Skip to content
Independently verified · Quarterly re-audit
EU VETTED
Category 17 of 22

E-signature

In short

E-signature platforms process signed contracts, identity verification data, and in some cases qualified certificate credentials. For EU buyers, eIDAS compliance determines legal validity across the EU, and operator jurisdiction determines data sovereignty. Top-rated EU options on EU Vetted include Universign (France, 5/5), Skribble (Switzerland, 5/5), and Signaturit/Namirial (Spain, 5/5).

E-signature platforms are the digital infrastructure for binding agreements: they route contract documents to signers, capture legally attributable electronic signatures, and retain signed documents with their accompanying audit trails as legal evidence. The category spans simple click-through consent tools, advanced electronic signature (AdES) platforms used for most commercial contracts, and qualified electronic signature (QES) services backed by accredited Trust Service Providers — the latter being legally equivalent to a handwritten signature across all EU member states under eIDAS.

For EU buyers, e-signature is a high-stakes category on two dimensions. First, legal validity: for contracts to be enforceable and courts to recognise them, the signature level must match the requirement — and for regulated transactions, QES from a qualified Trust Service Provider is mandatory. Second, data sovereignty: signed contract documents, counterparty identity data, and biometric or ID-verification records are some of the most legally sensitive data an organisation processes. If the platform operator is a US-incorporated entity, the CLOUD Act can in principle compel production of those records regardless of storage location. EU-owned operators such as Universign (France, 5/5) and Signaturit/Namirial (Spain, 5/5) are not subject to that direct exposure. Swiss-based Skribble (5/5) offers QES under Swiss ZertES, and its non-US corporate structure provides a comparable level of sovereignty protection. Yousign (France, 4/5) is EU-headquartered but carries a US-funding signal that buyers should evaluate. Eversign/Xodo Sign (Austria/US, 3/5) reflects US corporate ownership despite Austrian operations.

The listings below show each product's country of incorporation, ownership signal, supported eIDAS signature levels, and EU Vetted's editorial compliance score on a 1–5 scale. Use the filters to separate QES-capable platforms from those offering AdES or SES only, or to narrow by ownership signal according to your sovereignty requirements.

FAQ

Frequently asked questions

What is the best EU-hosted e-signature platform?
On EU Vetted's editorial compliance score, Universign (France) and Signaturit/Namirial (Spain) reach 5/5 as EU-owned and EU-hosted options with eIDAS-compliant signature levels. Skribble (Switzerland, 5/5) is non-EU but operates under Swiss law and offers qualified electronic signatures under the Swiss ZertES standard, with cross-recognition to eIDAS through bilateral arrangements. Yousign (France, 4/5) is a widely used EU alternative with a strong track record in the SMB market.
Is there a GDPR-compliant e-signature tool?
Any e-signature platform operated by an EU-incorporated company with EU-only infrastructure and a published DPA qualifies as GDPR-compliant in its processing role. Universign (France), Signaturit/Namirial (Spain), and Yousign (France) all publish DPAs. E-signature platforms process identity data and signed document content, making them a high-priority category for data-processing impact assessments. Compliance is an assessment of practices, not a guarantee; review each vendor's DPA against your document types and signer data.
Does e-signature data fall under the US CLOUD Act?
E-signature platforms retain signed contract documents, signer identity data (name, email, and sometimes biometric or ID-verification data), and audit trails. If the platform is operated or ultimately owned by a US-incorporated company, the CLOUD Act can in principle compel production of those records. EU-owned operators such as Universign (France) and Signaturit/Namirial (Spain) are not subject to that direct exposure. This is particularly relevant for contracts involving trade secrets, M&A activity, or regulatory filings.
What does eIDAS mean for e-signature platforms?
eIDAS (Electronic Identification, Authentication and Trust Services) is the EU regulation that defines three legally recognised signature levels: Simple Electronic Signature (SES), Advanced Electronic Signature (AdES), and Qualified Electronic Signature (QES). A QES has the same legal effect as a handwritten signature across all EU member states and is the standard required for land registry transactions, notarised documents, and certain regulated financial agreements. Universign and Signaturit/Namirial both offer QES. Skribble offers QES under the Swiss ZertES standard.
What is the difference between a simple, advanced, and qualified electronic signature?
A Simple Electronic Signature (SES) is any electronic mark indicating consent — a typed name or an image of a signature. An Advanced Electronic Signature (AdES) is linked to the signer's identity through a certificate and detects post-signing tampering. A Qualified Electronic Signature (QES) requires a Qualified Trust Service Provider (QTSP) and a secure signing device; it has the highest legal standing under eIDAS and is equivalent to a handwritten signature in all EU countries. Most B2B contracts require AdES or QES for court-admissible evidence; some regulated industries require QES specifically.
Is DocuSign or Adobe Sign safe to use for EU contracts?
DocuSign and Adobe Sign are both US-incorporated companies. Signed contracts and identity data processed through their platforms fall within CLOUD Act reach, regardless of where data is physically stored. Both offer EU data residency options as add-ons on enterprise plans, but data residency does not remove CLOUD Act exposure since it is the corporate structure, not the storage location, that matters for CLOUD Act purposes. EU buyers with strict sovereignty or sector-specific compliance requirements are better served by EU-incorporated alternatives.
What about Yousign — is it fully EU-owned?
Yousign is a French company with strong EU market presence and receives a 4/5 on EU Vetted's editorial compliance score. Its ownership signal is eu_hq_us_funded, meaning it has received US investment, which can introduce potential CLOUD Act exposure at the parent-group level depending on corporate structure. For buyers whose requirement is strict EU sovereignty without any US investment linkage, Universign (France, 5/5) or Signaturit/Namirial (Spain, 5/5) are higher-scoring alternatives. For buyers whose primary concern is eIDAS compliance and GDPR-compliant processing rather than sovereign ownership, Yousign is a solid and widely used option.