, Signed and Completed and sealed

Times are shown in your organisation's time zone, with the UTC time (the worldwide standard time) next to it. Tillor stores IP addresses and devices encrypted. You can see them in Tillor and on the evidence pages. The signatures and filled-in values appear in the document at the places you chose. Your original upload is stored separately and never changes.

You see the same steps on the request page under History and on the customer under Events.

Seal and timestampCopy link to this section

As the last step, the signed PDF is sealed with a digital signature of your organisation, created by Tillor. If you open it in Adobe Reader or another PDF reader, you see a signature panel. If anything about the file changes after sealing, the reader reports it.

The reader may call the signer unknown or not trusted. That is normal: the certificate comes from Tillor and not from a paid certificate authority. Which certificate it is appears with its fingerprint on the evidence page.

The seal also gets a timestamp from an independent, free timestamp service (FreeTSA, or DigiCert if that one does not respond). This proves, independently of Tillor, when the file existed in exactly this form. The time appears on the request page under Timestamp.

What kind of signatureCopy link to this section

This is a simple electronic signature under the European eIDAS rules. Tillor checks the email address or phone number with a code, records the drawing and keeps the evidence. That suits rental contracts, house rules, waivers and terms.

A qualified signature, for example with itsme or an eID card, is not possible. If you have a document for which the law requires that, have it signed outside Tillor.

What happens to the evidence?Copy link to this section

• The original PDF and the signed PDF stay with the customer's documents. You can archive them but not delete them.
• The evidence is part of the signed PDF. Anyone who received a copy therefore also has the evidence pages.
• The audit trail stays on the request page, even if the request was declined, canceled or has expired.

Problems?Copy link to this section

See alsoCopy link to this section