Not all signatures are equally reliable
    Articles

    Not all signatures are equally reliable

    We are writing this article for legal teams and operations managers who need a practical decision: which signature level should we use for each type of document? We explain the differences between the three levels, provide a decision table by document type, and cover the common mistakes in choosing.

    Electronic signature

    Electronic vs. digital vs. notarized signatures – not all signatures are equally reliable

    SignitReading time: 10 minutes

    Electronic, digital and notarized signatures are three different levels of proof. An electronic signature is a general term for any electronic means that indicates a person's consent, such as clicking a button after a verification code. A digital signature is a type of electronic signature that relies on a digital certificate and encryption to bind the signature to the signer's identity and reveal any later change. A notarized document, on the other hand, is one approved by a competent official authority through its own authentication procedures. The type of document and its risk determine which of these levels fits it.

    We are writing this article for legal teams and operations managers who need a practical decision: which signature level should we use for each type of document? We explain the differences between the three levels, provide a decision table by document type, and cover the common mistakes in choosing.

    In this article
    1. Quick summary
    2. What is the difference between electronic, digital and notarized signatures?
    3. What determines a signature's evidentiary strength?
    4. When should you use each level?
    5. What does Signit provide for each level?
    6. What are the common mistakes in choosing a signature level?
    7. Frequently asked questions
    8. Conclusion

    Quick summary

    • Electronic signature is a broad umbrella, the digital signature is one of its types and the strongest technically, and official notarization is a different procedure handled by competent authorities.
    • A signature's evidentiary strength depends on identity verification, binding the signature to its owner, tamper detection and the audit trail.
    • Some documents only need verification codes, some need verification through the national identity and a digital signature, and some can only be completed through official notarization platforms.
    • Choosing the level is a decision that matches the document's value and risk to the required strength of proof, not just a technical decision.
    • At Signit, we operate as a trust service provider licensed by the Digital Government Authority, and we offer multiple verification levels, from verification codes to Nafath.

    What is the difference between electronic, digital and notarized signatures?

    The core difference lies in the strength of proof and how it is achieved: an electronic signature proves consent to varying degrees, a digital signature adds a cryptographic binding to identity and tamper detection, and official notarization adds the approval of a competent authority.

    Under the Electronic Transactions Law, an electronic signature is electronic data linked to a transaction that indicates the signer's identity and consent. It covers many methods, from pressing an "I agree" button after a code sent to a mobile phone, to drawing a signature on the screen.

    A digital signature is an electronic signature built on public key infrastructure, where the person signs with a private key linked to a digital certificate issued by a certification authority. Any change to the document after signing invalidates the verification. For details, see the article The difference between digital and electronic signatures.

    A notarized document is a document approved by a competent official authority under its own procedures, such as authenticating employment contracts through the Qiwa platform, or powers of attorney and declarations at the Ministry of Justice. This is not so much a higher level of signature as a different path governed by the regulations of the competent authority.

    Simple electronic signature

    How it works
    Click or draw after a verification code
    Identity proof
    Depends on the verification method
    Detecting later changes
    Relies on the platform and its records
    Typical use
    Low-risk approvals and acknowledgments
    Reference
    Electronic Transactions Law

    Digital signature

    How it works
    Private key and digital certificate
    Identity proof
    Linked to a certificate and a verified identity
    Detecting later changes
    Cryptographic and embedded in the document
    Typical use
    High-value contracts and resolutions
    Reference
    Electronic Transactions Law and trust services

    Officially notarized document

    How it works
    A procedure at a competent official authority
    Identity proof
    Handled by the competent authority
    Detecting later changes
    Per the competent authority's system
    Typical use
    Documents the law requires to be notarized
    Reference
    The competent authority's regulations

    What determines a signature's evidentiary strength?

    A signature's strength is determined by four elements: how strongly the signer's identity is verified, whether the signature is linked to its owner alone, whether any later change can be detected, and how complete the audit trail is.

    Four elements that determine signature strength

    Identity verification

    How strongly the signer's identity is verified.

    Link to the signer

    The signature is linked to its owner alone.

    Tamper detection

    Any later change can be detected.

    Audit trail

    A complete audit trail.

    In any dispute, the questions are: Is the signer the person concerned? Did they sign of their own free will? Has the document remained unchanged? A signature that answers these questions with clear evidence is stronger as proof. That is why a simple electronic signature with verification through Nafath and a complete audit trail can be stronger in practice than a signature drawn on screen without verification.

    Licensing adds another dimension. When the service is provided by a licensed trust service provider under the Digital Government Authority, the evidence rests on a local regulatory framework. For the technical difference between a certificate and a signature, see the article The difference between a digital signature and a digital certificate.

    When should you use each level?

    Use the level that matches the document's value, risk and regulatory requirements: verification codes for low-risk documents, verification through the national identity and a digital signature for important contracts, and official notarization platforms for whatever the law requires to be notarized.

    Document typeUsually recommended levelWhy
    Policy acknowledgmentsElectronic signature with a verification codeLow risk and a need for speed
    Customer acceptance of termsElectronic signature with an audit trailProof of consent and of the version presented
    Non-disclosure agreementsVerification through Nafath or a verification code with an audit trailMay be needed as evidence in case of a breach
    High-value supplier and customer contractsVerification through Nafath and a digital signatureFinancial value and a higher risk of dispute
    Board resolutionsVerification through Nafath and a digital signatureRegulatory impact and a need to prove the signer's authority
    Employment contractsAuthentication through the Qiwa platformThe approved platform for authenticating employment contracts
    Powers of attorney and real estate transactionsNotarization platforms of the competent authoritiesThe law requires special notarization procedures

    Electronic signatureDigital signatureOfficial notarization

    How does official notarization work alongside electronic signatures?

    12 millionMore than 12 million employment contracts authenticated electronically through the Qiwa platform.

    Official notarization runs on its own path, and electronic signatures complement it for the remaining documents. An employment contract is authenticated through the Qiwa platform, which has seen more than 12 million employment contracts authenticated electronically, while the accompanying confidentiality agreement and policy acknowledgments are handled with internal electronic signatures. Neither path replaces the other.

    The right signature level for every document

    At Signit, we offer multiple verification levels, from verification codes to Nafath, with a unified audit trail for all signatures.

    Book a demo

    What does Signit provide for each level?

    At Signit, we offer multiple verification levels that organizations choose from based on the document's sensitivity, with a unified audit trail for all signatures.

    In electronic signature, we verify signers through Nafath, Absher and Wathq, or with verification codes via email, SMS and WhatsApp. We operate as a trust service provider licensed by the Digital Government Authority, host data inside the Kingdom, and provide an audit trail that records who signed, when and from which device. Signers can complete their signature in under 30 seconds without creating an account.

    What you needWhat Signit provides
    Fast verification for low-risk documentsVerification codes via email, SMS and WhatsApp
    Verification linked to the national identityNafath, Absher and Wathq
    A local regulatory frameworkA trust service provider licensed by the Digital Government Authority
    Evidence of the signing pathAn audit trail that records who signed, when and from which device
    Managing the contract before and after signingContract lifecycle management platform
    Details on digital signature formats and timestampingContact the Signit team

    What are the common mistakes in choosing a signature level?

    The most common mistake is using a single level for all documents. Applying the highest level to every simple acknowledgment slows work down and frustrates signers, while applying the lowest level to every contract weakens proof when it matters. The better approach is to match the level to the risk of each category.

    Another is confusing a signature image with a digital signature. Placing a signature image on a PDF file does not make it a digital signature, because it is not linked to a certificate and does not detect changes. This confusion leads some organizations to believe they are protected when they are not.

    Some teams make the mistake of using electronic signatures for documents that the law requires to be notarized by an official authority. These documents can only be completed through the competent authority's procedures, however strong the electronic signature.

    Finally, it is sometimes overlooked that a signature's strength does not prove the signer's authority. A digital signature proves that a given person signed, but their authority to bind the organization is governed by the delegation of authority matrix and mandates.

    How do you define signature levels in your organization?

    Start by listing documents and classifying them by risk and regulatory requirements, then set the level for each category and document it in an internal policy.

    1. List the types of documents that are signed in the organization.
    2. Identify the documents that the law requires to be notarized by an official authority, and take them out of the scope of internal signing.
    3. Classify the remaining documents by financial value, risk of dispute and data sensitivity.
    4. Set the appropriate verification and signature level for each category in coordination with legal affairs.
    5. Link each category to signer authorities in the delegation of authority matrix.
    6. Document the decision in an internal electronic signature policy.
    7. Configure the platform to apply the set level automatically for each document type.
    8. Review the policy periodically and whenever a regulatory update is issued.

    To connect signature levels to end-to-end contract management, see the article Contract management from draft to archive.

    Frequently asked questions

    Is a digital signature always stronger than an electronic signature?

    A digital signature is technically stronger because it binds the signature to a certificate and detects changes cryptographically. But practical strength also depends on identity verification and the audit trail, and the right level is determined by the document's risk.

    Is a click-to-sign after a verification code legally recognized?

    It counts as an electronic signature under the Electronic Transactions Law when it meets the requirements. Its evidentiary strength grows with the strength of verification and the completeness of the audit trail.

    What is a notarized document?

    It is a document approved by a competent official authority under its own procedures, such as employment contracts authenticated through the Qiwa platform or powers of attorney at the Ministry of Justice. It is governed by that authority's regulations.

    Can powers of attorney be signed electronically on a private signing platform?

    Powers of attorney and transactions that the law requires to be notarized are completed through the platforms of the competent authorities. A private electronic signature alone does not complete them.

    Which level suits non-disclosure agreements?

    Verification through Nafath or a verification code with a complete audit trail is advisable, because the agreement may be needed as evidence in case of a breach. The final level is set with the legal department.

    Is a signature image on a PDF a digital signature?

    No. A signature image is not linked to a digital certificate and does not detect any later change. It is the weakest form of evidence in a dispute.

    Does a signature prove the signer's authority?

    No. A signature proves the signer's identity and consent, while their authority to bind the organization is governed by the delegation of authority matrix and mandates. That is why both are verified together.

    How does Signit support different signature levels?

    At Signit, we offer verification by email, SMS and WhatsApp codes, or through Nafath, Absher and Wathq, depending on the document's sensitivity. We operate as a licensed trust service provider and provide an audit trail that records who signed, when and from which device.

    Conclusion

    Not all signatures are equal, and the right question is not "Which signature is stronger?" but "Which signature fits this document?". Simple acknowledgments only need verification codes, important contracts need verification through the national identity and a digital signature, and whatever the law requires to be notarized goes through the competent authorities. An organization that documents this decision in a clear policy gets speed where it is enough, and strong proof where it is needed.

    Define the signature levels in your organization

    If you are working on defining signature levels in your organization, we would be happy to help you align them with your documents.

    Book a demo

    External sources and references

    Start transforming your contract workflow today

    Let's Talk