Skip to main content
Certyneo
Banks, insurers, brokers, fintechs

Electronic signature for banking & insurance

Business account opening, mortgage credit files, insurance subscriptions, brokerage agreements, portfolio management mandates: dematerialize all acts signed by your establishment with eIDAS proof level. Compliant with DSP2 and DDA directives, the Monetary and Financial Code, the Insurance Code and KYC requirements.

Use cases in banking, insurance and fintech

All contractual acts of a bank, insurer or broker can be signed electronically, from initial KYC to the subscription of a life insurance contract.

Business account opening

Account agreement (art. L312-1-1 Monetary and Financial Code), dematerialized business KYC, signature of attached bylaws. Advanced signature recommended + RFC 3161 timestamp for DSP2 traceability.

Mortgage credit file

Loan offer (art. L313-14 Consumer Code), 10-day reflection period under Scrivener law precisely traceable, sequential signatures of borrower + co-borrowers + potential guarantor.

Insurance subscription

Life insurance contracts (art. L132-5-1 Insurance Code), disability insurance, business property insurance. 14-day withdrawal period (art. L112-2-1) timestamped, handwritten mention replaceable by advanced signature.

Brokerage agreement

Insurance or credit brokerage mandates (art. L519-1 Monetary and Financial Code for credit, L511-1 Insurance Code for insurance), with precise remuneration and reflection period.

Portfolio management mandate

AMF/ACPR mandates for discretionary management (art. D533-15 Monetary and Financial Code). Advanced signature + RFC 3161 timestamp, audit trail compliant with MIF II requirements.

Distance selling & customer portal

Distance subscriptions with 14-day withdrawal period (art. L222-7 Consumer Code for financial services), enhanced DSP2 identification procedure included.

Access to information and KYC

The entry into relationship and identity verification (KYC) file at the start of a business relationship (Articles L561-5 and L561-6 of the Monetary and Financial Code, LCB-FT obligations).

Mutual membership and provisioning

Membership of supplementary health insurance or collective pension contract (Article L221-2 of the Code of Mutual Insurance).

Why Certyneo for banking & insurance

Six guarantees specifically tailored to regulatory requirements of financial and insurance institutions.

PSD2-compliant strong authentication

Verification by an OTP code sent by SMS. The RFC 3161 timestamp, when obtained, and the SHA-256 hash guarantee integrity and non-repudiation.

Audit trail subject to regulatory opposition

Each envelope produces a signature certificate: OTP identity, IP, RFC 3161 timestamp, SHA-256 hash.

Hébergement UE & GDPR

TLS 1.3 encryption in transit, AES-256 at rest, strict data isolation. Fully EU-based hosting (IONOS), no subprocessing outside the EU. GDPR-compliant DPA included, compatible with banking data localisation requirements.

10 years of compliance

Archiving 10 years with probative value (Article L123-22 of the Commercial Code, Article R313-3 of the Consumer Code).

Conforme eIDAS — niveau avancé (AES)

Signatures compliant with Regulation (EU) No 910/2014, with all three levels available: simple (SES), advanced (AES) and qualified (QES). QES — the legal equivalent of a handwritten signature throughout the EU — is billed per act (€14.90/signature) for higher-stakes transactions and ACPR/AMF compliance.

The REST API + webhooks

Public REST API for native integration into your banking CRM or insurance platform. Webhooks for workflow control (envelope.signed, recipient.signed). Compatible with the major core banking and insurance SI.

Probative value in banking & insurance

The probative value of an electronic signature in finance hinges on three fronts: demonstrating strong customer authentication (DSP2 SCA), proving compliance with legal deadlines (Scrivener, waiver, withdrawal), and guaranteeing contract integrity in archived form in case of ACPR/AMF audit.

Certyneo delivers for each signature an audit certificate embedded in the PDF, which aggregates technical evidence:

  • Signatory identity (email + phone verified by OTP — DSP2 SCA compatible)
  • RFC 3161 timestamp of each action (sending, viewing, signing, refusal)
  • SHA-256 cryptographic fingerprint of the signed document
  • IP and rough geolocation of the signatory
  • Detailed log of reminders and notifications
  • Traceability of legal deadline (Scrivener reflection, withdrawal, waiver)

This body of evidence meets the requirements of Article 1366 of the Civil Code, the eIDAS regulation, and supervisory authorities (ACPR, AMF). In case of audit or client dispute, the audit trail constitutes direct admissible evidence.

DSP2, DDA, Monetary Code and eIDAS compliance

Certyneo operates within the legal framework applicable to banking, insurance, and fintech institutions.

DSP2 Directive (EU 2015/2366) — SCA

Strong customer authentication (SCA) requires two out of three elements: knowledge (password), possession (OTP phone), inherence (biometry). Certyneo natively covers knowledge + possession elements via OTP SMS and email.

DDA Directive (EU 2016/97) — insurance distribution

The insurance distribution directive mandates a documented pre-contractual information procedure (DIC IPID, duty of advice). Certyneo enables electronic signature of information elements with timestamped tracing of delivery to the client.

Monetary and Financial Code — art. L312-1-1 (account) & L313-14 (credit)

Article L312-1-1 mandates a written account agreement in advance; Article L313-14 governs mortgage loan offers with a 10-day reflection period. Certyneo precisely traces the moment of acceptance and expiration of the legal deadline.

Insurance Code — art. L132-5-1 & L112-2-1

Article L132-5-1 mandates a prior information note for life insurance; Article L112-2-1 sets a 14-day withdrawal period for distance selling. Certyneo''s advanced signature + RFC 3161 timestamp make these deadlines enforceable.

FINRA Rules 4511 & SEC Rule 17a-4(f) — broker-dealer recordkeeping

FINRA-registered broker-dealers must preserve communications and transactional records in a non-rewriteable, non-erasable format (WORM) for 3-6 years. Certyneo's qualified electronic seal plus immutable audit trail satisfies the 17a-4(f) preservation requirement; combined with our IONOS sovereign-EU archiving, US broker-dealers with European clients can demonstrate dual-regime compliance.

Dodd-Frank Act — derivatives & swap recordkeeping

Title VII of Dodd-Frank requires swap dealers to maintain electronic execution records reflecting the time, terms, and counterparties of every trade. Certyneo's timestamped envelope audit trail (RFC 3161 timestamps) provides the legally-binding execution evidence the CFTC and SEC require, and the EU residency of our infrastructure helps US firms avoid GDPR-conflict exposure when European counterparties sign electronically.

Sarbanes-Oxley Act (SOX) Sections 302 & 404

Publicly-traded companies must certify the effectiveness of internal controls over financial reporting. Electronic signatures on contracts, board resolutions, and 10-K certifications enter the SOX scope. Certyneo's signer-identity verification, document-tamper detection, and 10-year retention with evidentiary value support the documented control-environment SOX auditors evaluate.

NAIC Model Acts (e-signature, e-notary)

The National Association of Insurance Commissioners publishes model laws on electronic signatures, electronic delivery of insurance documents, and remote online notarisation (RON). Most US states have adopted some version, with Florida, Texas, and Virginia taking the lead. Certyneo's eIDAS-Advanced signature meets the multi-factor authentication and signer-presence requirements of NAIC RON model law where European clients underwrite US risks.

Electronic signature guide·Electronic signature guide for banking & insurance·eIDAS guide·Certyneo security·Free contract templates·Sign a KYC file / get in touch

Frequently asked questions by financial institutions

Can a pro account agreement be signed electronically?

Yes, without restriction. Article L312-1-1 of the Monetary and Financial Code requires a prior written agreement but does not prescribe any form. The advanced signature (AES) Certyneo meets the DSP2 requirements for strong customer authentication (SCA) while precisely timestamping the acceptance.

How do you meet the 10-day Scrivener cooling-off period on a mortgage?

Certyneo gives the precise date of the loan offer and the signature of the customer.The audit trail shows unequivocally that the 10-day period (Article L313-34 of the Consumer Code) was respected before the signature of the contract.

Does the electronic signature replace the handwritten statement in life insurance?

Yes, in the context of an advanced signature (AES) with such a trail. French case law recognises that an advanced electronic signature, accompanied by an audit trail demonstrating the customer's knowledge of the contractual elements, satisfies the requirements of Article L132-5-1 of the Insurance Code.

Is the 14-day withdrawal period open to challenge?

Yes. The RFC 3161 timestamp of the contract signature runs the withdrawal period of Article L112-2-1 of the Insurance Code or L222-7 of the Consumer Code (remote financial services). Certyneo traces this period and automatically notifies the expiry of this period.

Does Certyneo integrate with my banking CRM?

A public REST API is available with event webhooks (envelope.signed, recipient.signed, deadline.reached). Compatible with the main core banking (Sopra, Linedata, Murex) and SI insurance (Adelia, Cassiopae) via webhooks or polling.

Are customer data protected by banking GDPR?

Yes. TLS 1.3 + AES-256 encryption, strict isolation per institution, fully EU-based hosting (IONOS) with no subprocessing outside the EU. A GDPR-compliant DPA is available, including the clauses specific to banking secrecy (art. L511-33 of the French Monetary and Financial Code) and insurance confidentiality.

What should be done in the event of an ACPR or AMF audit?

The Certyneo audit trail is exported at any time in certified PDF. It documents the identity of the signatory, the RFC 3161 timestamp, the integrity of the document, compliance with legal deadlines. These elements are available to the supervisory authorities to demonstrate compliance with the duty to advise and pre-contractual information.

How much does an electronic signature cost for a financial institution?

A free plan allows testing on 5 envelopes for 14 days, then 2/mo. Beyond that, paid plans start at a rate compatible with the current opportunity cost of paper files. 10-year archiving, eIDAS trail audit and technical support are included.

Can we dematerialize the contact and the KYC?

Yes. KYC (know your customer) and AML/CFT obligations (art. L561-5 and L561-6 of the Monetary and Financial Code) do not require paper form. Certyneo enables signing the onboarding file with identification by SMS OTP code and an RFC 3161 timestamp, when obtained, that traces consent collection and supporting documents — enforceable in case of ACPR or TRACFIN audit.

Can a membership form for a mutual or pension scheme be signed online?

Yes. The membership of a supplementary healthcare or pension contract (Article L221-2 of the Code of Mutual Benefit) is signed electronically without any formal restriction. The advanced signature Certyneo identifies the member, the date of delivery of the information leaflet and traces the consent particularly suitable for collective agreements (ANI) where employees join en masse from their mobile.

Sign your banking and insurance documents online

Digitize your next account opening

Create your free account and test the Certyneo audit trail on a real KYC file. No credit card, no commitment.