eIDAS vs ESIGN Act: Document Signing Legality Explained (US vs EU 2026)

A US software company is signing a contract with a German customer. Their internal team uses scoutmytool sign-PDF and has done so for hundreds of contracts; under the US ESIGN Act and UETA, typed signatures on PDFs are fully enforceable. The German customer's lawyer reviews the contract and replies: "we need a Qualified Electronic Signature under eIDAS Regulation 910/2014 — your typed signature would not be a QES and might be challenged in EU courts." The US company's lawyer responds, "but the signature is binding under our governing-law clause selecting US law." Now both lawyers are exchanging memos at $400/hour. This impasse — common in 2026 cross-Atlantic contracting — illustrates why the difference between the US and EU e-signature frameworks matters in practice. After helping many users navigate cross-jurisdictional signing, the practical answer is: most US-only contracts are fine with typed signatures; most EU-only contracts work with Advanced Electronic Signatures; some specific document types in the EU (and a small set in the US) require Qualified Electronic Signatures with their cryptographic infrastructure.

For typed-and-drawn signatures that satisfy ESIGN/UETA in the US, use scoutmytool sign-PDF, typed signature, signature field, or quick-sign mobile. For QES under eIDAS, you need a Qualified Trust Service Provider (QTSP) — those services are paid and not what scoutmytool provides.

The Three Tiers Under eIDAS

The EU's e-signature framework — formally Regulation (EU) No 910/2014 on electronic identification and trust services for electronic transactions in the internal market (the eIDAS Regulation), with the Wikipedia overview of eIDAS summarizing the regulatory text — establishes three tiers:

Simple Electronic Signature (SES): any electronic data attached to a document that the signatory uses to sign. Includes typed names, drawn signatures, scanned image of a signature, "I Agree" button clicks. Equivalent to a typed signature under ESIGN. Legally binding for most ordinary contracts; can be challenged on identity grounds.

Advanced Electronic Signature (AES): an SES that additionally:

• Uniquely identifies the signatory
• Is created using means under the signatory's sole control
• Is linked to the signed data so any subsequent change is detectable

In practice, this means the signature uses a digital certificate that the signatory controls. DocuSign Standard, Adobe Sign Standard, and similar platforms produce AES when used with proper identity verification.

Qualified Electronic Signature (QES): an AES that additionally:

• Is created with a Qualified Signature Creation Device (QSCD) — a hardware token, smart card, or qualified remote-signing service
• Is supported by a Qualified Certificate issued by a Qualified Trust Service Provider (QTSP) listed on the EU Trusted List

QES has the same legal effect as a handwritten signature in all 27 EU member states, automatically, without any party-by-party negotiation. SES and AES are also legally enforceable but can require more work to prove validity in disputed cases.

The official European Commission e-signature trust list provides the authoritative current Trusted List of QTSPs across the member states.

The US Framework: ESIGN Act and UETA

The US doesn't have eIDAS-style tiers. Two laws govern:

ESIGN Act (federal): codified at 15 USC §7001 in the US Code. Applies to interstate and foreign commerce. Establishes that a signature, contract, or other record cannot be denied legal effect "solely because it is in electronic form."

UETA (state): the Uniform Electronic Transactions Act adopted in 49 states (all except New York, which has its own substantively-similar Electronic Signatures and Records Act). Applies to intrastate transactions.

Both laws make typed and drawn signatures legally enforceable when the four standard elements are satisfied: intent to sign, mutual consent to electronic execution, association of signature with the record, record retention. There's no formal "tier" structure analogous to eIDAS — a typed name signature on a PDF is enforceable for nearly all purposes (with specific exclusions for wills, court orders, evictions, etc.).

The Wikipedia article on the ESIGN Act and the Wikipedia overview of electronic signatures summarize the US framework.

For higher-trust US use cases, FedRAMP-authorized e-signature services (DocuSign Standards, Adobe Sign at higher tiers) provide audit trails, identity verification, and cryptographic verification — but these are practical add-ons, not legal tiers under ESIGN.

Side-by-Side Comparison

The practical import: for ordinary US-domestic contracting, typed signatures are sufficient. For EU-domestic contracting, AES is sufficient for most business contracts; QES is reserved for high-trust contexts (real estate, court filings, certain financial instruments).

When You Need Each Tier

Typed signature (US ESIGN / EU SES) is sufficient for:

• Consulting agreements
• NDAs (most contexts)
• Freelance/contractor contracts
• Services agreements
• Internal documents
• Most B2B commercial contracts where parties trust each other

AES (in EU) or audit-trail services like DocuSign (in US) are appropriate for:

• Higher-value commercial contracts
• Contracts where execution disputes are foreseeable
• Vendor agreements with regulated counterparties
• Most ordinary business contracting in the EU

QES (EU) or specialized services (US) are required for:

• Real estate transactions in many EU member states
• Court filings in EU member states
• Healthcare in 21 CFR Part 11 contexts (US) and EU-equivalent
• Pharmaceutical clinical trials
• Some banking and securities contexts
• Anywhere local law specifically requires a "qualified" signature

When in doubt about jurisdiction-specific requirements, consult local counsel — the EU member states have variations on top of the eIDAS baseline.

Cross-Jurisdictional Contracting

The most common cross-jurisdictional question: does a US-typed signature satisfy EU requirements when contracting with an EU counterparty?

Short answer: Yes for ordinary commercial contracts, with caveats. The EU-US legal frameworks both enforce ordinary commercial contracts with electronic signatures. eIDAS doesn't override US law; ESIGN doesn't override EU law. The governing-law clause typically picks one framework, and that framework's standards apply.

Caveats:

• If the document type requires QES under EU law (real estate, court filings), no amount of US-side typed signing satisfies the EU requirement
• If the EU counterparty's lawyer requires QES as a precaution, you may need to comply even if it's not strictly required
• If the contract is to be enforced in EU courts, evidentiary preferences may favor QES over typed
• Some EU-based regulators (banking, insurance) require QES for specific filings

Practical workflow: confirm with the EU counterparty whether SES (typed/drawn signatures) is acceptable for their internal compliance and the document type. If yes, sign with scoutmytool sign-PDF and exchange via email. If they require AES or QES, escalate to a qualified e-signature service.

Worked Examples

Example 1 — US-domestic SaaS contract with $50K value. Both parties US-based, governing law selected as Delaware. Signing: typed signatures via scoutmytool sign-PDF by both parties. Time: 3 minutes total. Legally binding under ESIGN/UETA. No cross-jurisdictional issues.

Example 2 — US-EU SaaS contract with German customer. Governing law selected as Delaware. The German customer's procurement requires AES under their internal policy (not eIDAS-mandated, but a German corporate norm). Workflow: US side signs with typed signature; German side signs via DocuSign Standard with their internal AES infrastructure. Both signatures appear on the same final PDF. Both bind under their respective frameworks; the contract is enforceable under Delaware law.

Example 3 — German real estate purchase by US buyer. Real estate transactions in Germany require QES under German implementation of eIDAS. Typed signatures don't satisfy. Buyer obtains QES via a German QTSP with hardware token. Cross-Atlantic complications: buyer must visit a German notary or use a Remote Online Notarization service that the German registry accepts.

Example 4 — Pharmaceutical clinical-trial protocol amendment. Required: 21 CFR Part 11-compliant electronic signature in the US. Typed signatures don't satisfy. Use a 21 CFR Part 11-validated e-signature platform with audit trail, cryptographic chain-of-custody, and FDA-acceptable identity verification. Same standard applies for clinical trials in EU under their respective regulations.

Common Pitfalls

Believing US-typed signatures don't bind across borders. They generally do bind in cross-border commercial contexts under the contract's chosen governing law. Concerns are often about the EU side's evidentiary preferences, not actual legal validity.

Over-relying on QES for ordinary contracts. QES is expensive and slow (hardware tokens, qualified provider fees, identity verification). For ordinary commercial contracts where the counterparty doesn't require it, typed signatures are far less friction.

Confusing SES and "no signature." SES is a legitimate legal tier; "I clicked a box on a website" is also a form of SES. Both bind under eIDAS. The misconception that "only QES is a real signature" is widespread but legally wrong.

Treating DocuSign's audit trail as if it's QES. DocuSign Standard produces AES-equivalent audit trails. DocuSign Advanced Solutions (paid tier) can produce QES via integration with QTSPs. Default DocuSign isn't automatically QES.

Forgetting the governing-law question. A contract signed by a US party with typed signature and an EU party with QES is governed by whichever law the contract specifies. The governing-law clause is the practical resolution.

Picking the wrong tool for the document type. Wills, court filings, and some real estate transactions can't be electronically signed at all in many jurisdictions, regardless of tier.

Not retaining records. Both ESIGN and eIDAS require both parties retain a copy that can be reproduced by the other. Email exchange of the signed PDF satisfies this implicitly; failing to retain copies can affect future enforcement.

Frequently Asked Questions

Q: Is a typed signature on a PDF legally binding internationally? A: For commercial contracts, generally yes, under the contract's chosen governing law. ESIGN binds in the US; eIDAS-SES binds in the EU. Cross-jurisdictional contracts work via the governing-law clause.

Q: What's the difference between AES and QES? A: Both use cryptographic certificates. AES requires the certificate be under the signatory's "sole control" (typically via a personal certificate). QES requires a Qualified Certificate issued by a Qualified Trust Service Provider on the EU Trusted List, plus a Qualified Signature Creation Device (hardware token or qualified remote service). QES is the highest-trust tier; AES is widely used for ordinary EU business contracts.

Q: Can a US-based service produce QES? A: Some can, via partnership with EU-based QTSPs. DocuSign Advanced Solutions, Adobe Sign Pro, and a few specialized providers offer QES through such partnerships. Pure US services without QTSP infrastructure cannot produce QES under eIDAS.

Q: Do I need QES for an EU NDA? A: Generally no. NDAs are ordinary commercial contracts; SES (typed signature) or AES is sufficient. QES is overkill for NDAs in most contexts.

Q: What happens if I sign with a typed signature for an EU document that legally requires QES? A: The signature isn't enforceable in EU courts for that document type. The contract may be voidable. Always check whether the document type requires QES before signing.

Q: Does eIDAS apply to UK contracts post-Brexit? A: The UK has its own framework — Electronic Communications Act 2000 plus retained eIDAS provisions for some purposes. UK QES (Qualified Trust Services) operates similarly to EU QES but is mutual-recognized only by specific arrangements. Cross-UK-EU contracting may need both frameworks.

Q: How do I know if a service produces QES? A: Check whether the service uses a QTSP listed on the EU Trusted List. If it doesn't, it can't produce QES — only AES at most.

Wrapping Up

The US and EU approaches to electronic signatures both bind ordinary commercial contracts; they differ on tier structure and the high-trust threshold. Typed signatures via scoutmytool sign-PDF satisfy US ESIGN/UETA requirements and EU SES requirements for most business contexts. For higher-trust EU contexts (real estate, court filings, regulated industries), QES is required — that needs a Qualified Trust Service Provider, not free PDF tools. Pair signing with PDF form flatten to lock signatures into final form, PDF add date field for date-stamping, and the scoutmytool PDF tools index for the broader workflow.