Providers - Certification levels & authentication options

Created by Lise LI, Modified on Fri, 5 Jun at 4:28 PM by Lise LI

This article covers two things for each provider: the eIDAS certification levels available per module, and the specific authentication options you can use to reach those levels. The right authentication method determines the legal weight of your signature — always choose it based on the sensitivity of the document.

⭐ Summary — Certification levels by provider and module

The table below shows which eIDAS levels are available for each provider, on each module.

Provider	CLM — SES	CLM — AES	BP/LEM/DR — SES	BP/LEM/DR — AES
DocuSign	✅	✅	✅	✅
Adobe Sign	✅	✅	✅	✅
YouSign	✅	❌	✅	❌
Universign	✅	✅	✅	✅
Connective (Nitro Sign)	✅	❌	✅	❌
DropBox Sign / HelloSign	✅	❌	✅	❌
Signaturit	✅	✅	✅	✅
Box Sign	✅	❌	✅	❌

Need QES? Contact your Customer Success manager to discuss options.

⚡ Authentication options by provider

For each provider, the options below determine the eIDAS level of the signature. Only options available through DiliTrust's integration are listed — options marked ❌ are not currently supported.

⚠️ "Unconfirmed" means the eIDAS classification for this option has not been formally validated. Contact support if you need clarification.

DocuSign

DocuSign offers the widest range of authentication options, covering both SES and AES on CLM and BP/LEM/DR.

Option	eIDAS level	Description	CLM	BP/LEM/DR
Standard Electronic Signature	SES	No ID proofing required	✅	✅
Standard Electronic Signature Advanced	⚠️ Not eIDAS	SMS validation — signer authenticates via phone. Not eIDAS-compliant despite the name	✅	✅
EU Advanced with ID Verification	AES	3 sub-options: Phone Authentication (SMS/call code, per-use fee), Knowledge-Based-Authentication (identity questions from public records — US only, per-use fee), ID Verification (government ID matched against envelope data)	✅	✅
DocuSign ID Verification for EU Qualified	QES	Remote ID verification — results stored in signer's Identity Wallet	❌	❌
DS EU Qualified with in-person ID check	QES	Qualified signature with prior in-person ID verification	❌	❌
IDnow — EU Qualified	QES	Qualified signature with remote ID verification via IDnow	❌	❌
Signer Held EU Qualified	QES	Qualified signature using a digital certificate stored on a computer, smart card or USB drive	❌	❌

Adobe Sign

Through DiliTrust's integration, standard SES and AES Phone Authentication are available on both modules.

Option	eIDAS level	Description	CLM	BP/LEM/DR
Standard Electronic Signature	SES	No verification required	✅	✅
Acrobat Sign Authentication	SES	Signer must log in with an Adobe account	❌	❌
OTP email	SES	One-time passcode sent to signer's email address	❌	❌
(2FA) Password	SES	Signer enters a password defined by the sender	❌	❌
(Advanced) Phone authentication	AES	6-digit code delivered to recipient's phone	✅	✅
Knowledge-Based Authentication	AES	Signer answers personal questions from public records — mainly used in financial institutions	❌	❌
Government ID authentication	⚠️ Unconfirmed	Signer provides a government-issued photo ID and a selfie	❌	❌
Cloud-based digital signatures	⚠️ Unconfirmed	Signer authenticates via a third-party identity provider	❌	❌

YouSign

YouSign supports SES on both modules. AES (ID Verification) is not currently available through DiliTrust's integration.

Option	eIDAS level	Description	CLM	BP/LEM/DR
Standard Electronic Signature	SES	No specific identification required	✅	✅
Standard with OTP Authentication	SES	OTP code sent to the signer for double identity check	✅	✅
ID Verification	AES	Signer's ID automatically verified. Additional manual check if needed	❌	❌
Qualified Signature	QES	Maximum security with facial verification in addition to ID check	❌	❌

Universign

Universign supports both SES and AES on CLM and BP/LEM/DR.

Option	eIDAS level	Description	CLM	BP/LEM/DR
Standard Signature	SES	OTP SMS authentication required	✅	✅
Advanced Signature	AES	Signer must submit a valid identity document	✅	✅
Advanced Signature with Qualified Certificate	QES	Face-to-face identity verification by an authorized person required	❌	❌
Qualified Signature	QES	Qualified certificate issued through a certified IT system	❌	❌

Connective (Nitro Sign)

Connective supports SES on both modules. AES options are not currently available through DiliTrust's integration.

Option	eIDAS level	Description	CLM	BP/LEM/DR
Standard Electronic Signature	SES	Acceptance via scanned image, drawn signature, or "I accept" click	✅	✅
SMS OTP and Mail Access Code (2FA)	SES	SMS or email verification code sent to the signer	✅	✅
ID Verification + OTP (SES or AES)	SES / AES	Enhanced security with SSO and 2FA options	❌	❌
ID Verification + OIDC	AES	Identity verification via OIDC methods	❌	❌
Remote Hash Signing	QES	Qualified signature via remote hash signing	❌	❌
Smart cards	QES	Qualified signature via smart card	❌	❌

DropBox Sign (CLM) / HelloSign (BP/LEM/DR)

DropBox Sign and HelloSign are the same product — HelloSign was rebranded by Dropbox. SES is available on both modules. AES via eID is not currently supported.

Option	eIDAS level	Description	CLM	BP/LEM/DR
Standard Electronic Signature	SES	No specific identification required	✅	✅
SMS authentication	SES	SMS verification sent to the signer	✅	✅
eID	AES / QES	Identity verification via eID document for AES and QES signatures	❌	❌
NOM 151 certificate	QES	Digital certificate verifying document integrity under Mexican regulations	❌	❌

Signaturit

Signaturit supports SES and AES on both modules. Note that AES via ID Verification is only available on CLM.

Option	eIDAS level	Description	CLM	BP/LEM/DR
Standard Electronic Signature	SES	No specific identification required	✅	✅
OTP verification	AES	SMS verification sent to the signer	✅	✅
ID verification	AES	Automated real-time identity check with liveness detection	✅	❌
Biometric ID verification	⚠️ Unconfirmed	Fingerprint, facial recognition or iris scan	❌	❌
Proof of liveness	⚠️ Unconfirmed	User performs actions (blinking, head movement) to confirm active presence	❌	❌

Box Sign

Box Sign supports SES only. Standard Signature and SMS authentication are available on both modules.

Option	eIDAS level	Description	CLM	BP/LEM/DR
Standard Electronic Signature	SES	No specific identification required	✅	✅
Box login	SES	Recipient must log in to Box account before signing — Enterprise Plus and Advanced plans only	❌	❌
SMS authentication	SES	Box sends an SMS to verify the recipient's identity	✅	✅
Password	SES	Recipient enters a sender-provided password before accessing the document	❌	❌
CAC/PIV	⚠️ Unconfirmed	Authentication via Common Access Card (CAC) or PIV card on Windows with Box Tools	❌	❌

If you have questions about which authentication option to use for your specific use case, contact your administrator or our support team.

The right authentication method ensures your signatures hold up legally — always match the option to the sensitivity of the document. ✨