Are Electronic Signatures Legally Binding? The ESIGN Act and UETA, Explained Plainly
Electronic signatures have been enforceable in the US since 2000. What decides whether yours survives a challenge is not the technology — it is intent, consent, attribution, and the record you kept.
The short version
- Yes. Under the federal ESIGN Act (2000) and state UETA, a signature or contract cannot be denied legal effect solely because it is electronic.
- Five things decide whether it holds up: intent to sign, consent to transact electronically, attribution to the signer, association with the record, and retention of an accurate reproducible copy.
- A narrow set of documents is carved out — wills, most family-law matters, certain court documents, and specific consumer notices such as eviction, foreclosure, and utility cut-off.
- Disputes are almost never about whether e-signatures are legal. They are about proving who signed what, and when — which is an evidence problem, not a technology problem.
On this page
- Two laws, working together
- UETA — the state layer (1999)
- ESIGN — the federal layer (2000)
- The five requirements that actually matter
- 1. Intent to sign
- 2. Consent to do business electronically
- 3. Attribution — connecting the signature to a person
- 4. Association with the record
- 5. Record retention
- What is excluded from ESIGN
- What actually goes wrong in practice
- How strong does your process need to be?
- Outside the United States
- The short answer, restated
Electronic signatures are legally binding in the United States. The federal Electronic Signatures in Global and National Commerce Act — the ESIGN Act — took effect on 1 October 2000, and it says that a signature, contract, or record "may not be denied legal effect, validity, or enforceability solely because it is in electronic form."
That has been settled law for over two decades. The real question, and the one worth your time, is different: what makes a particular electronic signature stand up when the other side says they never agreed?
Two laws, working together
US electronic signature law rests on two instruments that overlap heavily.
UETA — the state layer (1999)
The Uniform Electronic Transactions Act is a model law drafted by the Uniform Law Commission for states to adopt. It has been enacted in 49 states plus the District of Columbia, Puerto Rico, and the US Virgin Islands. New York is the outlier — it has its own equivalent, the Electronic Signatures and Records Act (ESRA), which reaches substantially the same result.
UETA is the law most commercial e-signature questions are actually decided under, because most contracts are governed by state law.
ESIGN — the federal layer (2000)
The ESIGN Act applies to transactions in interstate or foreign commerce. It sets a national floor so no state can refuse to recognise electronic signatures, and it adds consumer-protection requirements that UETA does not contain.
Where a state has adopted UETA in its uniform form, ESIGN largely defers to state law. Where a state has not, or has modified it, ESIGN can preempt. In practice, if you satisfy the requirements below you satisfy both.
The five requirements that actually matter
Strip away the statutory language and there are five conditions. Miss one and you have a signature that is legal in principle but hard to enforce in practice.
1. Intent to sign
The signer must have meant to sign. This is the same requirement as a wet-ink signature — a name written on a document by accident does not bind anyone.
In practice this means the act of signing needs to be deliberate and unambiguous: clicking a clearly labelled button, typing a name into a field marked as a signature, drawing a mark in a signature box. Intent is undermined when the signing action is buried, pre-ticked, or easily mistaken for something else.
2. Consent to do business electronically
Both parties must agree to transact electronically. Between businesses this is usually inferred from conduct — if a client emails you a signed PDF, they have consented.
With consumers, ESIGN is stricter. Where a law requires that information be given to a consumer in writing, you must obtain affirmative consent to receive it electronically, and before that consent you must disclose:
- That they have the right to receive the record on paper, and how to request it
- Whether consent covers just this transaction or an ongoing relationship
- How to withdraw consent, any conditions or fees, and what happens if they do
- The hardware and software they need to access and retain the records
- How to update their contact details
ESIGN also requires that consumer consent be given in a way that reasonably demonstrates the consumer can actually access the electronic records — which is why signing platforms confirm consent inside the same interface the document is delivered in.
3. Attribution — connecting the signature to a person
UETA provides that an electronic signature is attributable to a person if it was the act of that person, and that this may be shown "in any manner, including a showing of the efficacy of any security procedure applied."
That is the load-bearing sentence in most disputes. It means attribution is proved by evidence about your process, not by the appearance of the signature. Useful evidence includes:
- A unique link sent to a verified email address that only the signer controls
- A one-time code sent to the signer's phone
- IP address and device information captured at signing
- The signer's own subsequent conduct — paying the deposit, starting work, taking possession
4. Association with the record
The signature must be attached to, or logically associated with, the document it signs. It is not enough to have a signature somewhere and a contract somewhere else.
This is where emailing a PDF back and forth gets weak. If three versions of a proposal circulated and the signature page is a separate file, proving which version was signed becomes genuinely difficult. A signing flow that seals the signature into the exact document presented removes the argument entirely.
5. Record retention
Both ESIGN and UETA require that the electronic record be capable of being retained and accurately reproduced by everyone entitled to it. A system that shows a contract once and never again does not satisfy this.
Practically: the signer must be able to download or receive a copy, and you must be able to produce the same document years later, unchanged.
The record to keep for every signed contract
- The final signed document, exactly as executed
- Timestamps for when it was sent, opened, and signed
- The email address and any second factor used by each signer
- IP address and device details captured at signing
- The consent-to-electronic-records disclosure the signer accepted
- A complete audit trail showing nothing changed after signature
What is excluded from ESIGN
ESIGN carves out categories where electronic signatures do not get the same protection. These generally still require paper, wet ink, or a specific statutory process.
| Excluded category | Examples |
|---|---|
| Testamentary documents | Wills, codicils, testamentary trusts |
| Family law | Adoption, divorce, and other matters of family law |
| Court documents | Court orders, notices, pleadings and other official court filings |
| Certain consumer notices | Cancellation of utility service; default, foreclosure, eviction or repossession notices on a primary residence; cancellation of health or life insurance benefits |
| Health and safety notices | Product recall notices affecting health or safety |
| Hazardous materials | Documents required to accompany transport of hazardous or dangerous materials |
| Most of the UCC | Uniform Commercial Code provisions other than section 1-107, section 1-206, and Articles 2 and 2A |
Beyond ESIGN, some transactions carry state-specific formalities — notarisation, witnesses, recording with a county office. Real estate deeds are the common example. Electronic notarisation is now permitted in a majority of states, but the rules differ and the county recorder may have its own requirements.
What actually goes wrong in practice
In the overwhelming majority of disputes, nobody argues that electronic signatures are invalid. The arguments are evidential, and they cluster into four patterns.
| The challenge | What defeats it |
|---|---|
| "That was not me — someone else used my email" | A second factor at signing (SMS code), IP and device capture, plus conduct consistent with agreement |
| "I never saw that clause — the document was changed" | A tamper-evident sealed copy of the exact version presented, and an audit trail with no post-signature edits |
| "I never agreed to sign electronically" | A recorded consent disclosure the signer accepted before signing |
| "I do not have a copy, so I cannot confirm what it said" | Proof a retainable copy was delivered, and your ability to reproduce the original |
Notice that none of these are solved by fancier cryptography. They are solved by process and record-keeping.
How strong does your process need to be?
Match the effort to the exposure. Over-engineering a $400 job wastes your time; under-engineering a $90,000 build is a genuine risk.
| Value / risk | Reasonable approach |
|---|---|
| Under about $1,000, ongoing client | Emailed PDF with a signature image. Keep the full email thread. |
| $1,000–$25,000, or a new client | A signing flow with verified email, timestamps, and a sealed final document |
| Over $25,000, multiple parties, phased payments | Signing flow plus a second identity factor, and a stored audit trail per signer |
| Regulated filings, or a counterparty who requires it | Certificate-based digital signature — nothing else will be accepted |
| Wills, divorce, court filings, eviction notices | Do not sign electronically. Follow the statutory process. |
Outside the United States
If you contract across borders, the governing-law clause decides which regime applies, and the answers differ.
- European Union — eIDAS recognises three tiers: simple, advanced, and qualified. A qualified electronic signature has the same legal effect as a handwritten one by statute; the lower tiers cannot be denied admissibility solely for being electronic.
- United Kingdom — electronic signatures are valid for most contracts; deeds have additional witnessing requirements.
- Canada — PIPEDA plus provincial legislation, broadly similar to the US model.
- Australia — the Electronic Transactions Act, with state equivalents.
- India — the Information Technology Act, which is notably stricter, generally requiring signatures issued through licensed certifying authorities.
The safe rule for cross-border work: confirm what the governing jurisdiction requires before you rely on a simple electronic signature.
The short answer, restated
Electronic signatures are legally binding in the United States and have been since 2000. Your contracts are enforceable if the signer intended to sign, both parties consented to electronic transacting, the signature can be attributed to the signer, it is bound to the document it signs, and everyone can retain an accurate copy.
Check whether your document type is excluded, keep a real audit trail, and scale the rigour to the money at stake.
Frequently asked questions
Can someone deny they signed an electronic contract?
They can claim it, as they can with a wet-ink signature. Whether it works depends on your evidence. A verified email link, a one-time code, IP and timestamp capture, a sealed final document, and conduct consistent with agreement (paying a deposit, letting you start work) make denial very difficult. A signature image pasted into an emailed PDF, with no other record, makes it much easier.
Do both parties need to sign electronically?
No. Mixed execution is common and valid — one party signs on paper and scans it, the other signs electronically. What matters is that each signature is valid on its own terms and that both are associated with the same document.
Is a signature typed at the end of an email legally binding?
It can be. Courts have found that a name typed at the end of an email, in a context showing intent to be bound, satisfies the signature requirement. The weakness is not validity but proof: email threads get edited in the retelling, and it is often unclear which version of the terms was agreed. Use it for informal approvals, not for the contract itself.
Does an electronic signature need to be witnessed or notarised?
Only if the document type requires it — some deeds, powers of attorney, and affidavits do. Most states now authorise remote online notarisation, but the requirements vary and the receiving office (a county recorder, for example) may impose its own. Check before assuming an electronic notarisation will be accepted.
How long should I keep signed contracts and audit trails?
At minimum, through the applicable statute of limitations for contract claims in your state — commonly four to six years, and longer in some. Many businesses keep them for seven years to align with tax record-keeping. Retain the audit trail alongside the document; a signed PDF without its trail is much weaker evidence.
Is a scanned copy of a wet-ink signature an electronic signature?
The scan is an electronic record of a handwritten signature, and it is generally enforceable. It carries the same evidential weakness as any emailed PDF: nothing inherently ties the scan to a particular version of the document or to the moment of signing.