Nexus GO Signing eIDAS compliancy

This article describes the security level of Nexus GO Signing in terms of the European Union’s Electronic Identification and Trust Services Regulation (eIDAS), Regulation (EU) No 910/2014. The eIDAS Regulation defines three types of electronic signature: basic, advanced and qualified electronic signatures.

Advanced electronic signatures (AdES)

Nexus GO signatures are compliant with advanced electronic signatures (AdES), because it offers the following features:

The identity of the signatory is ensured using a two-factor authentication to a properly issued identity
The one-time RSA key pair can only be used by the signatory who has authenticated, as the private key is discarded after use
Subsequent change of the contents of the PDF file can be detected. This is a standard feature in Adobe Reader and is done by validating the signed hash of the document towards the current contents of the document. If the document has been changed, the signature is invalid

Use case examples for Nexus GO Signing

Here are some examples of document types that are suitable for the security level of Nexus GO Signing:

Employment contracts
HR documents
Purchase orders
Sales agreements
Order confirmations
Service terms
Invoices
Software license agreements
Policies
Commercial agreements
Lease agreements
Real estate documents