Are electronic signatures legally binding in the UK? (2026 guide)

Yes — in the UK, electronic signatures are legally binding for the vast majority of agreements. An email sign-off, a typed name, a finger-drawn squiggle or a one-tap confirmation can all form a valid signature, provided the person intended to authenticate the document. English law has recognised this for years, and it was confirmed in plain terms by the Law Commission in 2019. There are a small number of exceptions — certain deeds, wills and some land transactions — where extra formalities or witnessing may still apply, and we cover those below. But for contracts, engagement letters, NDAs, offers, consents and the everyday paperwork that keeps a business moving, an electronic signature is enough.

The more useful question isn't "is it legal?" but "can I prove it later?" Legality and provability are not the same thing, and that gap is where most disputes actually live. This guide covers the UK position first, then EU eIDAS and US ESIGN/UETA, and finishes on what turns a valid signature into an evidentially strong one.

The UK legal basis

Three things underpin the enforceability of electronic signatures in England and Wales.

The Electronic Communications Act 2000. Section 7 makes electronic signatures admissible as evidence in legal proceedings in relation to the authenticity or integrity of a communication. In short: an electronic signature is not second-class evidence. A court can rely on it.

Retained (UK) eIDAS. After Brexit, the EU eIDAS Regulation was brought into UK law as "UK eIDAS". It confirms that an electronic signature "shall not be denied legal effect and admissibility as evidence in legal proceedings solely on the grounds that it is in an electronic form." Being electronic, on its own, is never a reason to reject a signature.

The Law Commission's 2019 statement. After a full review, the Law Commission concluded that an electronic signature is capable of executing a document — including a deed — provided the signatory intends to authenticate it and any execution formalities are met. The government accepted this. So the "does it count?" question is largely settled: under English common law a signature has always been about intent to authenticate, not ink. A mark, initials, a printed name or an electronic equivalent can all satisfy that test.

The legal core is simple: a signature is a sign of an intention to be bound. The medium — pen, keyboard, touchscreen — is not what matters.

The eIDAS tiers: simple, advanced, qualified

Both UK and EU eIDAS describe three tiers of electronic signature. They are not three levels of "legality" — the simplest tier is legally valid — but three levels of assurance about identity and integrity. Higher tiers carry more built-in evidential weight.

• Simple Electronic Signature (SES). The broad category: a typed name, a tick-box, a drawn signature, an email confirmation. Valid and admissible. Most everyday business agreements sit here.
• Advanced Electronic Signature (AES). Uniquely linked to the signatory, capable of identifying them, created using data the signatory can control, and linked to the data so any later change is detectable. This is where tamper-evidence and a proper audit trail come in.
• Qualified Electronic Signature (QES). An advanced signature backed by a qualified certificate from a trust service provider. In the EU it carries the legal equivalent of a handwritten signature. It's the heaviest option and rarely necessary for ordinary commercial contracts.

For a fuller breakdown of the tiers and when each is worth the friction, see our guide to eIDAS explained.

What makes a signature enforceable — and provable

A signature can be legally valid and still be weak in a dispute if you can't show the circumstances around it. Enforceability in practice rests on evidence. If a signature is ever challenged, you want to be able to demonstrate:

• Who signed — the identity of the signatory, and a reasonable basis for believing the signature came from them (email verification, device and access records, and so on).
• Intent to authenticate — that the person meant to sign and be bound, not merely to view or comment.
• Integrity / tamper-evidence — that the document hasn't changed since it was signed. A cryptographic seal over the final document lets you prove this rather than assert it.
• A complete audit trail — a time-stamped record of who did what and when: opened, viewed, signed, from which IP and device.

This is exactly the difference between the tiers above. A typed name with no surrounding record is valid but thin. The same intent captured with identity checks, a tamper-evident seal and a full audit trail is far harder to dispute. It's why we built Signet so every completed document ships with a publicly verifiable seal and a certificate of completion, and why our security page sets out how the evidence is captured and stored. Legality gets you a valid signature; provability wins the argument.

Where wet ink or witnessing may still be needed

A minority of documents carry extra formalities. Treat this list as a prompt to check, not a hard set of rules — practice is evolving, and the safe move for anything high-value is to confirm the specific requirement.

Generally fine to e-signCheck first

Commercial contracts & service agreements

Wills and codicils

NDAs and confidentiality agreements

Lasting powers of attorney

Employment contracts & offer letters

Some deeds (witnessing may be required)

Engagement letters & SOWs

Transfers/dispositions of land & property

Sales orders, quotes and consents

Certain documents needing a notary

Board consents & internal approvals

Some HMRC/court/registry filings

Two things worth knowing. First, deeds can be signed electronically, but they usually require a witness who observes the signing — so the process, not just the signature, matters. We cover this in whether electronic signatures need a witness. Second, land and property transactions and a handful of registry, tax and probate documents may still demand traditional execution or a specific accepted format. When in doubt, check before you rely on an e-signature.

E-signature compliance in the UK: the practicalities

Compliance is less about a single certificate and more about running a defensible process. In practice that means:

• Match the assurance to the risk. A simple signature is fine for a routine order; a high-value or contested agreement deserves identity checks, tamper-evidence and a stored audit trail.
• Capture consent to sign electronically. Make it clear the parties agree to transact this way — usually a one-line acknowledgement.
• Keep the evidence. Retain the signed document, the audit trail and the certificate of completion together. A signature you can't produce later isn't much use.
• Mind data residency. For UK and EU parties, keeping personal data within UK/EU jurisdictions simplifies GDPR/UK GDPR compliance. Signet keeps data in the UK and EU by design.
• Prefer verifiable over trust-me. A seal anyone can independently check beats an internal claim that "our system logged it."

PDFs: a typed name vs a proper audited e-signature

"Is a PDF signature legally binding?" comes up constantly, and the answer depends entirely on what you mean by "PDF signature."

Typing your name into a PDF, or pasting an image of your handwritten signature, can be a valid simple electronic signature — if there's intent to authenticate. But on its own it's weak evidence. Nothing stops the file being edited afterwards, there's no record of who actually typed it, and there's no proof of when. If the other side later claims "that isn't my signature" or "the figures were changed," a flat PDF gives you very little to stand on.

A proper audited e-signature is a different thing. The document is cryptographically sealed at the point of signing, so any later change is detectable; the signer's identity and intent are captured; and a time-stamped audit trail records the whole event. That's the difference between a signature that is technically valid and one that will actually hold up if it's tested. If you want the distinction in more depth, see electronic signature vs digital signature.

The bottom line

In the UK, electronic signatures are legally binding for almost everything a normal business signs. The law — the Electronic Communications Act 2000, UK eIDAS and the Law Commission's 2019 statement — is clear that being electronic is not a barrier to enforceability. The real work is proving it: capturing who signed, their intent, that the document is unchanged, and a clean audit trail. Reserve extra caution for wills, some deeds, and land, and check those before relying on an e-signature.

This is general information, not legal advice — for high-value or regulated agreements, check the specific requirements in your jurisdiction.

A note on the EU and US

The picture is similar in the two other regimes UK businesses meet most often. In the EU, the eIDAS Regulation mirrors the UK tiers (SES, AES, QES) and guarantees that a signature can't be denied legal effect for being electronic; a qualified signature carries the same weight as a handwritten one across member states. In the United States, the federal ESIGN Act and the state-level UETA give electronic signatures and records the same legal standing as paper, provided the parties intended to sign and agreed to do business electronically. The common thread across all three: intent to sign matters, being electronic is not a defect, and strong evidence is what carries the day.

Signet is in private beta, request early access and send your first sealed agreement free.