Electronic Signatures in the EU — eIDAS Regulation Guide

The eIDAS Regulation (EU No 910/2014) provides a unified legal framework for electronic signatures across all EU and EEA member states. Under eIDAS, an electronic signature cannot be denied legal effect solely because it is in electronic form — making e-signing fully valid for most business and personal documents throughout Europe.

Legally valid e-signaturesFiles never leave your browserNo account requiredFrom €2.08/month

Loading editor...

What Is the eIDAS Regulation?

eIDAS stands for Electronic Identification, Authentication and Trust Services. The regulation entered into force on July 1, 2016, replacing the earlier Electronic Signatures Directive (1999/93/EC). Unlike a directive, which requires each member state to transpose it into national law, eIDAS is a regulation — it applies directly and uniformly across all 27 EU member states plus Iceland, Liechtenstein, and Norway through the EEA agreement.

The core purpose of eIDAS is to establish a predictable legal environment for electronic transactions within the European Single Market. Article 25(1) contains the foundational principle: an electronic signature shall not be denied legal effect and admissibility as evidence in legal proceedings solely on the grounds that it is in electronic form. This means that any electronic signature — including a simple signature created with SigPDF — has legal standing in every EU member state.

The Three Levels of Electronic Signatures Under eIDAS

eIDAS defines three distinct levels of electronic signatures, each with increasing assurance and evidential weight. Understanding these levels is essential for choosing the right type of signature for your document.

1. Simple Electronic Signature (SES)

A Simple Electronic Signature is the broadest category. It includes any data in electronic form that is attached to or logically associated with other electronic data and that is used by the signatory to sign. This encompasses typed names, drawn signatures on a touchscreen, scanned handwritten signatures, and even a checkbox indicating agreement.

Under Article 25(1), a SES cannot be refused legal effect solely because it is electronic. In practice, the vast majority of everyday business documents — contracts, agreements, invoices, purchase orders, HR paperwork, and correspondence — are validly signed with a simple electronic signature. SigPDF creates simple electronic signatures that satisfy this standard.

2. Advanced Electronic Signature (AES)

An Advanced Electronic Signature must meet four additional requirements defined in Article 26 of eIDAS:

  • It is uniquely linked to the signatory
  • It is capable of identifying the signatory
  • It is created using electronic signature creation data that the signatory can, with a high level of confidence, use under their sole control
  • It is linked to the data signed in such a way that any subsequent change in the data is detectable

AES is typically implemented through cryptographic digital certificates. It provides a higher level of assurance about the identity of the signer and the integrity of the document. Some industries and regulatory contexts recommend or require AES for certain document types, particularly in banking, insurance, and public procurement.

3. Qualified Electronic Signature (QES)

A Qualified Electronic Signature is the highest level defined by eIDAS. It is an advanced electronic signature created by a qualified electronic signature creation device (QSCD) and based on a qualified certificate issued by a trust service provider listed on an EU member state's trusted list.

Under Article 25(2), a QES has the equivalent legal effect of a handwritten signature. It is the only type of electronic signature that eIDAS explicitly equates to a wet-ink signature in all member states. QES is required in relatively few situations — mainly where national law requires written form, such as some credit and employment documents, plus some public administration filings and regulated industry submissions. For most private-sector and commercial use cases, a SES or AES is sufficient.

Mutual Recognition Across the EU

One of the most powerful aspects of eIDAS is the principle of mutual recognition. A qualified electronic signature issued in France is legally equivalent to one issued in Germany, Spain, Italy, or any other member state. This eliminates the fragmentation that existed under the old Electronic Signatures Directive, where cross-border recognition was inconsistent.

Simple electronic signatures do not get this automatic equivalence, but Article 25(1) protects them everywhere: a court in any member state may not deny them legal effect or admissibility merely because they are electronic. So whether you sign a contract in Berlin for a counterparty in Madrid, or an invoice in Amsterdam for a client in Rome, your SigPDF signature works wherever the document has no special form requirement.

When Is Each Signature Level Needed?

  • SES (Simple Electronic Signature) — Suitable for the vast majority of business documents: contracts, proposals, invoices, purchase orders, NDAs, employment agreements, freelance agreements, and general correspondence. No special hardware or certificates required.
  • AES (Advanced Electronic Signature) — Recommended for higher-value transactions, regulated industries, and situations where stronger proof of signer identity is desired. Often used in banking, insurance, and public procurement.
  • QES (Qualified Electronic Signature) — Required for specific legal acts where national law demands written form and accepts an electronic substitute. Examples include German consumer credit agreements, some public-sector filings, and specific regulated submissions.

How SigPDF Works Under eIDAS

SigPDF creates simple electronic signatures (SES) — the most widely used and broadly accepted level under eIDAS. When you draw, type, or upload your signature using SigPDF, it is permanently embedded in the PDF document, logically associated with the signed content, and created with your clear intent to sign. This satisfies the eIDAS definition of an electronic signature under Article 3(10) and is protected by the non-discrimination principle of Article 25(1).

SigPDF processes your PDF entirely inside your browser. Your document never leaves your device — there are no server uploads, no third-party storage, and no cloud processing. This client-side architecture provides exceptional privacy, which is particularly relevant under the EU's General Data Protection Regulation (GDPR). Because your documents are never transmitted to external servers, there is no data processing to worry about and no risk of unauthorized access.

At €2.08/month on an annual plan with unlimited signatures, SigPDF is a fraction of the cost of enterprise e-signature platforms. There are no per-document fees, no envelope limits, and no complex pricing tiers. You get one simple plan that covers all your everyday signing needs.

Sign a PDF in Under a Minute

  1. Open your PDF in SigPDF — click “Choose File” or drag and drop
  2. Create your signature by drawing, typing, or uploading an image
  3. Place your signature on the document where needed
  4. Download the signed PDF — your signature is permanently embedded

Summary

Electronic signatures are fully legal across the European Union under the eIDAS Regulation. For the overwhelming majority of business and personal documents, a simple electronic signature is all you need — and that is exactly what SigPDF provides. Your documents stay private, your signatures cannot be refused in any member state merely for being electronic, and the entire process takes less than a minute.

Frequently Asked Questions

What is the eIDAS Regulation?
eIDAS (Electronic Identification, Authentication and Trust Services) is an EU regulation (No 910/2014) that provides a unified legal framework for electronic signatures across all EU and EEA member states. It entered into force on July 1, 2016, replacing the earlier Electronic Signatures Directive.
What are the three levels of electronic signatures under eIDAS?
eIDAS defines three levels: Simple Electronic Signature (SES) for everyday business documents with no special hardware required; Advanced Electronic Signature (AES) with cryptographic certificates for higher-value transactions; and Qualified Electronic Signature (QES) which is the legal equivalent of a handwritten signature, required for specific legal acts.
When is each signature level needed?
SES is suitable for contracts, proposals, invoices, NDAs, and general correspondence. AES is recommended for banking, insurance, and public procurement. QES is needed where national law requires written form and allows it to be replaced electronically, for example a consumer credit agreement in Germany. Some acts, such as many property transfers, need a notary whatever signature you use.
Does eIDAS provide mutual recognition across the EU?
Yes. Under Article 25(3), a qualified electronic signature based on a qualified certificate issued in one member state is recognised as a qualified signature in all the others. Simple electronic signatures are covered by Article 25(1): no court may deny them legal effect or admissibility merely because they are electronic, though national form requirements for particular documents still apply.
Does SigPDF comply with the eIDAS Regulation?
Yes. SigPDF creates Simple Electronic Signatures (SES), which satisfy the eIDAS definition under Article 3(10) and are protected by the non-discrimination principle of Article 25(1). SES is the appropriate level for the vast majority of everyday business documents across the EU.
Can I use a simple electronic signature for business contracts in the EU?
Yes. For most private-sector contracts, agreements, invoices, NDAs, and employment documents, a Simple Electronic Signature is legally sufficient throughout the EU. Only a small category of high-stakes legal acts requires Advanced or Qualified Electronic Signatures.
Does GDPR affect how I should sign documents?
GDPR applies to the processing of personal data. When you use cloud-based signing platforms, your document data is uploaded to third-party servers — raising potential GDPR concerns. SigPDF processes your PDF entirely in your browser, meaning no personal data in your documents is transmitted to or stored by SigPDF, which naturally minimizes GDPR data processing obligations.