pagestays

Signing and security

Electronic and digital PDF signatures

Last checked:

In this document

An electronic signature describes a broad signing concept. A digital signature uses cryptography to bind signing evidence to document data. A visible signature image alone does not provide that cryptographic protection.

The distinction that matters

The US ESIGN Act says a signature or record cannot be denied legal effect solely because it is electronic, while preserving other requirements and setting conditions for particular transactions. That rule does not mean every pasted image satisfies every signing requirement. Consent, attribution, record retention, and the kind of transaction can still matter. The linked statute is the source, not a promise about an individual document.

The European Commission's eSignature guidance distinguishes electronic, advanced electronic, and qualified electronic signatures under eIDAS. It explains that a qualified electronic signature has the equivalent legal effect of a handwritten signature across EU member states. It also explains that other electronic signatures cannot be rejected solely for being electronic. Those statements describe different levels of assurance and legal treatment, not interchangeable product labels.

A PDF digital signature can make changes detectable through validation. The viewer checks the signed data, certificate information, and the applicable trust context. A picture of a signature does not do this. Conversely, a cryptographic signature need not be represented by an elaborate visual stamp. Assess the evidence and process, not the decoration.

Pagestays adds a local visible mark. Use it when that is the requested workflow. For a certificate signature, identity verification, a qualified signing service, or a regulated transaction, choose a service that actually provides the required process. This article explains terminology and cited rules; it is not legal advice.

Electronic and digital PDF signatures: practical decision table
SituationWhat it meansUseful next step
Visible signature imageA mark drawn on the pageInspect position and recipient acceptance
Digital PDF signatureCryptographic relationship to document dataValidate the signature and trust context
Qualified electronic signatureSpecific eIDAS assurance categoryUse a qualifying service and required process

A worked example

For an illustrative club permission form, the recipient might request a handwritten-looking mark and a printed name. For a procurement agreement, the receiving organization might instead specify a certificate-based signing service and a retained audit record. Both requests can involve an electronic document, but the acceptance tests differ. Ask which process is required before editing. If you only add an image in Pagestays, describe it as a visible signature, not as a validated digital signature.

Distinguish a visible mark from signing evidence

A signature can refer to a visible mark, an electronic signing process, or a cryptographic object tied to document data. Those are related ideas, but they do not provide the same evidence. A drawn image can show where a person intends to sign while saying little by itself about identity verification, consent collection, or changes made after signing.

Ask the recipient which workflow they require before preparing the file. Some accept a visible signature on an informal form. Others require a specific service, a certificate, an audit trail, or a qualified signing process. A tool should not decide that requirement merely because it has a button labeled Sign. The appearance of the mark does not establish the strength of the underlying process.

Finish ordinary edits before applying a final digital signature. A signed document may restrict which later changes are permitted, and a transformation can affect validation. Combining signed pages into a new PDF should not be assumed to carry the original signatures into the new document. Keep the signed original available for verification.

When using a visible mark, inspect its placement, scale, and surrounding content in the saved copy. Avoid covering the printed name, date, or substantive text. Pagestays adds a drawn, typed, or uploaded image locally. It does not send signature requests, verify the signer, issue certificates, or provide a signing audit trail. These are product boundaries, not a judgment that a particular document will or will not be legally effective.

Keep a source and a delivery copy

The original and the deliverable have different jobs. The original is a reference you can return to when a setting turns out to be wrong. The deliverable is the copy prepared for a particular recipient, format, or size constraint. Giving them different names prevents a successful-looking conversion from becoming an accidental overwrite of your only useful source.

Start by opening the original and identifying the features that matter. A plain scan may need only readable pixels, while an application form may need editable fields and a report may need working links. Write the required properties down before choosing a transformation. This makes the final inspection a comparison against a requirement rather than a general impression that the document looks fine.

After saving, close the preview of the edited result and open the downloaded file. That small separation matters: a tool can display an intermediate state that is not identical to the file it exported. Check the filename and destination so you know which copy you are inspecting. If the result is intended for someone else, use the viewer or delivery channel they are likely to use when practical.

Keep useful intermediate copies when a job involves several operations. If a merge is correct but a later image conversion is too soft, restart from the merged PDF rather than reconstructing the whole sequence. Do not treat a smaller byte count, a completed progress bar, or a successful download as proof that all document features survived.

Check more than the visible page

A PDF can carry a visual page and a separate structure for interaction and interpretation. Links, bookmarks, form widgets, tags, and document metadata do not all live in the same place as the text and images you see. An operation that copies or redraws page content can produce a convincing picture while leaving some of those other features behind.

Decide which features are part of the acceptance test. If readers need to follow a contents page, try its links. If a form must remain editable, change a value in a copy and save it. If assistive technology is part of the workflow, inspect reading order and structure rather than relying on visual appearance. A successful visual comparison does not establish accessibility conformance.

Page assembly deserves particular care because document-level information can depend on the original sequence. A bookmark can target an old page location, a printed cross-reference can become misleading, and a tagged reading order may no longer describe the merged packet. Keep a source document available and test the elements that readers actually use.

When a conversion intentionally removes interactivity, describe that choice to the recipient. An image export is useful for a slide or a visual reference, but it is a poor replacement for a form that needs further editing. The right output is defined by its purpose. Do not preserve a feature merely for its own sake, but do not discard one without recognizing what the next person needs to do.

Separate processing from storage and delivery

Local processing describes where a document operation happens. It does not describe every later place the file can go. A browser can save its result into a folder synchronized by a separate storage service. An email client can upload an attachment when you send it. A shared workstation can retain downloaded files after the editing tab has closed.

Choose the storage location deliberately. If a task requires a local copy, check the destination used by the browser and whether that folder is synchronized. If the file is meant to be shared, decide whether an attachment or an access-controlled link is appropriate. Those choices should follow the recipient's needs and any applicable organizational rules, not the editor's marketing language.

A hosted link is a separate workflow with its own questions. Confirm who can open it, whether forwarding the link grants access, whether it expires, and whether the recipient can retain a copy. A smaller message containing a link may solve an attachment limit while creating an access problem for the person receiving it.

For Pagestays, document contents and file names stay in the processing tab. The site still downloads code and supporting assets to run the tools. The optional email waitlist is a separate request and does not include a PDF. Keep these distinctions precise: local editing is a meaningful property, but it is not a promise about your browser extensions, your operating system, or a storage provider you choose afterward.

Put the distinction to work

Open the related local tool when its supported operation matches your task. Read the limits beside the controls, make a separate output, and check it against the requirements described above. For a sequence of PDF operations, the workspace lets you carry a PDF result into the next edit.

Good to know

Does Pagestays create a digital certificate?

No. The signing tool embeds a visible image generated from typing, drawing, or an uploaded image.

Can I merge a digitally signed PDF?

Keep the signed original. A newly assembled document should not be assumed to retain the original cryptographic validation.

Is a typed name always legally sufficient?

No universal answer follows from the appearance alone. Requirements depend on the transaction, process, recipient, and applicable law.