Signing Process
Your private key signs the document. It generates a unique signature that is mathematically tied to that exact file and to you.
Digital signature, an encrypted & tamper-proof way to sign a document. It is not just a name on a screen. Under the surface, it's a cryptographic process — one that locks your identity, the document's contents and the exact moment of signing into a single verifiable record. Change one word after signing and the system flags it immediately.
That combination is what gives a digital signature its legal weight. It doesn't just say someone signed. It proves who, when and that nothing changed afterward.
When you sign through EazeeSign, four things happen automatically — without any extra steps on your end:
A Digital Signature Software Certificate is an electronic credential issued by a licensed Certifying Authority that confirms the identity of the person or entity signing a document. It works on public key cryptography — binding a signer's identity to a unique digital key pair, one public and one private, so that any signed document can be traced back and verified without dispute.
Legally, a DSC carries the same weight as a handwritten signature under the Information Technology Act, 2000. Section 3 of the Act specifically recognizes digital signatures as valid for authenticating electronic records, which is why digital signature certificate are accepted across government portals, courts and regulatory filings in India. Without a DSC, most statutory filings involving companies, GST, or income tax simply cannot be submitted online.
These two terms get used interchangeably by the people but they are not the same thing. An electronic signature is a broad category like any digital mark of approval. A digital signature is a specific, encrypted type of electronic signature that adds identity verification and tamper-proofing on top.
| Parameters | Digital Signature Software | Electronic Signature |
|---|---|---|
| What it is | An encrypted signature created with a private key, tied to a verified identity. | A general term for any electronic mark used to show approval — typed, drawn, or clicked. |
| Identity check | Verified through a digital certificate or government-backed eSign service. | Usually just an email link or login; identity is not strongly confirmed. |
| Tamper detection | Built in. Any change after signing breaks the signature instantly. | Not guaranteed. A signed file can sometimes be edited without detection. |
| Legal weight | Recognised as strong evidence under the IT Act, 2000. | Valid for many everyday uses, but offers a lower evidence standard. |
| Best used for | Contracts, loan documents, compliance filings, government forms. | Internal approvals, HR forms, low-risk acknowledgements. |
Every digital signature runs on asymmetric cryptography — a pair of mathematically linked keys, one private and one public.
Your private key signs the document. It generates a unique signature that is mathematically tied to that exact file and to you.
The matching public key lets anyone verify the signature. If it matches, then the document is authentic and not altered after signing.
If even a single character changes after signing the document, the hash value no longer matches and verification fails immediately — proof the document was tampered with.
Digital Signature Certificates are not one size fits all. The Controller of Certifying Authorities (CCA) classifies them by the level of assurance they provide and each class serves a different purpose depending on how sensitive the transaction is.
This is the certificate most businesses and individuals apply for today. Class 1 and Class 2 certificates were phased out by the CCA a few years back, which makes Class 3 the standard across nearly every use case now, from GST filings to company registrations to court proceedings. It requires strong identity verification, including video verification and comes with higher trust for legal and financial transactions.
Class 3-Individual — issued to a single person, used for income tax filing, GST returns, trademark applications and personal legal documents
Class 3–Organization — issued in the name of a company or entity, used for corporate filings, tenders and business contracts
Class 3–Combo (Signing + Encryption) — bundles two certificates on one token, one for signing documents and one for encrypting sensitive data, commonly used in tender submissions where both are required
A specialized certificate meant specifically for the Directorate General of Foreign Trade portal. Exporters and importers use this to file applications, licenses and other trade documents online. It's functionally similar to a Class 3 certificate but restricted to DGFT-related use.
Used by organizations that need to digitally sign a large volume of documents automatically, like banks issuing statements or insurance companies issuing policies. This one isn't tied to an individual; it's installed on a server and applies signatures at scale without manual intervention each time.
A token based Digital Signature Certificate is the traditional way but still preferred for government tenders, GST filings, company registrations and court e-filing. It comes stored on a physical USB token and the application process runs through a Certifying Authority licensed by the Controller of Certifying Authorities (CCA) under the IT Act 2000.
The process follows a fixed sequence. Here's how it typically goes:
Providers like eMudhra, Sify, Capricorn or NSDL are licensed to issue DSCs in India
Class 3 is standard for most business use; validity is usually 1, 2, or 3 years
Available on the CA's website, requiring basic identity and contact detail
PAN card, Aadhaar card, a passport-size photo and address proof if not linked to Aadhaar
A short call where the applicant confirms identity on camera, sometimes replacing the older notarized paper route
Fees vary by CA and certificate validity period
Once approved, the DSC gets loaded onto a token, either couriered physically or activated through a downloadable driver if using a virtual token service
The exact list varies slightly by Certifying Authority but most applications fall into two categories: individual applicants and organizational applicants.
Business owners, company directors, or authorized signatories need everything above, plus:
Two signing methods dominate the market and they solve different problems.
A USB token DSC stores the private key on a physical hardware device, an encrypted crypto token that plugs into a computer's USB port. Nothing about the signature works without that token physically present, which makes it hard to misuse remotely but inconvenient if it's lost, forgotten at home, or incompatible with a particular device.
A cloud-based DSC, sometimes called an HSM-based or server-based signature, stores the private key on a secure remote server instead. Signing happens through OTP or biometric authentication, no token, no driver installation, no compatibility headaches across laptops or operating systems.
| Factor | USB Token DSC | Cloud DSC |
|---|---|---|
| Physical hardware | Required | Not required |
| Signing speed | Slower, needs token + software | Instant, browser or app based |
| Best for | High-security filings, tenders, court submissions | High-volume signing, remote teams, businesses |
| Risk if lost | Token must be reissued | No physical loss risk |
| Setup | Driver installation needed | None |
Neither is universally "better." Government tender portals and court e-filing systems still often require the token-based route because of how deeply that format is embedded in older systems. For day-to-day business signing, contracts, HR documents, vendor agreements, cloud-based signing tends to win on speed and convenience.
Pricing of Digital Signature Certificate depends on three things: one is, the Certifying Authority issuing it, second is the validity period chosen and whether a USB token is bundled in. Providers typically price a one-year Class 3 certificate starting around ₹826 with two-year certificates closer to ₹992, though rates climb depending on the vendor and any bundled services.
| Component | Approximate Price Range |
|---|---|
| Class 3 Signing (1 year) | ₹800 – ₹1,200 |
| Class 3 Signing (2 years) | ₹950 – ₹1,600 |
| Class 3 Signing (3 years) | ₹1,400 – ₹2,500 |
| Class 3 Combo (Signing + Encryption) | ₹1,500 – ₹3,000 |
| USB Token (if not already owned) | ₹600 – ₹800 |
| Video KYC / verification fee | Often bundled, sometimes charged separately (~₹700) |
Note: Video KYC has been mandatory for all new DSC applications since April 2021, per CCA and MeitY requirements, so that cost isn't optional no matter which provider gets chosen. GST at 18% typically applies on top of the base certificate price and organizational DSCs usually cost more than individual ones because of the extra document verification involved.
Creating a digital signature takes a few minutes, with no downloads or technical setup.
EazeeSign accepts PDFs, Word files and scanned images — no reformatting needed before you start.
Pick a verified digital signature to sign legal, financial or compliance documents. Also for everyday internal approvals, a simple e-signature works fine.
Complete the authentication step with the help of any suitable method — OTP, Aadhaar eSign, or your configured verification option.
One click is all it takes. EazeeSign handles the rest — encrypting the document, attaching a timestamp and binding a digital certificate automatically.
Send the signed document directly from the platform or download it. Either way, every copy carries its own audit trail — verifiable by anyone who receives it.
EazeeSign majorly cater Indian growing startups or established organizations. Every compliance requirement, every security standard, and every verification method is aligned to how Indian businesses actually operate and what Indian law actually requires.
Every signature created through EazeeSign is backed by recognised security and legal standards:
gives digital signatures legal recognition and enforceability in India.
supports verified, government-backed identity authentication.
link your digital certificate to a licensed, trusted issuer.
data security and handling practices independently assessed against these standards.
Documents signed this way are enforceable in court and valid for official business use across India.