FAQs

api-integration

How up-to-date is the AI consultant’s knowledge?

The model is continuously synchronized with the latest API documentation and the current compliance guidelines.

What tasks can the sproof AI Consultant support?

The sproof AI Consultant provides support with, among other things: API structure questions, understanding integration options, technical workflows, authentication and signature processes, architecture decisions around sproof Sign. He serves as an additional level of knowledge and support during the entire integration process.

Will the AI advisor replace human support?

No. It shortens the path to a solution. Our technical consultants are still personally available for highly complex, individual enterprise requirements.

Who is the sproof AI Consultant for?

Our sproof AI Consultant is aimed in particular at: Developers, solution architects, product teams, IT departments, companies with their own workflow and automation projects. It is particularly helpful for teams that want to quickly evaluate or prototype integrations.

What is the sproof AI Consultant?

The sproof AI Consultant is a specialized AI Gem who supports companies and developers in the integration of sproof Sign. He has been specifically trained on the sproof ecosystem, the API structure and typical integration scenarios.

collecting-signatures

What is the sproof AI Consultant?

The sproof AI Consultant is a specialized AI Gem who supports companies and developers in the integration of sproof Sign. He has been specifically trained on the sproof ecosystem, the API structure and typical integration scenarios.

digital-identity

What does the 2026 RTR study say about the AI arms race in the identity sector?

The RTR study shows that AI acts as a multiplier: It lowers the barriers for attackers through automated deepfakes and injection attacks. Defense strategies must therefore rely on a combination of AI-supported monitoring and deterministic, hardware-based cryptography (such as eIDAS methods).

Link to the RTR study →

How can AutoIdent methods ensure the “human-in-the-loop” aspect in AI agents?

Modern AutoIdent methods use AI-based biometric and liveness checks (PAD according to ISO/IEC 30107-3) to verify the user’s physical presence and authorization in real time. This cryptographic token is then permanently linked to the agent’s workflow.

What responsibilities do banks and trust agencies have with regard to KYA?

Trusted entities must technically validate whether a transaction was initiated by a bot or a person. In addition, they must use risk analysis to determine the contract value threshold above which explicit cryptographic KYA verification (human-machine verification) is mandatory.

How does sproof protect my company from Cloud Act risks posed by U.S. competitors in the context of identity data?

Since sproof is 100% developed in Europe and hosted on ISO 27001-certified servers within the EU, there is absolutely no connection to the U.S. All subcontractors are subject exclusively to European law. Unlike US platforms, this effectively protects sensitive identity and contract data from uncontrolled access by third countries, which is permitted under laws such as the US CLOUD Act.

What is the difference between the identification process for the EUDI Wallet and the authorization process in everyday use?

Identification is the one-time, highly secure process (e.g., via sproof Ident) used to initially create a digital identity. Authorization (or authentication) is the daily approval of an action using a quick second factor, such as a push notification or passkey.

Can my company issue digital certificates (attributes) for the EUDI wallet on its own?

Yes. Companies or institutions can act as so-called issuers. For example, universities can issue digital diplomas, employers can issue digital employee IDs, and certification bodies can issue official credentials directly to users’ wallets.

How secure is the EUDI wallet?

The EUDI wallet was developed to meet high standards of security, data protection and trustworthiness. The technical specifications follow the principles of “security by design” and “privacy by design”, so that security and data protection aspects are already taken into account during development. The EUDI wallet uses certified security mechanisms and protected areas of modern smartphones to protect sensitive data and cryptographic keys. Users retain control over their identity data and decide for themselves what information is shared with authorities, companies or other organizations. In addition, the EUDI wallet supports data-saving procedures in which only the information that is actually required is disclosed. The aim is to make digital identities safe to use while protecting the privacy of users in the best possible way.

Is the use of the EUDI Wallet mandatory?

No. The use of the EUDI wallet is voluntary for citizens. No one will be obliged to use an EUDI wallet or to provide digital evidence exclusively via the wallet.

The situation is different for certain companies and service providers. As part of eIDAS 2.0, selected regulated services will be obliged to accept the EUDI wallet as a means of identification and verification in future. This applies in particular to use cases with high identity, authentication or trust requirements. For users, this means that the use of the EUDI Wallet will remain voluntary, while the number of services for which the EUDI Wallet can be used as a recognized and Europe-wide interoperable solution will increase.

With sproof Ident, a white label solution for digital identification and trust processes is already available today. We would be happy to support your organization in analyzing existing processes, evaluating EUDI wallet potential and developing a future-proof EUDI strategy.

Does the EUDI Wallet replace my current eID?

No. The EUDI Wallet will not replace existing national eID systems such as the ID Austria or the online ID function of the German ID card. Instead, it builds on these trusted identity solutions and adds new functions to them. The EUDI Wallet serves as a standardized interface for the use of digital identities and proofs of identity within the European Union. This means that national eIDs can be used more easily and across borders in future. For users, this means that existing digital identities remain relevant, while the EUDI Wallet enables access to additional proofs of identity, digital documents and pan-European use cases. It therefore expands the possibilities of existing eID systems instead of replacing them.

When is the EUDI wallet coming?

The EUDI wallet is being introduced gradually in the member states of the European Union. The legal basis was created with eIDAS 2.0, while the technical specifications and national implementations are currently being further developed.

It is currently expected that the first EUDI wallet solutions will be available from the end of 2026. However, the widespread introduction and use in all EU member states will take place gradually and will depend on the respective national implementation plans.

Companies and public authorities should already be looking at the requirements and use cases of the EUDI wallet today in order to prepare for the upcoming changes in the area of digital identities at an early stage.

With sproof Ident, a white label solution for digital identification and trust processes is already available today. We are happy to support companies in analyzing existing processes, evaluating EUDI wallet potential and developing a future-proof EUDI strategy.

digital-signing

Is an electronic signature tamper-proof?

Depending on the type of signature, electronic signatures offer a high level of protection against forgery and tampering. In the case of advanced electronic signatures (FES) and qualified electronic signatures (QES) in particular, cryptographic methods ensure that subsequent changes to the signed document can be detected.

With sproof, signature processes are also documented through a tamper-proof audit trail. This allows important information about the signature process to be recorded in a traceable and verifiable manner.

As soon as a document is digitally signed via sproof, a cryptographic hash value is applied to its content.

  • Subsequent changes: If even a single character, decimal place, or image in the PDF is changed after signing, the seal is invalidated.
  • Result: Any standard validation tool (e.g., Adobe Acrobat or the free sproof Validator) immediately reports that the document has been modified and that the signature is invalid.

What is the Digital Signature Act in Austria?

The Austrian Signature Act (SigG) originally established the legal framework for electronic signatures in Austria. However, it was repealed on June 30, 2016. Since July 1, 2016, electronic signatures have been governed in particular by the directly applicable eIDAS Regulation of the European Union and the Austrian Signature and Trust Services Act (SVG). The SVG supplements the European eIDAS requirements at the national level and regulates, among other things, electronic signatures, electronic seals, time stamps, and the requirements for trust services and their providers.

The European legal framework distinguishes between different levels of electronic signatures: the simple electronic signature (EES), the advanced electronic signature (FES), and the qualified electronic signature (QES). The type of signature required depends, in particular, on the specific use case and the legal or contractual requirements.

In Austria, ID Austria plays a central role in this context, as it enables secure digital identification and qualified electronic signatures. sproof has directly integrated ID Austria and also supports numerous other European eIDs for digital identification and signature processes.

When is an advanced electronic signature (AES) required?

An advanced electronic signature (AES) is suitable for documents with heightened liability, proof, or security requirements. It is uniquely associated with the signatory, enables the signatory’s identification, and makes any subsequent changes to the document detectable. Typical use cases include contracts, permits, personnel records, or business agreements for which a qualified electronic signature is not legally required. However, the appropriate type of signature always depends on the specific document and the applicable formal requirements. You can learn more about the differences between EES, FES, and QES in our overview of all e-signature standards.

When is a simple electronic signature (EES) required?

A simple electronic signature (EES) is suitable for documents and processes involving low legal or financial risk, where there is no legal requirement for the document to be in writing. Typical examples include internal approvals, confirmations, minutes, quotes, or simple agreements. It enables quick and straightforward signing but offers only limited assurance regarding the unambiguous identification of the signatory. The appropriate type of signature should therefore always be determined based on the specific use case. You can find an overview of EES, FES, and QES in our comparison of e-signature standards.

Can I try out sproof before making a decision?

Yes. Interested companies can try sproof sign for free for 14 days. In addition, sproof’s experts are happy to provide personalized advice and show how the platform can be optimally integrated into existing business processes. Try sproof sign now →

Why is the data location important for e-signature solutions?

Many companies want to ensure that personal data is processed exclusively within the European Union and is subject to European data protection regulations. sproof processes data exclusively in the EU and relies on European infrastructure.

What role does the U.S. CLOUD Act play in selecting an e-signature platform?

For many companies, the U.S. CLOUD Act is an important factor in selecting a software provider. Under certain conditions, the law may require U.S. companies or companies with ties to the U.S. to hand over data in response to a government order—regardless of whether that data is stored in the U.S. or abroad. That is why many organizations today examine not only the location where their data is stored, but also the company’s headquarters, the cloud infrastructure used, and the applicable jurisdiction. sproof relies exclusively on a European infrastructure. Data processing takes place within the European Union and is subject to European law. This helps companies meet high standards for data protection, compliance, and digital sovereignty.

Is DocuSign eIDAS-compliant?

Yes. DocuSign supports electronic signatures in accordance with the eIDAS Regulation. However, it is important to note that eIDAS compliance does not specify where data is processed or stored. Companies should therefore also verify in which jurisdiction their data is processed, which cloud infrastructure is used, and which data protection and compliance requirements are met. sproof supports all eIDAS-compliant signature types and processes data exclusively within the European Union on European infrastructure.

Is there a European alternative to DocuSign?

Yes. In addition to international providers, there are several European e-signature platforms. Anyone who places particular importance on data protection, digital sovereignty, and eIDAS compliance should include European solutions in their comparison. sproof is an Austrian provider that has developed its platform specifically to meet the needs of European companies.

Why is the audit trail so important for compliance managers?

The audit trail provides a complete, admissible-in-court history of the entire signature process. It documents when and by whom the document was viewed, approved, and signed, including the verification method used (e.g., two-factor authentication or qualified eID). This log serves as primary evidence during audits or legal disputes that the signature was properly created.

eudi-wallet

What does the 2026 RTR study say about the AI arms race in the identity sector?

The RTR study shows that AI acts as a multiplier: It lowers the barriers for attackers through automated deepfakes and injection attacks. Defense strategies must therefore rely on a combination of AI-supported monitoring and deterministic, hardware-based cryptography (such as eIDAS methods).

Link to the RTR study →

How can AutoIdent methods ensure the “human-in-the-loop” aspect in AI agents?

Modern AutoIdent methods use AI-based biometric and liveness checks (PAD according to ISO/IEC 30107-3) to verify the user’s physical presence and authorization in real time. This cryptographic token is then permanently linked to the agent’s workflow.

What responsibilities do banks and trust agencies have with regard to KYA?

Trusted entities must technically validate whether a transaction was initiated by a bot or a person. In addition, they must use risk analysis to determine the contract value threshold above which explicit cryptographic KYA verification (human-machine verification) is mandatory.

How does sproof protect my company from Cloud Act risks posed by U.S. competitors in the context of identity data?

Since sproof is 100% developed in Europe and hosted on ISO 27001-certified servers within the EU, there is absolutely no connection to the U.S. All subcontractors are subject exclusively to European law. Unlike US platforms, this effectively protects sensitive identity and contract data from uncontrolled access by third countries, which is permitted under laws such as the US CLOUD Act.

What is the difference between the identification process for the EUDI Wallet and the authorization process in everyday use?

Identification is the one-time, highly secure process (e.g., via sproof Ident) used to initially create a digital identity. Authorization (or authentication) is the daily approval of an action using a quick second factor, such as a push notification or passkey.

Can my company issue digital certificates (attributes) for the EUDI wallet on its own?

Yes. Companies or institutions can act as so-called issuers. For example, universities can issue digital diplomas, employers can issue digital employee IDs, and certification bodies can issue official credentials directly to users’ wallets.

How secure is the EUDI wallet?

The EUDI wallet was developed to meet high standards of security, data protection and trustworthiness. The technical specifications follow the principles of “security by design” and “privacy by design”, so that security and data protection aspects are already taken into account during development. The EUDI wallet uses certified security mechanisms and protected areas of modern smartphones to protect sensitive data and cryptographic keys. Users retain control over their identity data and decide for themselves what information is shared with authorities, companies or other organizations. In addition, the EUDI wallet supports data-saving procedures in which only the information that is actually required is disclosed. The aim is to make digital identities safe to use while protecting the privacy of users in the best possible way.

Is the use of the EUDI Wallet mandatory?

No. The use of the EUDI wallet is voluntary for citizens. No one will be obliged to use an EUDI wallet or to provide digital evidence exclusively via the wallet.

The situation is different for certain companies and service providers. As part of eIDAS 2.0, selected regulated services will be obliged to accept the EUDI wallet as a means of identification and verification in future. This applies in particular to use cases with high identity, authentication or trust requirements. For users, this means that the use of the EUDI Wallet will remain voluntary, while the number of services for which the EUDI Wallet can be used as a recognized and Europe-wide interoperable solution will increase.

With sproof Ident, a white label solution for digital identification and trust processes is already available today. We would be happy to support your organization in analyzing existing processes, evaluating EUDI wallet potential and developing a future-proof EUDI strategy.

Does the EUDI Wallet replace my current eID?

No. The EUDI Wallet will not replace existing national eID systems such as the ID Austria or the online ID function of the German ID card. Instead, it builds on these trusted identity solutions and adds new functions to them. The EUDI Wallet serves as a standardized interface for the use of digital identities and proofs of identity within the European Union. This means that national eIDs can be used more easily and across borders in future. For users, this means that existing digital identities remain relevant, while the EUDI Wallet enables access to additional proofs of identity, digital documents and pan-European use cases. It therefore expands the possibilities of existing eID systems instead of replacing them.

When is the EUDI wallet coming?

The EUDI wallet is being introduced gradually in the member states of the European Union. The legal basis was created with eIDAS 2.0, while the technical specifications and national implementations are currently being further developed.

It is currently expected that the first EUDI wallet solutions will be available from the end of 2026. However, the widespread introduction and use in all EU member states will take place gradually and will depend on the respective national implementation plans.

Companies and public authorities should already be looking at the requirements and use cases of the EUDI wallet today in order to prepare for the upcoming changes in the area of digital identities at an early stage.

With sproof Ident, a white label solution for digital identification and trust processes is already available today. We are happy to support companies in analyzing existing processes, evaluating EUDI wallet potential and developing a future-proof EUDI strategy.

legal-validity

When is an advanced electronic signature (AES) required?

An advanced electronic signature (AES) is suitable for documents with heightened liability, proof, or security requirements. It is uniquely associated with the signatory, enables the signatory’s identification, and makes any subsequent changes to the document detectable. Typical use cases include contracts, permits, personnel records, or business agreements for which a qualified electronic signature is not legally required. However, the appropriate type of signature always depends on the specific document and the applicable formal requirements. You can learn more about the differences between EES, FES, and QES in our overview of all e-signature standards.

When is a simple electronic signature (EES) required?

A simple electronic signature (EES) is suitable for documents and processes involving low legal or financial risk, where there is no legal requirement for the document to be in writing. Typical examples include internal approvals, confirmations, minutes, quotes, or simple agreements. It enables quick and straightforward signing but offers only limited assurance regarding the unambiguous identification of the signatory. The appropriate type of signature should therefore always be determined based on the specific use case. You can find an overview of EES, FES, and QES in our comparison of e-signature standards.

plans-billing

Do I need to provide a credit card?

No. You don’t need a credit card to start the sproof sign Business Trial. All you have to do is fill out the registration form. Our experts will then set up your trial account and personally guide you through the next steps so you can get started quickly and successfully.

Is the sproof sign Business Trial really free?

Yes. You can try the Business Trial for free for 14 days. There are no charges during the trial period.

What is the difference between the Business Trial and the Free License?

The Business Trial is designed for businesses and provides full access to all features for 14 days, including API test tokens, team features, and professional support. The Free License is permanently free and intended for personal use by individuals.

security-conformity

Why should companies rely on European tools for electronic signatures?

Tools and platforms from Europe have long since matched the power of US tools. US tools can never guarantee the secure storage of sensitive data. The surveillance laws of the USA contradict the fundamental rights of the EU. sproof is headquartered in Austria and specializes in the highest level of data protection.

trust-service-provider

What does the 2026 RTR study say about the AI arms race in the identity sector?

The RTR study shows that AI acts as a multiplier: It lowers the barriers for attackers through automated deepfakes and injection attacks. Defense strategies must therefore rely on a combination of AI-supported monitoring and deterministic, hardware-based cryptography (such as eIDAS methods).

Link to the RTR study →

Sign a PDF for free—right now!

Create your free sproof sign account to sign documents in full compliance with the GDPR and eIDAS. Always free for personal use; no credit card required.

Upload document
This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.