Level 2 · Advanced electronic signature

Advanced electronic signatures for contracts that hold up

The signer verifies their identity with a one-time code by text message or email, can draw their signature on screen, and the document is sealed so that any later change invalidates it. It is the level most contracts call for.

What it is and why it is the standard for contracts

An advanced electronic signature is one that is uniquely linked to the signer, capable of identifying them, created using means under their sole control and able to detect any later change to the document; in KimoSign the signer verifies their identity with a one-time code by text message or email, can add their handwritten stroke, and the document is sealed with a time stamp and a cryptographic fingerprint, which makes it suitable for the vast majority of contracts.

Content reviewed on 17 October 2026

Legal requirements: Art. 26 of the eIDAS Regulation Unique link, identification, sole control and change detection
Identification in KimoSign: One-time PIN by text message or email Sent to the signer's verified contact details
Integrity: SHA-256 fingerprint of the document Any later change invalidates the signature
Time stamp: Included with every signature A qualified one enjoys a presumption of accuracy (Art. 41(2) eIDAS)
Legal effect: Full Art. 25(1): cannot be denied because the signature is electronic

PIN by text or email

One-time code sent to the signer's phone or inbox before signing.

Digital handwritten signature

The signer draws their signature on the touchscreen and the stroke is bound to the document.

Time stamp

Reliable date and time for every signature, issued by a trust service provider.

Guaranteed integrity

Cryptographic fingerprint of the document: if it changes, the signature no longer validates.

Multiple signers

In the order you set, with automatic reminders to anyone running late.

Optional blockchain

The fingerprint is anchored to a public blockchain for independent verification.

When to use it

Documents with legal or financial value

Service agreements and framework contracts
Employment contracts, addenda and agreements with staff
Non-disclosure agreements (NDAs)
Orders, accepted quotes and specific terms
Authorizations and consents with significant impact
Banking and financing documents that allow it

How it works

Advanced signature with SMS PIN, step by step

The signer does not need to install anything or hold a certificate. What identifies them is something only they have: their phone or their inbox.

1 The document is preparedUpload the PDF or let your system generate it, with signers, phone numbers and signing order.
2 The secure link arrivesBy email or text message, to the previously verified contact details.
3 The signer authenticatesThey enter the one-time code received on their phone or by email.
4 They signThey confirm the signature and, if configured, draw their stroke on screen.
5 It is sealedCryptographic fingerprint, time stamp and, optionally, blockchain anchoring.
6 A copy for everyoneEach party receives the signed document and the evidence file is archived.

In context

Where advanced stands against the other levels

Comparison of simple, advanced and qualified electronic signatures under the eIDAS Regulation
Feature	Level 1 Simple	Level 2 Advanced	Level 3 Qualified
Security level	Basic	High	Highest
Signer identification	Not required: a click, a checkbox or an email confirmation is enough	Mandatory: one-time PIN by text message or email, handwritten stroke on screen	Qualified certificate issued by a trust service provider that has verified the signer's identity
Document integrity	Does not, on its own, guarantee the document stays unchanged	Any later change invalidates the signature	Any change invalidates it, backed by a qualified device and certificate
Evidence recorded	Date, time, IP address and email	Plus authentication method, time stamp and document fingerprint	Plus certificate data and a qualified time stamp
Legal value (eIDAS)	Valid; its weight as evidence depends on the audit trail	Valid, and carries considerable weight if challenged	Same legal effect as a handwritten signature throughout the EU
Typical uses	Terms of service, forms, internal policies	Commercial and employment contracts, NDAs, authorizations	High-value transactions, financial agreements, procedures that require a qualified signature

Typical scenarios

Contracts that used to travel in envelopes

Law firm

Engagement letter signed remotely

Before The service agreement was emailed, the client printed it, signed it, scanned it and sent it back. Often a page was missing.

After The client receives the link on their phone, enters the PIN sent by text message and signs. The firm has the sealed contract and the evidence file within minutes.

Distribution · suppliers

NDAs ahead of a tender

Before Each supplier returned the hand-signed NDA in its own format. Checking that everyone had signed took days.

After One request with a signer per supplier and automatic reminders. The dashboard shows who has signed and who is still pending.

Installations · field service

Customer sign-off when the job is done

Before The customer signed with a finger in an app that only stored an image of the stroke. When a complaint came in, that image proved little.

After Signing on the technician's tablet with the stroke bound to the document, time stamp, location and fingerprint. The sign-off is fully documented.

Vocabulary

Advanced signature terms

One-time password (OTP): A numeric code sent to the signer's phone or email that expires within minutes and works for a single operation only. It shows that the person signing controls that channel.
Digital handwritten signature: A stroke the signer draws with a finger or stylus on a touchscreen, captured and bound to the signed document as an additional piece of evidence.
Sole control: A requirement of Art. 26 eIDAS: the electronic signature creation data must be under the signer's control with a high level of confidence, such as their phone or personal inbox.
Cryptographic fingerprint (hash): A fixed-length digest calculated from the document. Changing a single character produces a completely different fingerprint, which makes any alteration detectable.

Frequently asked questions

What people ask us before they start

Which legal requirements does it meet?

The four in Article 26 of the eIDAS Regulation: it is uniquely linked to the signer, capable of identifying them, created using means under their sole control (their phone or their inbox), and linked to the document so that any subsequent change is detectable.

Will it stand up in court?

Yes. It has full legal effect and, if anyone challenges it, the evidence file proves the identification, the timing and the integrity of the document. It is the usual level for commercial and employment contracts.

What happens if the document is changed after signing?

Signature verification fails. The cryptographic fingerprint of the signed document no longer matches, and the tampering is exposed.

Do signers have to draw their signature?

No. The handwritten stroke is an additional piece of evidence that many signers like; identification comes from the one-time code.

Can several people sign?

Yes, in the order you set. Each signer receives the document when it is their turn, and the system sends reminders to anyone who has not signed.

What if the signer has no mobile phone?

The code can be sent by email. They can also sign in person on a tablet, with the stroke captured on screen.

Sign a real contract with an SMS PIN in the demo

We will show you how to sign a real document at the level you need, in half an hour.

Request a demo

Keep exploring

Advanced electronic signature with SMS PIN and time stamp

KimoSign's advanced electronic signature meets the requirements of Article 26 of the eIDAS Regulation: signer identification with an SMS PIN or email, a digital handwritten signature on a touchscreen, a time stamp and protection of the document's integrity.

It is the recommended level for commercial and employment contracts, NDAs and authorizations, with several signers in sequence, automatic reminders and an evidence file containing the IP address, location, authentication method and document fingerprint.