IN · Information Technology Act, 2000 (Section 2(1)(ta))

Electronic Signatures in India — IT Act Compliance

India's Information Technology Act, 2000 (amended in 2008) provides the legal framework for electronic signatures in India. Section 2(1)(ta) defines electronic signatures, and Section 5 grants them legal validity equivalent to handwritten signatures when the requirements are met.

Information Technology Act, 2000 (Section 2(1)(ta))

India · Enacted 2000 (amended 2008)

Key Provisions

Section 5 grants electronic signatures the same legal validity as handwritten signatures

2008 amendment broadened scope from 'digital signatures' to 'electronic signatures'

Electronic signature must be reliable and linked uniquely to the signatory

Signature creation data must be under sole control of the signatory

Any alteration to the document or signature after signing must be detectable

Applies to all contracts and documents except those specified in the First Schedule

India's Information Technology Act, 2000 (amended in 2008) provides the legal framework for electronic signatures in India. Section 2(1)(ta) defines electronic signatures, and Section 5 grants them legal validity equivalent to handwritten signatures when the requirements are met. The 2008 amendment expanded the definition from 'digital signatures' to 'electronic signatures,' recognizing a broader range of authentication technologies. For an electronic signature to be valid under the IT Act, it must be reliable, linked to the signatory, and capable of identifying them. The signature creation data must be under the sole control of the signatory, and any alteration after signing must be detectable. SignForge meets all of these requirements through its consent-based workflow, signer identification via email and metadata, ECDSA cryptographic verification, and SHA-256 document hashing.

Compliance Verified

How SignForge meets Information Technology Act, 2000 requirements

Signer identified via email, IP address, and user-agent — uniquely linked to signatory

Sole control via unique cryptographic token sent only to signer's email address

SHA-256 hashing detects any post-signing document alteration

ECDSA P-256 cryptographic signatures provide mathematical proof of integrity

Full audit trail with timestamps, IP addresses, and device information

QR code verification allows any party to confirm document authenticity

256-bit Encryption

TLS 1.3 + SHA-256

ECDSA P-256

Cryptographic proof

Audit Trail

Append-only, immutable

ISO 27001

Certified infrastructure

Frequently asked questions

Are electronic signatures legally valid in India?

Yes. Under Section 5 of the Information Technology Act, 2000, electronic signatures have the same legal validity as handwritten signatures, provided they meet the requirements for reliability, signer identification, sole control, and tamper detection.

What documents can be signed electronically in India?

Most commercial and business documents can be signed electronically, including contracts, NDAs, agreements, and invoices. Documents excluded under the First Schedule include negotiable instruments, powers of attorney, trusts, and wills.

Does SignForge work for Indian businesses?

Yes. SignForge's workflow meets all IT Act requirements: signer identification (email + metadata), sole control (unique cryptographic tokens), tamper detection (SHA-256 hashing), and a complete audit trail. The platform is accessible from India with no restrictions.

Ready to sign with confidence?

Legally binding e-signatures with 256-bit encryption, cryptographic verification, and an immutable audit trail. Free forever.

Get started free

No credit card required.