Strong authentication, passport identification, and light signature in EpicSign

In EpicSign, you can choose the identification method that suits the risk level of the agreement and the signer's location. In Finland, strong authentication is available with bank IDs and mobile certificates. Internationally, passport identification and light signature with email confirmation are available. The service supports 16 languages, and the signature process works in a browser without complex implementation.

What does this mean in practice?

The same service works for both domestic and international agreements. In Finland, strong authentication provides the highest current level of assurance. When the signer does not have a Finnish identification method, passport identification and light signature are available. Passport identification, identity document verification, and light signature work internationally, anywhere in the world, even in cross-border situations.

Signature levels in EpicSign

The EU eIDAS regulations divide electronic signatures into three levels: electronic signature (SES), advanced electronic signature (AES), and qualified electronic signature (QES). The higher the level, the stronger the connection to the signer and the stronger the technical evidence.

1. Strong authentication

Strong authentication means using bank IDs and mobile certificates. According to the Digital and Population Data Services Agency (DVV), a signature made with bank IDs or mobile certificates is an advanced electronic signature (AES). This makes strong authentication EpicSign's strongest publicly described signature method in Finland currently.

2. Passport identification

Passport identification is an NFC or non-NFC based international identification that works with most passports and identity documents. Signatures made with passport identification in EpicSign are AES-level electronic signatures. Passport identification functions as a method to identify the signer and bind the signature to the document in a way that detects subsequent changes.

3. Light Signature with Email Confirmation

A light signature is a handwritten signature with email confirmation. This essentially falls under the SES level: the signer expresses their approval electronically, but it is not at the AES/QES level. According to sources from the EU Commission and DVV, a regular electronic signature can be, for example, a name written in an email, but its evidentiary value is weaker than an advanced or qualified signature.

Evidentiary Value in EpicSign

Evidentiary value does not arise simply from a signature appearing on a document. The essential part is what can be demonstrated afterwards. EpicSign records an audit log, locks the signed document as unchangeable, provides a public status check with a unique identifier, and supports an optional eIDAS seal. According to EU and DVV sources, this information is crucial when assessing the technical validity, integrity, and legal standing of a signature. A PDF signed with EpicSign displays a document verification link and a separate SIGNATURES page at the end. This page shows the document ID, signer names and IDs, timestamps, the authentication method used, and any handwritten signature.

Which Method is Suitable for What?

Strong authentication is suitable for situations where the signer is in Finland and the identity needs to be verified as strongly as possible. Typical uses include employment contracts, commissions, procurement agreements, and other important business contracts. Passport identification is suitable for international agreements when the signer does not have a Finnish strong authentication tool, but a stronger identity verification than email confirmation is necessary. Light signature with email confirmation is suitable for lower-risk approvals and contracts where speed, ease, and the ability to sign anywhere are most important. According to EU sources, even a regular electronic signature can be validly used as evidence, although its evidentiary value is weaker than AES or QES.

Deployment in EpicSign

Getting started is quick. Register, upload your document, add signers, and send the invitation. The signer does not need their own user account; they receive a link via email, authenticate using the selected method, and sign in their browser. Supported formats include .docx, .xlsx, .pptx, .pdf, .jpg, and .png, among others. Files other than PDFs are automatically converted before signing.

Summary

The simple rule is this: use strong authentication when the signer is in Finland and you need strong identity verification. Use passport identification when the signer is outside Finland and you want stronger verification than email confirmation. Use a light signature when fluidity and low friction are most important. In all cases, the evidentiary value is improved by the audit log, document locking, status check, and, if necessary, an eIDAS seal.

Sources

This article is general in nature and does not constitute legal advice.