Frequently asked questions

You need to be a DigiSign customer: we set up your own application and users. Write to us and we will get back to you with the next steps.

It usually takes us about an hour to prepare your application and give a first training on the platform.

It depends on the signing method the sender chose: a qualified electronic signature (cloud or smart card), a code by SMS or Viber with 1-Click-Sign, or a signature on a tablet in person. For a tablet signature you need nothing but access to the tablet. See the signing methods.

Yes. Through the API you send documents for signature and receive the signed ones without leaving your own system. See the API reference.

DigiSign is made by the IBS Bulgaria team and is part of the GURU platform.

Yes. Write to support@digisign.space or call +359 2 905 9080. The detailed manual is in the help centre.

There are many legal and practical definitions; the three types of signature under Regulation (EU) No 910/2014 are described on the signing methods page.

The difference is in how the signer’s identity is verified and how the integrity of the document is guaranteed. An electronic signature can be any electronic data associated with the document, while a digital signature uses cryptography for more security and verification.

Electronic signatures are tied to the validity of the certificate used for signing. The certificate, issued by a trust service provider, is valid for a set period and then has to be renewed. The signed document itself stays unchanged.

It is possible: one party signs a printout, the other scans it and signs electronically. But then you have two originals, one on paper and one electronic, and both are needed to prove the parties signed the same content.

If one party cannot sign electronically but you want all documents in electronic form, we recommend signing on a tablet. In DigiSign a request can go first to a tablet and then for a qualified signature. See tablet signing.

Yes. All Bulgarian signature providers also issue signatures to foreign citizens, and DigiSign can send a document for signature regardless of who issued the qualified signature.

The only change you can make to a signed PDF is adding more signatures. Any other change invalidates the signatures already in it.

There is no technical limit. Keep in mind that a document with many signatures opens more slowly, because the validity of each one is checked in real time.

No. A document is signed one after the other. DigiSign follows the order of signers you set.

By personal ID number, email or mobile phone: these are used to check that the recipient is registered with the provider.

Yes. Signed documents stay in DigiSign until you download or delete them. Documents that are no longer current can be moved to an archive. Everywhere you can filter by type, signing date, status and more. Documents signed with a cloud signature are also available in the provider’s mobile app.

Under Bulgarian law, yes. The employer may not refuse a paper document from an employee, and even where the parties agreed to exchange electronic statements, either side can withdraw that consent at any time.

DigiSign organises the signing. It can keep employment documents, but the rules for electronic employee files set further technical requirements. For employee files we recommend PROFILE.GURU: together with DigiSign it covers templates, documents generated with employee data, signing and storage.

Our primary data centre is Equinix IBX in Sofia, in the European Union. Backups are kept in a separate secure location. Details are on the Security page.

All documents are stored encrypted with AES 256, and data between browser and servers is encrypted in transit. Access can be set up with two-factor authentication, depending on the customer’s infrastructure.

ISO/IEC 27017 is the standard for security controls in cloud services. It extends ISO/IEC 27001, so we still have one certificate, and its scope now covers the DigiSign cloud services too.

For you it is independent confirmation that we run the cloud services under internationally recognised rules. When your security team or auditors review your suppliers, the certificate answers many of their questions.

Yes. All user actions are recorded in a separate database (audit log) with strict access control. For each signature request you can see how far it has got and who has signed.

All data is deleted, with a record of the deletion, immediately after the service ends.

The ISO/IEC 27001 (with ISO/IEC 27017 scope), ISO/IEC 27701, ISO 22301, ISO/IEC 20000-1 and ISO 9001 certificates, a data processing agreement (DPA), the list of subprocessors and answers to a security questionnaire. Write to us.

You pay a one-time setup fee for your application and prepaid signature packages, from €0.025 per signature excl. VAT. The number of users does not affect the price. See pricing.

Not necessarily. With the prepaid packages, a cloud qualified signature from B-Trust or Evrotrust is issued free of charge. 1-Click-Sign and tablet signatures need no qualified signature.