The Supreme Court upheld Section 63 BSA. Most audit trails still can't produce its certificate.
In May 2026 the Supreme Court upheld the BSA's dual-certificate rule for electronic evidence. Here's what it actually asks of your audit trail.
Tag
In May 2026 the Supreme Court upheld the BSA's dual-certificate rule for electronic evidence. Here's what it actually asks of your audit trail.
Your eSign audit trail proves who signed and when. India's BSA 2023 requires a Section 63 certificate before that record is admissible as evidence — and your eSign platform can't issue it for you.
Aadhaar eSign authenticates the individual, not the company. For B2B vendor contracts, this distinction matters more than most teams realise. Here is the gap and how to close it.
The vendor docs tell you how to configure webhooks. They don’t tell you about the five failure modes that surface in production eSign integrations. Here is what actually breaks and how to fix it.
Switching eSign vendors is easier than expected. Here's what actually changes when you move from DocuSign to FlowVerify: template recreation, webhook remapping, and the Aadhaar eSign gains along the way.
UIDAI downtime breaks Aadhaar eSign flows unless you have designed for it. Three fallback patterns: async queue, DSC drop-in, and consent capture, with what each means for audit trails and IT Act validity.
Section 3A of India's IT Act doesn't specify a technology — it specifies four reliability conditions. Here's what each one requires from your eSign implementation in practice.
Most HR documents are legally valid with a basic electronic signature and audit trail. This decision framework maps which documents need Aadhaar eSign, which don’t, and how to build a tiered workflow that covers both.
PAdES B-B stops validating when the signing cert expires. B-LT embeds the full cert chain and revocation data. B-LTA adds a renewable archive timestamp. Here is what each level actually survives in production.
Free eSign tiers are priced to acquire customers, not support enforcement. Here is what they typically omit from the audit trail, why Section 3A cares, and five questions to ask before you commit.
Most vendor security questionnaires stop at SOC 2. Here is what to ask about authentication modes, PAdES levels, audit trail fields, and data residency — and what a bad answer looks like.
Most eSignature vendors advertise ‘tamper-evident’ documents. Here is what that property proves, where it runs out, and what else you need to make a signed document hold up in a dispute.
Practical guides, product updates, and compliance notes — straight to your inbox. No fluff.
Newsletter is opening soon. We'll switch this on once we've got our first issue ready.