“Digital signature” and “electronic signature” are terms that are used interchangeably in everyday conversation — but they are not the same thing. Conflating the two can lead to costly mistakes: using the wrong signature type for a high-stakes contract, failing a compliance audit, or having a document challenged in court.
The core definitions
An electronic signature (e-signature) is a broad legal concept — any electronic indication of a person’s intent to agree to a document. In practice that can be as simple as typing your name, clicking “I Agree,” or using a platform like Signed Docs Republic. Under the U.S. ESIGN Act and the EU’s eIDAS Regulation, electronic signatures are legally valid for most agreements — what matters is the signer’s intent and a verifiable audit trail.
A digital signature is a specific technical implementation of an electronic signature, using Public Key Infrastructure (PKI) cryptography: a private key held by the signer, a public key for verification, and a digital certificate from a trusted Certificate Authority. Every digital signature is an electronic signature, but not every electronic signature is a digital one — digital signatures are the highest-security subset.
Electronic signature
Any electronic indication of intent — a typed name, a click, a drawn signature. Legally valid under ESIGN/UETA and eIDAS. Security depends entirely on the platform’s audit trail, not cryptography.
Digital signature
PKI-based: private key, public key, and a Certificate Authority-issued certificate. Mathematically detects any tampering after signing and gives strong non-repudiation. Maps to eIDAS’s Advanced or Qualified tier.
How digital signatures work
The signer generates a cryptographic hash of the document, encrypts it with their private key to create the signature, and sends it along with their certificate. The recipient decrypts the signature with the signer’s public key, independently hashes the document they received, and compares the two. A match proves authenticity, integrity, and non-repudiation; a mismatch means the document was altered after signing.
EU eIDAS: three tiers of e-signature
The EU’s eIDAS Regulation defines three tiers, widely referenced globally: Simple (SES) — any electronic indication of intent, fine for low-risk agreements; Advanced (AES) — uniquely linked to the signer and tamper-evident, used for business contracts and NDAs; and Qualified (QES) — AES created on a certified device with a qualified certificate, carrying the same legal weight as a handwritten signature in every EU member state.
When to use each type
- 1
Standard e-signature for routine business documents — NDAs, offer letters, vendor agreements, sales contracts. A good platform’s audit trail (IP, timestamp, email verification, document hash) is enough.
- 2
Full digital signature for high-stakes or regulated documents — real estate, large financial agreements, EU Qualified contracts, government tenders — where cryptographic, court-ready proof is required.
Legal validity: what the law says
In the US, the federal ESIGN Act and the Uniform Electronic Transactions Act (adopted by 49 states) treat electronic signatures as legally equivalent to handwritten ones for most contracts — the law cares about intent and attribution, not the underlying technology. Exceptions include wills, certain court orders, and some real estate deeds. In the EU, no electronic signature can be denied legal effect solely for being electronic, and a Qualified Electronic Signature issued in one member state is recognised in all others.
This guide is for general information only, not legal advice. Consult your legal counsel for the specific signature requirements that apply to your documents and jurisdiction.