primesign REMOTE SIGNING

• Qualified signatures are legally equivalent to handwritten signatures throughout the EU and are therefore the first choice for signing contracts online.
• primesign offers qualified certificates only to always ensure the highest level of legal certainty for customers.
• Our credo: to make qualified signing as easy as possible!

• primesign REMOTE SIGNING SERVICE is the qualified remote signature solution from PrimeSign GmbH. primesign MOBILE is the former name of our REMOTE SIGNING SERVICE.
• With primesign MOBILE, documents are signed with a qualified signature. You can conveniently trigger signatures with your mobile phone without having to install an additional app.
• The basis for qualified signing with primesign is a so-called qualified signature certificate (primesign certificate). Its issuance requires a secure identification of the applicant.
• PrimeSign GmbH is a qualified trust service provider and is authorized to issue eIDAS-compliant qualified signature certificates.

• There is no need to search for a local VDA in each country
• eIDAS guarantees mutual recognition of qualified signatures and seals within EU/EEA countries
• Reduce complexity and rely on primesign as your eIDAS TSP with international focus and worldwide availability
• Available globally - users from 169 countries

Yes, additional attributes can be added to the employee certificate (on request). The attributes are automatically added for all your employees during the online registration process of primesign.

Give your signatures even more meaning - by adding the company name, role within the company, e-mail address, etc. to your certificates.

More information: primesign SEAL

• primesign is eIDAS-compliant and on the EU trust list. This means that documents signed with primesign are automatically trustworthy in Adobe Acrobat Reader (green check mark) and numerous other applications.
• EU Trusted List (EUTL): https://eidas.ec.europa.eu/efda/tl-browser/

• Use of selected eIDs directly for signing via "Sign with eID"
• Use of selected eIDs in onboarding as an alternative to video identification

Currently supported eIDs:

German Identity Card	ID Austria

• Your personal primesign signature certificate is usually valid for 5 years .
• primesign certificates created with "Sign with eID" can only be used once for signing and are therefore valid only for a few minutes.

If you want to continue using primesign, we must issue a new primesign certificate. The issuance of a new primesign certificate can be performed online, requiring a confirmation with your existing primesign certificate. In some cases, a new video identification may also be required for security reasons, especially if the identification document used for the original identification has expired. Depending on the type of product purchased, additional costs may also be incurred for renewing your certificate.

Your login data will not change. You can use your new primesign certificate as usual.

Yes, multiple documents can be signed in one step, i.e. with just one signature authorization. Each of the uploaded documents gets signed.

With primesign, selected eIDs such as the German Identity Card or ID Austria can be used to authorize a signature. Thus, users can sign instanly and without prior registration with primesign.

Yes, with primesign you can sign immediately and without prior user registration with your German Identity Card or ID Austria.

This requires the purchase of an ENTERPRISE ACCOUNT.

Currently, the following eIDs are available for the signature:

German Identity Card	ID Austria

• SIGN INSTANLY: Sign INSTANLY with your existing eID. No registration or further authentication with primesign required.
• UNIFIED TRUST: Users always sign with primesign certificates, regardless of which eID is used. This results in the following advantages:
  • Unified liability: One legal framework, one responsible trust partner - primesign TRUST CENTER.
  • Long-term verifiability: Creation of long-term verifiable (30+ years) and legally binding qualified signatures (if supported by the respective signature system).
  • Confidentiality: Documents completely remain on the signature system and are not sent to extern trust centers.

• UP-TO-DATE: Users sign with certificates immediately and "on-the-fly" based on current data from a valid eID.
• BATCH SIGNATURE CAPABILITY: "Sign with eID" allows for the use of eIDs for batch signatures (if supported by the respective signature system).

• In order to use "Sign with eID", please purchase an ENTERPRISE ACCOUNT.
• Once your ENTERPRISE ACCOUNT has been activated, your employees and invited (possibly external) signers can sign with their existing eID immediately and without prior user registration with primesign.

To use the German Identity Card, the following requirements must be met:

• AusweisApp2 ( or a comparable application)
• Card reader or smartphone (with NFC) for reading the ID card.
• Set PIN. You have set a self-chosen, six-digit PIN.
• ID card with activated eID function. The following ID cards can be used:
  • ID card
  • eID card for EU/EEA citizens
  • Electronic residence permit
  
  The eID function is active on your ID card if the following logo is visible on the back of the card:

• In our support area you will find answers to frequently asked questions.

• If you have any further questions, please contact our support team:

  • With PREMIUM SLA:
    premiumsupport.cryptas.com
  • Alternatively:
    basicsupport@cryptas.com

• Do you have questions about the primesign signing certificate? Visit our support page with a collection of answers to frequently asked questions.
• If your question is not answered, please contact our support team:
  • With PREMIUM SLA:
    premiumsupport.cryptas.com
  • Alternatively:
    basicsupport@cryptas.com

• Good to know: primesign is a member of the Cloud Signature Consortium. The Cloud Signature Consortium is an international association of experts from academia and the industrial sector with the common goal of standardize highly secure and legally valid digital signatures.

Purchase your personal registration code for the issuance of a primesign certificate in our online store or contact our sales department.

Good to know: You can use a registration code for yourself personally or distribute it internally & externally, e.g. to your employees, customers or partners - worldwide, no minimum purchase, no framework agreement. One registration code per user is required.

• Go to the following URL: https://onboarding.prime-sign.com
• Enter the unique registration code received upon purchase, click on LOG IN and fill in your registration data.
• After you have filled in your registration data, you will be asked to identify yourself. You can identity yourself either via video boarding with your government-issued ID or via eID (e.g. ID Austria).
• After successful identification, set your login data for primesign. You will then receive your qualified primesign signature certificate. This is immediately ready for use.

Issuing a primesign certificate can be started around the clock from home or the office and takes only a few minutes. Identification by video is available daily  from 7 am to 10 pm (CET).

The issuance of a primesign certificate takes only a few minutes and can be started around the clock from home or the office.

Identification by video is available daily from 07 am to 10 pm (CET).

Identification via eID can be done at any time.

Yes, you can use your existing eID for identification in the registration process (onboarding) at primesign.

Currently supported eIDs:

German Identity Card	ID Austria

 

• Do you have questions about registering for primesign? Visit our support page with a collection of answers to frequently asked questions.
• If your question is not answered, please contact our support team:
  • With PREMIUM SLA:
    premiumsupport.cryptas.com
  • Alternatively:
    basicsupport@cryptas.com

• primesign supports the signature of multiple documents in one step.
• Billing per signature transaction, regardless of whether 1 or 10 documents are signed in one step. Transaction costs are only incurred once.
• Only successful signatures are charged

• FLAT-FEE: Includes registration/ certificate issuance and an unlimited number of signature transactions at a fixed price per year (fair-use principle).
• PAY-PER-USE: One-off costs for registration/certificate issuance plus monthly billing of signature transactions.
• CREDIT 5/10: One-time costs for registration /certificate issue and a maximum of 5 or 10 signature transactions.
  
  Good to know: "Sign with eID" does not require registration with primesign. There are no registration costs, only signature transactions are invoiced.
  
  Purchase your preferred variant in our online shop or contact our sales department.

In the European Union, the eIDAS Regulation (Regulation (EU) No. 910/2014) regulates the use of electronic signatures - and thus also qualified electronic signatures.

It forms the legal basis for the areas of "electronic identification, electronic signatures and trust services" throughout the EU.

Good to know: eIDAS regulations for (qualified) electronic signatures are also accepted internationally.

• primesign is eIDAS-compliant
• PDF signatures created by primesign are PAdES compliant and LTV-enabled.
• Support for timestamps and ETSI TS 103 172 V2.2.2.2 Level "LT".

• Identity data
• Identity verification data (e.g. ID scan for video identification)
• Certificate data

We operate our infrastructure in certified bank data processing centers in Austria. primesign is 100% GDPR-compliant, keeps your data secure and us it only within the scope of the legal obligation as a trust service provider. Under no circumstances will data be passed on to third parties.

A cloud service is used for the long-term archiving of identification data. Before the data enters the cloud, it is encrypted securely and hardware-supported by primesign. This ensures that this data can only be used by primesign

• When using our REMOTE SIGNING SERVICE, documents always remain on the signature system. primesign only receives the hash value (fingerprint) of the documents to be signed and cannot draw any conclusions about the content of the documents.
• Identity data required for issuing certificates is always stored securely in our infrastructure in certified bank data processing centers in Austria. Data storage for 30 years+ to enable long-term verifiability.

When signing with primesign, documents always remain on the signature system and are not transmitted to the primesign remote signing infrastructure (primesign TRUST CENTER). primesign only receives the so-called hash value (fingerprint) of the documents to be signed. The document content cannot be derived from this (also applies to primesign signatures with eIDs).

Whether documents remain in the customer's IT infrastructure is therefore determined by the signature system used.

If primesign is used in conjunction with a primesign SIGNATURE SERVER on-premise setup, we can guarantee that documents remain completely in the customer's IT infrastructure during the entire signature process.

If primesign is used with Adobe Acrobat Sign, the documents remain exclusively with Adobe Acrobat Sign.

primesign is a remote signing service. Here, a separate secret signature key is securely stored for each user in a hardware security module in the high-security area of the primesign TRUST CENTER. In addition to a secret signature key, a public key is also created. This public key, together with the user's personal data (name, e-mail address if applicable and other attributes), forms the signature certificate.

primesign ensures that only the legitimate user is allowed to use the secret signature key. The user enters the password they have chosen and authorizes each signature request with a transaction number. This transaction number (TAN) is sent to the user's mobile phone via SMS and is only valid for 5 minutes and only for triggering this one signature request.

PrimeSign GmbH is a qualified trust service provider and is thus subject to constant monitoring by the regulatory authority.

Qualified electronic signatures can be verified using standard PDF tools, such as Adobe Acrobat.

Another option for signature verification is provided by the online verification service of the Austrian Regulatory Authority for Broadcasting and Telecommunications (RTR), the supervisory body for trust service providers: www.signaturpruefung.gv.at