Are electronic signatures legally binding? What US firms need to know

Electronic signatures are legally binding in the United States in the large majority of situations, and have been for a long time. The federal E-SIGN Act dates from 2000, and the Uniform Electronic Transactions Act, adopted in nearly every state, is older still. Both say roughly the same thing: a signature, contract or record is not unenforceable solely because it is electronic.

That settles the question people ask. It does not settle the question that matters, which is narrower and more practical. Not “is an electronic signature valid” but “can we prove, in a year, that this particular person signed this particular document on this particular day”. The law is the easy half. The evidence is the half your process decides.

This is a general description of how the framework works, not legal advice about your matters or your jurisdiction. Your own state’s version of UETA, and the rules of any court or agency you file with, are the ones that govern.

What the statutes actually require

Strip away the detail and the framework asks for four things.

The signer must intend to sign. Clicking a button labelled “I agree” or drawing a mark is intent; having a document open in a browser is not.

The signer must consent to doing business electronically. In consumer transactions E-SIGN has specific disclosure requirements around this, which is why you see the “I agree to use electronic records” language on consumer forms. Between businesses it is usually straightforward.

The signature must be associated with the record. A signature image in a separate file, with nothing tying it to the document, is a much weaker artefact than a signature applied to the document itself.

And the record must be retained and reproducible by everyone entitled to it. A signed agreement you cannot produce in its signed form later is, for evidentiary purposes, in trouble.

Notice what is not in that list: a particular technology, a particular vendor, or a certificate. The statutes are deliberately technology-neutral. A typed name can satisfy them. That neutrality is why the interesting question moves to evidence.

The exceptions worth knowing

E-SIGN carves out categories where electronic records do not automatically suffice. The list includes wills, codicils and testamentary trusts; certain family law matters like adoption and divorce papers in some states; court orders and official court documents; certain notices such as utility cancellation, foreclosure, eviction and health or life insurance termination; and documents accompanying hazardous materials.

State law adds its own variations, and practice adds more. Some county recorders will not accept an electronically signed deed. Some agencies want wet ink regardless of what the statute permits. Notarisation has its own rules, and remote online notarisation is a separate regime that many but not all states have adopted.

The practical rule: electronic is the default, and the exceptions are specific, known, and worth having written on a single page in your office rather than looked up each time.

Why the evidence is the real question

Suppose a client disputes a retainer agreement two years on. They say they never signed it, or that the version produced is not the one they agreed to.

A signature by itself is weak evidence in that argument, whether it is ink or pixels. What answers it is everything around the signature. When was the document sent, and to which address. When was it opened. From what IP address and what device. Was the signer authenticated before they could reach it, or could anyone with the link sign. Was the document altered after signing, and can you demonstrate it was not. Who at your firm has touched the record since.

That bundle is the audit trail, and it is what distinguishes a signing process that holds up from one that merely happened. A pasted signature image on a PDF, emailed back and forth, produces almost none of it. A signature captured in a system that authenticated the signer and logged the sequence produces all of it.

This is also the argument against the most common informal workflow, which is emailing a PDF and asking the client to print, sign, photograph and email it back. It is not that this is invalid. It is that it gives you a photograph of a signature with no reliable account of who produced it, and that a determined dispute will pick it apart.

If you want to see what a captured signature looks like on our side, digital signatures describes the drawing and typing options and what is recorded alongside them. Being straight about the limit: Pertavo records the signature and the request, not a general access log — what is recorded about a document sets out exactly what is kept.

Authentication is the weak link, and it is fixable

The gap in most signing processes is the first step rather than the last: how do you know the person who signed is the person you think.

Email possession is the usual answer, and it is weaker than firms assume. An email account can be compromised, shared within a household, or simply open on a family computer. If the entire proof of identity is “the link went to their address and somebody clicked it”, then the strength of your signature is the strength of that mailbox.

Better answers are not exotic. Requiring the signer to have an account and log in raises the bar meaningfully. Two-factor authentication on that account raises it again, and is the single most cost-effective improvement available to a small firm; two-factor authentication covers what enabling it involves. For genuinely high-value documents, a phone call to confirm before sending costs two minutes and closes the gap almost entirely.

Match the effort to the stakes. An engagement letter and a settlement release do not need the same ceremony.

What a defensible process looks like

Six habits, none of them expensive.

Send the document through a system that requires the signer to authenticate, rather than to an open link. Keep the signed version immutable, so the copy you produce later is demonstrably the copy that was signed. Retain the audit trail with the document rather than in a separate system that may not outlive it. Give the signer their own copy at the moment of signing, which both satisfies the reproducibility requirement and heads off the “I never received it” argument. Know your exception list and check filings against it. And keep wet ink available for the handful of documents that need it, without apology.

Do those and the legal question mostly takes care of itself, because the framework was never the obstacle. The obstacle is being able to show your work.

If you would like to walk through how your current signing process would look under scrutiny, get in touch and we will go through it with you.