Electronic signature software

The starting point is more permissive than people expect. In the United States, the federal ESIGN Act and the state-level UETA establish that a signature may not be denied legal effect solely because it is electronic. In the EU and UK, the eIDAS Regulation does the same and adds a tiered structure. Most commercial and research contracting sits comfortably within these frameworks with an ordinary electronic signature.

What actually matters in a dispute is not the appearance of the signature but the evidence around it: that the signer intended to sign, that they consented to transact electronically, that the record has not been altered since, and that you can associate the signature with a specific person. This is why the audit trail is the substantive feature — timestamps, IP address, email verification, document hash, and the sequence of events. A pasted image of a handwritten signature has none of that and is much weaker evidence than a properly logged electronic one.

eIDAS distinguishes three levels. A simple electronic signature is the baseline and is what most platforms produce. An advanced signature (AdES) must be uniquely linked to the signer, capable of identifying them, created using means under their sole control, and detect any subsequent change. A qualified signature (QES) is an advanced signature made with a qualified device and a certificate from a qualified trust service provider, and it carries the same legal effect as a handwritten signature across the EU. Almost nothing a research office signs requires QES; a few member-state-specific formalities do, and those are worth checking individually rather than assuming either way.

Part 11 is the FDA's rule on electronic records and electronic signatures. It is invoked constantly in vendor marketing and applies far less often than that implies.

Part 11 applies to records required by an FDA predicate rule that are kept in electronic form, and to electronic signatures on such records. In practice that means regulated clinical trial documentation, manufacturing and laboratory records under GxP, and submissions to the agency. It does not apply to a subaward agreement between two universities, an MTA, an NDA, or an internal approval workflow — none of those are records required by an FDA predicate rule.

Where it does apply, the requirements go well beyond the signature: validation of the system for its intended use, secure computer-generated time-stamped audit trails, operational and authority checks, the ability to generate accurate and complete copies for inspection, record retention throughout the retention period, and controls over the signature components themselves. Crucially, compliance is a property of your validated implementation, not of the software. A vendor can supply Part 11-capable features; only your organisation can validate a system for its intended use and maintain it in a validated state.

The practical implication: if you are in Part 11 scope, you need a system your quality function has validated and documented, with the vendor documentation to support it — not a general-purpose e-signature subscription. If you are not in scope, do not buy a regulated system for contracting work; it is expensive and it will slow your office down. Sign.Plus does not advertise Part 11 support on its pricing page, and for general research-office contracting that is simply not the relevant question.

• How is it metered? Per-envelope pricing punishes exactly the months a research office is busiest. Unlimited-request plans remove the incentive to ration, which is a real behavioural effect and not just an accounting one.
• What is in the audit trail, and can you export it? You need to be able to hand a complete certificate of completion to a counterparty or an auditor without contacting the vendor.
• Where is data stored? If you are in the EU or UK, or signing with partners who are, data residency and the transfer mechanism will come up in your DPO review. Settle it before rollout.
• Do you need templates and bulk send? An office sending the same MTA form fifty times a year gets more value from templates than from any other feature.
• Does it integrate with where documents already live? A signature tool that requires manual download and re-upload adds a step to every transaction.
• What happens to documents if you stop paying? Ask directly about export and retention on cancellation. Signed agreements have retention periods measured in years, sometimes decades.
• Will counterparties need an account? Requiring external signers to register is a real source of delay.