Aadhaar eSign vs DSC vs DocuSign vs Zoho Sign: what's legally valid in India

What does Indian law count as an electronic signature?

The Information Technology Act, 2000 defines an "electronic signature" as authentication of an electronic record by means of an electronic technique specified in the Second Schedule, and says the term includes a digital signature. That definition is narrower than the everyday meaning. Ticking a box, typing your name or drawing a squiggle on a touchscreen is an electronic act of assent, but it is not automatically an "electronic signature" in the statutory sense.

Section 3A lets a subscriber authenticate a record by any electronic signature or authentication technique that is reliable and specified in the Second Schedule. It sets the reliability test: the signature creation data is linked to the signatory and no one else, was under the signatory's sole control at the time of signing, and any later change to the signature or to the signed information is detectable. Section 5 then gives legal recognition: where a law requires a document to be signed, the requirement is met by an electronic signature affixed in the prescribed manner.

So there are two separate questions for any signing method. Is it a statutory electronic signature at all? And if a law requires a signature, does it satisfy section 5? A DSC and Aadhaar eSign are designed to answer yes to both. A generic click-to-sign workflow usually answers no to the first, which does not make the contract invalid, but changes what you have to prove.

How does Aadhaar eSign differ from a DSC?

A DSC is a certificate issued by a Certifying Authority licensed by the Controller of Certifying Authorities (CCA), with the private key held on a hardware crypto token. The CCA's Identity Verification Guidelines now require Certifying Authorities to issue individual signing certificates at Class 3 level, carrying both the Class 2 and Class 3 identifiers, rather than issuing Class 2 certificates on their own.

eSign is an online electronic signature service. It was added to the Second Schedule by notification G.S.R. 61(E) of 27 January 2015 as an "e-authentication technique using Aadhaar e-KYC services", and S.O. 1119(E) of 1 March 2019 widened it to Aadhaar "or other" e-KYC services. The signer authenticates (for Aadhaar, by OTP or biometric), a key pair is generated for that one signature, a short-lived certificate is issued, and the key is deleted. The CCA's eSign framework describes these certificates as having 30 minutes' validity.

In practice: a DSC suits repeat signers who are already set up with a token, such as directors and authorised signatories. eSign suits one-off signers, such as a counterparty's representative who will never buy a token. Both produce a cryptographic signature that can be verified against the issuing Certifying Authority.

Where do DocuSign and Zoho Sign stand?

The platform's name does not decide the legal position; the method used on the specific document does. A standard electronic signature on a commercial platform, where the signer clicks to adopt a signature after email verification, is not one of the techniques in the Second Schedule. If a platform routes the signer through Aadhaar eSign or a DSC, the result is a statutory electronic signature regardless of whose interface the signer saw. Which options are available on your plan is a question for the vendor.

A click-to-sign contract is not unenforceable for that reason alone. Section 10A of the IT Act provides that where proposals, acceptances and revocations are expressed electronically, the contract shall not be deemed unenforceable solely because electronic form was used. What changes is evidence. The Bharatiya Sakshya Adhiniyam, 2023 (BSA), in force from 1 July 2024, says in section 66 that, except for a secure electronic signature, the fact that an electronic signature belongs to the subscriber must be proved. The audit trail, IP logs, email verification and certificate of completion become the evidence you will rely on.

Statutory electronic signatures also carry presumptions. Section 85 of the BSA presumes that an electronic agreement containing the electronic or digital signatures of the parties was concluded by affixing them. Section 86 presumes, for a secure electronic signature, that it was affixed with the intention of signing or approving the record. Section 15 of the IT Act sets when a signature is "secure": the signature creation data was under the signatory's exclusive control and was stored and affixed in the prescribed manner.

How are electronic records proved in court now that the Evidence Act is replaced?

The BSA replaced the Indian Evidence Act, 1872. Section 61 says nothing in the Adhiniyam denies admissibility of an electronic or digital record on the ground that it is electronic, and that such a record has, subject to section 63, the same legal effect, validity and enforceability as any other document. Section 62 says the contents of electronic records may be proved in accordance with section 63.

Section 63 carries forward the old section 65B mechanism. Computer output is deemed a document if conditions about regular use and proper operation of the device are met, and a certificate in the form specified in the BSA's Schedule must be submitted with the electronic record each time it is offered in evidence. For contract teams this is operational, not academic: whoever runs the signing system should know who will sign that certificate and what logs support it.

Which documents cannot be signed electronically at all?

Section 1(4) of the IT Act excludes the documents listed in its First Schedule. That list was amended by S.O. 4720(E) of 26 September 2022, and many published guides still quote the old version. As amended, the exclusions are:

• A negotiable instrument as defined in section 13 of the Negotiable Instruments Act, 1881, other than a cheque, or a demand promissory note or bill of exchange issued in favour of or endorsed by an entity regulated by the RBI, NHB, SEBI, IRDAI or PFRDA.
• A power of attorney under the Powers-of-Attorney Act, 1882, except one that empowers an entity regulated by any of those five regulators to act for, on behalf of and in the name of the person executing it.
• A trust as defined in section 3 of the Indian Trusts Act, 1882.
• A will as defined in section 2(h) of the Indian Succession Act, 1925, including any other testamentary disposition.
• Entry 5, contracts for the sale or conveyance of immovable property, was omitted by the 2022 notification. That removes the IT Act bar only. Whether a property document can be registered or stamped electronically depends on registration and stamp law in the relevant state, which is a separate question.

Does signing electronically change stamp duty?

No. Stamp duty attaches to the instrument, not to the signing method. Section 17 of the Indian Stamp Act, 1899 requires an instrument chargeable with duty and executed in India to be stamped before or at the time of execution. Section 18 allows an instrument executed only outside India to be stamped within three months after it is first received in India. Several states have their own stamp statutes, so check the law of the state concerned.

The practical sequence for an e-signed agreement is therefore: obtain the e-stamp certificate or state equivalent first, attach it to the document, then send it for signature. Signing first and stamping later puts the stamp date after execution, which is exactly what section 17 forbids. Our e-stamping guide covers which states let you complete this online.

When do you need a DSC rather than eSign or a click signature?

Usually when a government portal requires it, rather than because contract law does. Common cases:

• MCA21 company filings. The Ministry of Corporate Affairs requires e-forms filed under MCA21 to be signed with a DSC.
• Public procurement. Bidders on the Central Public Procurement Portal are required to register a Class III DSC with signing key usage issued by a CCA-licensed Certifying Authority, and bid documents are signed with it.
• Tax and other statutory portals. Requirements vary by portal and by the type of taxpayer, and they change; check the current rule on the portal itself rather than relying on a summary.

What about a counterparty signing from outside India?

Aadhaar eSign assumes the signer has an Aadhaar number. The 2019 amendment admits other e-KYC services, but a foreign signatory with no Indian identity often has no practical route to eSign, and obtaining an Indian DSC takes time. Cross-border agreements are therefore commonly signed with a platform's standard electronic signature, a foreign certificate, or wet ink.

Section 19 of the IT Act lets the Controller recognise foreign Certifying Authorities by notification, in which case their certificates are valid for the Act. Where a foreign signature is not one the Act recognises, the contract can still be enforceable under section 10A, and the signature is proved as a fact under section 66 of the BSA. Keep the platform's completion certificate and audit trail with the executed copy, and remember that the three-month stamping window in section 18 starts when the document is first received in India.