What Makes a Digital Contract Hold Up: The Audit Trail
Akash Kore
· Founder & Product Architect· 3 min read
Digital signing is legally recognised, but recognition and provability are different things. When a digitally signed contract is challenged, what persuades a court is not the picture of a signature — it is the record of how the signature was applied.
- ✓Section 65B requires a certificate for electronic records to be admissible.
- ✓The audit trail — who, when, from where, authenticated how — is the evidence.
- ✓A document hash proves the content has not changed since signing.
- ✓Signature images carry little evidentiary weight on their own.
Section 65B
Electronic records are admissible under Section 65B of the Evidence Act, subject to a certificate identifying the record, describing how it was produced, and confirming that the computer was operating properly.
Without the certificate, the record may be inadmissible. The requirement has been the subject of substantial litigation, and the safe course is to be able to produce one.
What the trail should contain
- Identity of each signer and the method by which they were authenticated.
- Timestamp of each action — sent, viewed, signed — ideally from a trusted time source.
- IP address and device information for each action.
- A cryptographic hash of the document at the moment of signing.
- The sequence of the signing workflow, including any rejections or re-sends.
Why the hash matters
A hash computed at signing and stored with the record allows anyone to verify later that the document has not changed. Recompute the hash of the document you hold; if it matches, the content is identical to what was signed.
This is what converts a signed PDF from an assertion into something verifiable. Without it, a dispute about whether a page was substituted becomes a matter of competing testimony.
Retention
Keep the audit trail for as long as the contract could give rise to a claim — three years from breach under the Limitation Act, longer where the obligations extend further or where a dispute is live.
Retain the trail with the document rather than in a separate system that may be decommissioned. A signed contract whose audit trail was lost in a platform migration is substantially weaker than one where both survived together.
Frequently asked questions
### Is a scanned signature on a PDF legally valid?
It may evidence agreement contractually, but it does not meet the IT Act requirements for an electronic signature and carries little evidentiary weight if challenged. A recognised electronic signature with an audit trail is substantially stronger.
### What is a Section 65B certificate?
A certificate required for electronic records to be admissible in evidence, identifying the record, describing how it was produced, and confirming the computer was operating properly. It should be obtainable from your signing platform.
### How long should I keep the audit trail?
At least as long as the contract could give rise to a claim — three years from breach under the Limitation Act, and longer where obligations survive or a dispute is pending. Keep it with the document, not in a separate system.
Related Dyopact Tools & Templates
Frequently Asked Questions
Is a scanned signature on a PDF legally valid?
It may evidence agreement contractually, but it does not meet the IT Act requirements for an electronic signature and carries little evidentiary weight if challenged. A recognised electronic signature with an audit trail is substantially stronger.
What is a Section 65B certificate?
A certificate required for electronic records to be admissible in evidence, identifying the record, describing how it was produced, and confirming the computer was operating properly. It should be obtainable from your signing platform.
How long should I keep the audit trail?
At least as long as the contract could give rise to a claim — three years from breach under the Limitation Act, and longer where obligations survive or a dispute is pending. Keep it with the document, not in a separate system.
Akash Kore
Founder & Product ArchitectArchitecting business document operating systems and automated billing workflows for Indian SMBs, agencies, and enterprises.