What is an e-signature audit trail, and why does it matter in a dispute?

Why the signature image is the least important part

Anyone can copy a signature image. In a dispute, what convinces a court or an auditor is the surrounding evidence: that this person, verified in this way, saw this exact document and agreed to it at this time.

What a good audit trail records

• Who the document was sent to and when.
• Each time it was opened, from which IP address and device.
• How each signer authenticated, such as a one-time code to email or SMS.
• Their consent to sign electronically and their confirmation of intent.
• Every field completed and every signature applied.
• The SHA-256 fingerprint of the original and the final document.

Making it tamper-evident

A database log can be edited. A hash chain cannot be edited without detection: each event includes a cryptographic hash of the previous event, so changing or deleting any event breaks every hash after it. PDF Sign’s database also rejects updates and deletes on the audit table.

The final PDF carries a PAdES digital seal, so PDF readers show if it has been modified. An RFC 3161 timestamp from an independent Time Stamping Authority proves when the seal and the audit trail existed.

Independent verification

Evidence is strongest when someone else can check it. Anyone can drop a PDF on PDF Sign’s verification page: it is hashed in their browser, never uploaded, and compared with sealed agreements, without revealing names or content.