Identity of the signatory and digital proof

The heart of the problem

The heart of the problemAn electronic signature only has value if it can be provenwho

signed it. A simple click on "I agree" does not say anything reliable about the identity.

Identification techniques

Trusted emailUnique link sent. Only the box holder can click. Basis of thesimple signature (SES)

.

OTP via SMSOne-time use code sent to the number. Combined with email, it is theadvanced signature (AES)

standard.

Video KYC

Verification by videoconference: identity document, liveness test, OCR. Used for QES and regulated sectors.

Qualified certificatePersonal cryptographic certificate issued by a QTSP. Highest level, required for thePersonal cryptographic certificate issued by a QTSP. Highest level, required for the

QES ⬥⬥⬥.

National digital identity

FranceConnect+, itsme (Belgium), SPID (Italy). EUDIW wallets will extend this option.

Levels of Assurance (LoA)

• eIDAS defines three levels:Low ⬥⬥⬥: single email → SES
• Substantial ⬥⬥⬥: double factor → AESHigh ⬥⬥⬥: strict verification → QES
• GDPR issuesIdentification collects personal data. The GDPR requires:

Minimization (collect only what is necessary)

Documented retention period

• Right of access and erasure
• Legal basis (execution of the contract, article 6.1.b)
• Biometric data (video KYC) is sensitive — explicit consent required.
• KYC and regulated sectors

Banks, insurance, crypto, real estate brokers are subject to AML-FT. KYC requires:

Banks, insurance, crypto, real estate brokers are subject to AML-FT. KYC requires:

Verification of identity document with OCR

• Liveness test (dynamic selfie)
• Cross-checking with sanctions bases (PEP, OFAC)
• Sometimes human operator by video
• Errors to avoid

Rely on email alone for sensitive contracts

• Store identity documents indefinitely
• Do not document the legal basis
• Collect more than necessary
• Use case: opening a neo-bank account

Entering information (name, address, profession)

1. Upload document identity + proof of address
2. Liveness test: dynamic selfie
3. Signature of the contract in AES with OTP SMS
4. In 10 minutes, account opened with "substantial" identification admissible by the ACPR.

How Certyneo helps you

Certyneo natively offers email identification + OTP SMS (AES). For cases that require enhanced KYC, video KYC integration is available: document verification, liveness test, sanctions cross-checking.

Certyneo natively offers email identification + OTP SMS (AES). For cases that require enhanced KYC, video KYC integration is available: document verification, liveness test, sanctions cross-checking.

KYC data is hosted in the EU, encrypted, with durations documented in accordance with the GDPR.

Discover the Certyneo electronic signature solution

FAQ

Is email alone sufficient for a valid signature?

Technically yes for the SES. For a high-profile document, choose AES with OTP SMS.

Does the GDPR prohibit the storage of identity documents?

No, it frames. Legal basis, limited duration, reinforced security for sensitive data.

Can FranceConnect+ be used?

Yes, recognized as “substantial” level for AES or even QES.

Video KYC required for insurance?

Not as such, but the ACPR is awaiting reinforced identification.

Sign with an identity from another EU country?

Yes, mutual recognition of eIDAS (itsme, SPID, nPA).

Conclusion

Identification is the most fragile link in the chain of proof. Take care of it according to the issue, and your signature will be solid.

Try Certyneo to send, sign and track your documents online simply, quickly and securely.