# Digital Signature for an Insurance Agency: Validity, Evidence and What to Check in a Vendor

> What counts as an electronic signature in Israel, why legal validity depends on the document and the requirement, what evidence to keep, and a checklist for choosing a signing solution for an insurance and pension agency.

- Published: 2026-10-25 · Updated: 2026-10-25
- Insurance · 10 min read · The Financi team
- Canonical page: https://www.financi.co.il/en/articles/digital-signature-insurance-agency

## The short version

- Israel has an Electronic Signature Law that distinguishes an ordinary electronic signature from secure and certified ones. Not every document needs the same level.
- The answer to “is the signature valid?” depends on the specific document and the requirement that applies to it, not on the tool's name. Confirm the requirement with the Authority and a compliance adviser.
- Beyond validity, be able to prove who signed, when, on exactly what, and that the document was not changed afterwards.
- A good solution returns a signed, sealed document and a ledger you can show, not just a picture of a signature.
- Before choosing a vendor ask: what comes back, what is kept, for how long, and how you get it all back.

Signing on paper does three things: the client comes to the office or waits for the courier, the agency waits, and the document gets lost on the way. A digital signature shortens all of that, but it raises a question you cannot skip: **can it be relied on, and what is left in our hands if someone disputes it?** This article explains how to think about the question and what to check in a vendor. It continues [the guide to digital forms and e-signing in an agency](https://www.financi.co.il/en/articles/digital-forms-and-signatures-for-agencies), which describes the flow from link to signed document.

> **General information, not legal advice.** This article presents principles and does not determine the legal validity of a specific document. Which signatures are enough for which documents in insurance and pensions is set by law and the regulator's instructions, and is updated. Check the exact requirement with the Capital Market Authority and your compliance adviser.

## What counts as an electronic signature

The Electronic Signature Law, 5761-2001, is the framework in Israel, and the Ministry of Justice publishes its text and the 2018 amendment (linked at the end). Broadly, the law recognises that a signature can be electronic, and distinguishes several levels. The table explains the general differences. It is not an assessment of any specific document.

*A general distinction. All exact conditions are set by the law and the Authority's instructions*

| Type | In plain words | Why it matters to an agency |
| --- | --- | --- |
| Electronic signature (ordinary) | Any electronic mark or data attached to a message and used to sign, for example a finger signature on a screen | Convenient and fast, and its evidence rests mainly on the records around it |
| Secure electronic signature | A signature uniquely linked to the signer that identifies them and lets changes to the document after signing be detected | Makes a claim of “it was not me” or “the document was changed” harder |
| Certified electronic signature | A secure signature made with a certificate issued by a registered certifying party | The highest level of certainty, suitable where a specific requirement demands it |

> **The level depends on the document.** One document may be satisfied by an ordinary signature with records, and another may require a higher level. Do not assume a solution that suits one form suits all of the agency's forms, and do not rely on a vendor's general claim of “legally valid” without asking: for which document, and on the basis of which requirement.

## Beyond validity: what you should be able to prove

Even when the signature is valid, if someone disputes it you will be asked for evidence. Five questions worth having a recorded answer to:

1. **Who signed?** How the client was identified before signing: a personal link, a code, an identity document, or a combination.
2. **When?** A timestamp you can rely on, not a typed date.
3. **On exactly what?** The precise version of the document the client saw, including the wording shown to them.
4. **Did anything change afterwards?** A way to detect a change to the document after signing.
5. **What did they see and approve before signing?** Explanations, declarations and consents shown along the way.

## Seal, audit trail and retention

Three mechanisms combine to answer those five questions. It helps to understand them even if the vendor handles them for you:

| Mechanism | What it does | What to ask the vendor |
| --- | --- | --- |
| A seal on the final document | Ties the signed document to a cryptographic check, so a change after it is detected | What exactly is signed, with which key, and where the key is managed |
| An audit trail | A chronological record of events in the process: link opened, viewed, signed, sent | Whether the trail can be altered, and who can see it |
| Retention | Keeping the document and the trail over time | For how long, where, and in what format you get them back |

This is how Financi Forms works, as its module page describes: the client fills in and signs with a finger on a phone, with no login and no app, and the agency receives a signed, sealed PDF with an AWS KMS seal and a 7-year WORM ledger. [The module page](https://www.financi.co.il/en/forms) describes the flow. Whether that is enough for a specific document of yours is a question for the Authority and your compliance adviser, not for the vendor.

## How to choose a signing vendor: seven questions

**Questions for a signing vendor**

- [ ] Which type of signature is the solution designed for, and for which documents is it used today by similar agencies?
- [ ] What comes back to us at the end: a signed document, a seal, an audit trail, and all of them together?
- [ ] How is the client identified before signing, and can extra verification be added where a document needs it?
- [ ] What does the audit trail look like, and who can change it?
- [ ] How long are the documents and the trail kept, and how do we get them in a format we can store ourselves?
- [ ] What happens if the vendor disappears or we leave: how do we get all the documents and evidence?
- [ ] Does the client need to log in or download an app, and what does that do to completion rates?

## From the client's side: what makes signing a good experience

- **One link, from a phone.** Every extra step is drop-off: an app, registration, a password.
- **An explanation before the form.** What is being signed, why, and what happens next, in plain sentences.
- **Saved progress.** A client who stopped halfway should return to the same point, not start over.
- **A copy for the client.** Every signing ends with the client receiving what they signed.
- **Accessibility.** Readable text on a phone, contrast, and forms that can be filled in Hebrew and English.

## Recurring scenarios, and how to handle them

Signing one document without a hitch is easy. What separates a good solution from a mediocre one is what happens when something deviates. Ask the vendor about each scenario, and try them in a pilot:

| Scenario | What should happen | What to clarify with the compliance adviser |
| --- | --- | --- |
| The client started and did not finish | The link stays active for a defined time and the client returns to the same point | How soon the link expires and what happens to the data already filled in |
| The agency corrects a document after sending | A new version is created and the client signs it, not the old one | Whether the old version is kept and in what status |
| Several signers on one document | Each signer has separate identification and separate records | Who must sign, and in what order |
| Signing on behalf of another person | It is recorded who actually signed and under what authority | Which power-of-attorney or representation documents are required |
| A client who struggles with the phone | An option to complete with an agent alongside, without harming the record | Whether extra documentation is needed for the agent's involvement |
| A dispute over a signature | A signed document, a seal and an audit trail can be produced | Who represents the agency, and what is handed to the other side |

Do not settle for general answers from the vendor. Ask to see each scenario demonstrated in the system, and check what the trail records in each.

## What the law says: four conditions, and who carries the burden of proof

The table above describes the levels in plain words. The legal text is more precise, and worth knowing even if an adviser drafts the requirement for you. Under section 1 of the Electronic Signature Law, an electronic signature is electronic data or an electronic mark attached to or linked with an electronic message. To be **secure**, it meets four conditions: it is unique to the holder of the signing device, allows prima facie identification of that holder, was produced with a device under the holder's sole control, and makes it possible to detect any change made to the message after signing. An **approved** signature is a secure signature for which an approving body has issued an approved electronic certificate.

- **Admissibility (section 3).** An electronic signature is not rejected merely because it is electronic. A message signed with a secure signature is admissible as evidence and is prima facie proof that it was not altered after signing.
- **Burden of proof (section 3A).** Where the agency set the way of signing and the other party says they did not sign, the agency may be required to prove that they did. The section does not apply to an approved signature. That is why the record described above matters.
- **A statutory signature requirement (section 2).** Where a law requires a person's signature on a document, it can be met in an electronic message with an approved signature, or with another electronic signature that gives sufficient certainty for the purpose of the requirement. For some document types, such as a will, the First Schedule sets special rules.

In practice, ‘which signature do we need?’ has two separate answers: what the law requires for the document type, and what you can prove if asked. The first rests on the law and the rules that apply to the document. The second rests on what the system keeps: who signed, when, what exactly was signed, and that the document was not changed afterwards.

> **About the link to the law.** The text linked at the end of this article comes from Wikisource and may lag behind amendments. Before relying on a section, check the current text on the Knesset site or a legal database, and confirm the requirement for the specific document with the Authority and your compliance adviser.

## Common mistakes

- **Assuming every digital signature is equal.** Level, identification and evidence differ between solutions.
- **Settling for a picture of a signature.** An image of a signature without a seal and a trail is weak evidence.
- **Not checking the exit.** Documents you cannot take out are a risk.
- **Sending documents on a personal WhatsApp.** The document leaves the agency's access control.
- **Skipping the compliance adviser.** The requirement for a specific document is set in law, not in marketing.

## A sample signing journey: from proposal to closed file

This is an example of a reasonable process in an agency. The order and steps vary by document type and the rules that apply to it, so confirm it with your compliance adviser before adopting it.

- **Before sending** — **Check the version and the fields**: The right document, in its current version, with every field the client has to fill in.
- **Sending** — **Send through the channel the client chose**: And record to whom, when and through which channel the document was sent.
- **Opening** — **Check that the document was opened**: If the client has not opened it after a reasonable time, reach out through another channel instead of resending the same link again and again.
- **Signing** — **Receive the signature and record it**: Who signed, when, and how they were identified, as far as the provider and the rules allow.
- **After signing** — **Give the client a copy**: And keep the signed document and its signature record in the client card.
- **Closing** — **Update the status and the next task**: The signed document unlocks the next step instead of sitting stuck in an inbox.

> **A measure worth tracking.** How many documents stay “sent, not signed” for more than a week. That number shows where the process gets stuck.

## Frequently asked questions

### What do we do when the client cannot sign from their phone?

Offer an alternative channel, such as a computer or signing in a meeting, in line with the methods the provider and the rules allow. Record which channel the document was actually signed through.

### Can one document be sent for signature to several people?

Yes, for documents meant for it and when the provider supports identification and a signing order for each signer. Make sure the signature record shows each signer separately and that the order is set in advance.

### Is a digital signature valid in Israel?

The Electronic Signature Law, 5761-2001, recognises electronic signatures and distinguishes levels. Whether a given signature is enough for a given document depends on the requirement that applies to it, so confirm with the Authority and a compliance adviser.

### What is the difference between an ordinary, secure and certified signature?

An ordinary signature is any electronic mark used to sign. A secure one is uniquely linked to the signer and lets a change be detected. A certified one is made with a certificate from a registered certifying party.

### Is signing with a finger on a screen a signature?

It is an ordinary electronic signature. Its evidence rests on the identification, the timestamp, the seal on the document and the audit trail around it.

### What should I keep to prove a signature?

The signed document, the seal, an audit trail with timestamps, how the client was identified, and the exact version shown to them.

### How long must signed documents be kept?

We have no general number. The retention period is set by document type and law, and you confirm it with your compliance adviser.

### Does the client need an app to sign?

It depends on the solution. In Financi Forms the client signs from a phone with no login and no app.

> **Want to see a signed form with a seal and a ledger?** Book a demo and we will walk through the flow from a link to a signed, sealed PDF, and tell you what Financi does not do. [Book a demo](https://www.financi.co.il/en#contact)

## Sources and further reading

- [Electronic Signature Law: the text (Wikisource; check against the current text)](https://he.wikisource.org/wiki/%D7%97%D7%95%D7%A7_%D7%97%D7%AA%D7%99%D7%9E%D7%94_%D7%90%D7%9C%D7%A7%D7%98%D7%A8%D7%95%D7%A0%D7%99%D7%AA)
- [Ministry of Justice (gov.il): text of the Electronic Signature Law including the 2018 amendment (PDF, Hebrew)](https://www.gov.il/BlobFolder/generalpage/electronic_signature_law2/he/ELECTRONIC_law%203%202018.pdf)
- [gov.il: Israel government services and information](https://www.gov.il)

---

*The information in this article is general only and is not financial, pension, legal or tax advice, nor a substitute for personal advice. Demos and calculators are illustrative models: your numbers will differ.*