- SES
- simple signature, eIDAS Art. 3(10)
- SHA-256
- document hash in the report
- Ed25519
- seal on the evidence report
- OTP
- access code sent by email
Availability. HawkOpen is in a controlled launch. PDF tracking, proposals and e-signature only work once external file scanning is switched on; without it, the server does not accept files.
SES vs AES vs QES under eIDAS
| Level | What it is | HawkOpen |
|---|---|---|
| Simple (SES) | Data in electronic form that a person uses to sign. It cannot be denied legal effect solely because it is electronic. | Yes |
| Advanced (AES) | Uniquely linked to the signatory and tied to the data in a way that makes any change detectable. | No |
| Qualified (QES) | Advanced, with a qualified certificate. Equivalent to a handwritten signature in the EU. | No |
What’s in the evidence report
- A SHA-256 hash of the signed document, so any change to the file is detectable.
- A hash of the signer’s email address and a record that access was through a one-time code.
- Time from the HawkOpen server. This is not a qualified timestamp.
- An Ed25519 seal you can check on the verification page or in your browser, without sending any data.
When a simple electronic signature is enough
A simple signature works where the law does not require a specific form: order confirmations, acceptance of terms of cooperation, formal records or internal approvals. Contracts that must be in written form to be valid, or that require a qualified signature, need to be signed another way.
If you are not sure, ask a lawyer which form your transaction needs.
Frequently asked questions
Is a HawkOpen electronic signature legally valid?
It is a simple electronic signature. It cannot be denied legal effect solely because it is electronic, but it is not equivalent to a handwritten or qualified signature. The required form is assessed separately for each transaction.
Can I sign a PDF online?
Yes. The recipient opens the link, confirms access with the code from the email and signs the document in the browser.
Does HawkOpen use a qualified timestamp?
No. The report contains the HawkOpen server time and an Ed25519 seal.