Home › Blog › E-sign law in India

Is an Electronic Signature Legally Valid in India? A Practical Guide

Somewhere between "a scan of my signature is fine" and "you need a registered digital certificate" lies the actual law, and it is shorter than people fear. India has recognised electronic signatures since 2000. What changes from one document to the next is not whether e-signing is allowed, but which kind of electronic signature is strong enough to prove intent if anyone ever asks.

What the IT Act actually says

The Information Technology Act, 2000 gives legal recognition to electronic records and to two families of signing: digital signatures under Section 3, and electronic signatures notified by the Central Government under Section 3A, added in 2009. Section 10 lists the conditions a certifying authority must satisfy for digital signature certificates. In plain language: the law does not demand one technology, it demands reliability, and it lets the government notify which technologies qualify.

That is why an Aadhaar-based e-Sign, which wraps a digital signature issued by a licensed authority, sits comfortably inside the Act, while a PNG of your signature pasted into a PDF sits outside the notified list. The pasted image is not illegal. It is simply evidence of a different, weaker kind, and its strength comes from the surrounding circumstances rather than from the statute.

The four kinds of e-sign you will actually meet

First, the click-wrap signature: a typed name, a ticked checkbox, an "I agree" button. Courts in India and abroad have repeatedly enforced these for service terms and low-value agreements because the audit trail (IP, timestamp, account activity) supplies the proof of intent.

Second, the reproduced handwriting: you sign paper or a pad, and the image is placed on the PDF. This is what most people mean by "signing a PDF", and tools like PdfPixel's Sign PDF do exactly this in the browser. Its legal weight comes from conduct: both parties acted on the document afterwards.

Third, Aadhaar e-Sign: a one-time OTP flow that embeds a government-notified digital signature with a certificate chain. Fourth, registered DSC tokens, used for MCA filings, income-tax returns and tenders, where a specific rule names the technology.

Where a simple e-signature is enough

For the overwhelming majority of everyday paper, a reproduced signature on a PDF is perfectly workable: employment offer letters and joining forms, NDAs, rental leave-and-licence agreements in most states, invoices and delivery challans, school and college declarations, consent forms, KYC annexures where the bank accepts it, and internal approvals. In each case the signature is one piece of evidence among many, and the email thread around the file matters as much as the mark itself.

The practical risk is not validity but provability. Keep the signed original, keep the transmission record, and do not edit the file after signing. If a page is re-saved or re-compressed later, the honest answer to "was it altered?" gets harder to give.

Where ink or a registered certificate still wins

Some instruments are excluded from the IT Act's comfort zone entirely: negotiable instruments other than cheques, powers of attorney, trusts, wills and codicils, and contracts for the sale or conveyance of immovable property that require registration. For these, a wet signature before the appropriate authority remains the rule, and a PDF signature is at best a courtesy copy.

Separately, government filings often name the technology in their own rules: MCA company filings expect a registered DSC, e-tender portals expect a Class 3 certificate, and income-tax returns accept Aadhaar e-Sign or DSC depending on the filer category. Here the question is not what the IT Act permits but what the portal's rules specify.

A signature proves intent. The law only asks whether intent can be demonstrated later.

Signing a PDF so it holds up

Sign the final version, never a draft: check page count and names before the mark goes on. Sign in place, on the page and position the document expects, because a signature floating in a margin invites argument. Use a tool that keeps the file local if the content is sensitive; browser-side signing means the document never leaves the device, which is also the easiest way to keep client confidentiality.

After signing, treat the file as sealed: rename it once with a clear convention (name, document, date), store the signed original separately from working copies, and if the other side returns a countersigned version, keep both stages. When value is high, add a sentence in the document itself that electronic execution is acceptable to both parties; that single clause removes most later mischief.