Consent forms patients sign on their phone.

Formisoft e-signatures are designed to support the requirements of the federal ESIGN Act and state UETA laws by capturing signer intent (explicit sign action), signer attribution (name, email, IP address), and a complete audit trail with tamper detection. These are the core elements courts look for when evaluating electronic signatures. However, legal requirements vary by state and document type, we recommend consulting your legal counsel to confirm compliance for your specific use case.

Every signature audit trail includes: the exact timestamp of signing, the signer's IP address, the browser and device used (user agent), a SHA-256 cryptographic hash of the signature image, the signer's name and email, and a verification status indicating whether the hash was confirmed server-side.

The signing certificate is a printable page that summarizes all forensic details for a specific signature, document information, signer identity, the signature image, timestamp, IP address, and the full SHA-256 hash. Use your browser's print function to save it as a PDF for your records.

When a patient signs, the browser computes a SHA-256 hash of the signature image data. When the form is submitted, the server independently computes the same hash. If both hashes match, the signature is marked as 'Verified', meaning the image was not modified between signing and submission. If they don't match, it's flagged as 'Unverified'.