E-signatures

Send a PDF for signature to one or more people, in order if you like, with approvers and people who get a copy. Signers need no Missived account: they open an emailed link, check they can read the document, agree to sign electronically, adopt a signature and are guided through each field. Everyone gets the signed PDF and a certificate with a tamper-evident record.

E-signatures are coming soon: they stay switched off on every plan while the signing wording is in legal review. This page says what they are for, what they aren't for, and how to check a signed copy. How the seal, the timestamp and the record work is on the public page, How Missived e-signatures work.

Missived e-signatures are simple electronic signatures with a full audit trail. They are not notarisation, witnessing or EU qualified signatures, and nothing here is legal advice: ask your lawyer when you're unsure whether a document can be signed electronically.

Documents e-signatures are not for

The US ESIGN Act (section 103) and state UETA laws leave some documents out, and some need a paper notice or an extra step that Missived doesn't provide. Don't send these for e-signature:

Other laws can add their own rules (for example, some state real-estate, lending or insurance rules). When in doubt, ask your adviser before sending.

Choosing an identity check

Every signer opens an emailed link, so the record shows they reached that inbox when the link arrived. A link opened on a second device asks for a six-digit code we email them.

For higher-stakes agreements (an IP transfer, a large commercial contract), tick Also ask for a code we email them in the envelope's settings. Each signer then enters a fresh six-digit code when they open the document to sign, which shows they had the inbox when they opened the document to sign, not only when the link arrived. The certificate records which check each signer passed.

Neither check proves who someone is the way a notary or an identity document does. If you need that, use a process built for it.

Checking the document before agreeing

The signing page opens the document first. The signer looks at it, checks they can open and read it, and only then can tick the box agreeing to use electronic records. The record notes that the document was shown on their device before they agreed. If they can't read it, they choose I'd rather not sign electronically and the sender is told.

Envelopes sent before this step was added keep the disclosure they were sent with.

Checking a signed copy

Open the signed PDF in Adobe Acrobat Reader: Signatures → the Missived document seal → Signature Properties → Validate Signature.

"Valid, but the signer's identity is unknown" is expected. Missived issues its own seal certificate, which isn't on Adobe's Approved Trust List, so Acrobat doesn't recognise the issuer. The seal still proves the file hasn't changed since it was sealed. Compare the certificate's fingerprint with the ones Missived publishes on the Verify page (the Verify link on any signed envelope), and don't mark the certificate as trusted just to hide the message.

Trusted timestamps. When the operator has set it up, a public timestamp authority (DigiCert on missived.com) also timestamps the seal. It receives only a SHA-256 fingerprint of the seal signature and a random number, never the document, names, email addresses or anything typed. If no timestamp was available, the document is still sealed and its certificate says so.

On the Verify page, your browser works out the PDF's SHA-256 fingerprint itself and sends only that, to check it matches a completed copy in our records.

Privacy warning: the European Commission's EU DSS demonstration validator also checks seals and timestamps, but it is an external service: uploading a file sends the entire PDF to their servers. Only use it with non-sensitive samples, or run the open-source DSS validator on your own computer for private documents.

Regulated industries

The signing disclosure Missived shows is written for general business use. If you work in a regulated industry (lending, insurance, healthcare, securities and others), you're responsible for checking it's adequate for your documents, for example where a law requires a particular consumer disclosure before electronic records are used, or for using your own disclosure process.

Keeping copies

A sent envelope stays in the sender's workspace for as long as the workspace exists: it can't be deleted, and it stays even if the sender or a signer closes their Missived account. Deleting the workspace deletes its envelopes, and everyone in it is told. Signers can download their copy behind an emailed code for 90 days.

Download the signed PDF and certificate and keep them with your own records. Some laws require you to keep signed records in a form you can reproduce later, and that duty is yours, not Missived's.