Question 1

Are DocuSign e-signatures legally valid in the EU?

Accepted Answer

DocuSign's simple electronic signatures are generally accepted in the EU, but they do not carry the same legal weight as qualified electronic signatures (QES) under the eIDAS regulation. QES, which several European e-signature platforms support, has the legal equivalent of a handwritten signature across all EU member states. Beyond legal validity, the GDPR concern with DocuSign is that your signed documents are stored on US infrastructure. Contract documents containing personal data such as names, addresses, salary terms, and identification numbers are processed under US jurisdiction. European platforms offer both eIDAS-compliant signature levels and EU-only document storage.

Question 2

What personal data is contained in a typical signed document?

Accepted Answer

Signed documents are rich in personal data. Employment contracts contain names, addresses, salary details, and tax numbers. Sales agreements include company contact details and financial terms. NDAs identify the parties and may reference specific individuals. Medical consent forms contain health information. Beyond the document content itself, e-signature platforms also process metadata: IP addresses of signers, device information, timestamps, email addresses for signing invitations, and geographic location data for audit trails. All of this constitutes personal data under GDPR and must be stored with appropriate safeguards.

Question 3

What is the difference between simple, advanced, and qualified electronic signatures under eIDAS?

Accepted Answer

eIDAS defines three levels of electronic signature. Simple Electronic Signatures (SES) include any electronic indication of agreement, such as a typed name or a drawn signature on a touchscreen. Advanced Electronic Signatures (AES) are uniquely linked to the signer and capable of identifying them, created using data under the signer's sole control. Qualified Electronic Signatures (QES) are the highest level, created using a qualified signature creation device and based on a qualified certificate issued by a trusted EU authority. QES has the legal equivalent of a handwritten signature across the EU. European e-signature platforms often support all three levels, while US-based platforms typically only offer SES.

GDPR-Compliant Document Signing

GDPR Compliance Checklist

Compliant Products (5)

Yousign

Skribble

SignRequest

Smallpdf

PDF24

What Makes a Document Signing GDPR Compliant?

Get Started

Yousign

Skribble

SignRequest

Smallpdf

PDF24

Looking for Alternatives?

Where These Products Host Data

Other GDPR-Compliant Categories

Related Pages