An audit trail is the backbone of any legally enforceable electronic signature. It provides a chronological record of every action taken during the signing process — who viewed the document, when they signed, from what IP address, and on what device.
Global · Enacted 1999–present
Records every action: creation, viewing, signing, completion, voiding, and downloading
Captures signer metadata: IP address, user-agent string, exact timestamp
Append-only storage: no user or process can modify or delete audit events
Audit certificate PDF generated for every completed envelope
Document integrity verified via SHA-256 hash comparison at each stage
Serves as primary evidence in legal disputes over signature validity
An audit trail is the backbone of any legally enforceable electronic signature. It provides a chronological record of every action taken during the signing process — who viewed the document, when they signed, from what IP address, and on what device. In legal disputes, the audit trail is often the deciding factor. SignForge maintains an append-only audit trail that cannot be modified or deleted by any user, administrator, or system process. This is enforced at the application code level — there are no UPDATE or DELETE operations on the audit events table. Every signed envelope generates a downloadable audit certificate PDF that includes the complete event history, document hashes, signer information, and verification codes. This certificate serves as self-contained evidence of the signing ceremony.
These are the facts we capture and store for every signature. Required by ESIGN, UETA, eIDAS, and 60+ national laws sets the requirements above — whether what we record satisfies them for a given transaction is a legal question that depends on the circumstances.
11 distinct event types tracked: from envelope_created to envelope_expired
Every event records: actor type, actor email, IP address, user-agent, timestamp, and metadata
Application code enforces insert-only policy — no UPDATE or DELETE on audit_events table
Audit certificate PDF includes complete event timeline, document hashes, and signer details
SHA-256 hash of final signed PDF embedded in certificate for cross-verification
Verification records with ECDSA signatures survive even if documents are deleted
TLS 1.3 + SHA-256
Cryptographic proof
Append-only, immutable
Certified infrastructure
Every audit event records: the action type (viewed, signed, completed, etc.), actor type (sender, recipient, or system), actor email, IP address, user-agent string (browser and OS), exact timestamp, and additional metadata. The audit trail is append-only and cannot be modified.
Yes. Once all recipients have signed, SignForge generates an audit certificate PDF that you can download. It includes the complete event timeline, document SHA-256 hashes, signer information, and a verification code with QR link.
Yes. Courts in the US, EU, and globally accept e-signature audit trails as evidence. SignForge's audit trail often provides stronger evidence than a handwritten signature because it includes exact timestamps, IP addresses, device information, and cryptographic integrity proofs.
General information — not legal advice
This page summarizes electronic signature legislation drawn from primary legal sources and international bodies including UNCITRAL and UNCTAD. It is not legal advice and creates no solicitor–client or attorney–client relationship. Laws change, and how they apply depends on the transaction, the parties, and the document type. Before relying on electronic signatures for a regulated, high-value, or cross-border transaction — or for any document type listed as excluded — take advice from qualified counsel in the jurisdiction whose law governs that transaction. That is a separate question from the governing law of your agreement with SignForge, which is set out in our Terms of Service.
Last reviewed: 10 August 2026
Legally binding e-signatures with 256-bit encryption, cryptographic verification, and an immutable audit trail. Free forever.
Get started freeNo credit card required.