Digital vs. electronic signatures: what's the difference?
People use 'digital signature' and 'electronic signature' interchangeably. Legally and technically, they're not the same thing — and the distinction matters.
The two terms get blended together so often that even legal websites sometimes use them as synonyms. They are not. The difference comes down to whether the signature is just an indication of agreement or a cryptographic proof tied to a verified identity. For most everyday paperwork the first is fine. For some specific cases, only the second works.
Electronic signature: the broad category
An electronic signature is any electronic process that signals a person's intent to agree to a document. A typed name, a scanned signature image, a drawn signature on a touchscreen, a clicked "I agree" button — all of these are electronic signatures under most major frameworks (the US ESIGN Act, UETA, the EU's eIDAS). They are legally binding for the vast majority of contracts.
Digital signature: the cryptographic subset
A digital signature is a specific type of electronic signature backed by public-key cryptography. The signer holds a private key issued by a certificate authority; the signature embeds a hash of the document encrypted with that key. Anyone can verify, using the matching public key, that the document hasn't changed since signing and that the signer's identity was authenticated by the certificate authority.
When the difference matters
- Most freelance contracts, NDAs, SOWs, and proposals: an electronic signature is enough.
- Real-estate transactions, certain government filings, notarised documents: often require a digital signature (or a "qualified electronic signature" in eIDAS terms).
- Cross-border B2B contracts in the EU: digital signatures carry more weight by default and reverse the burden of proof.
- Anything you might have to defend in court years later: digital signatures are dramatically easier to authenticate.
The eIDAS tiers (for EU readers)
The EU's eIDAS regulation defines three levels: a simple electronic signature (SES), an advanced electronic signature (AES), and a qualified electronic signature (QES). SES is the baseline — a typed name will do. AES adds identity linkage and tamper evidence. QES is the cryptographic gold standard, issued by a trust service provider, and legally equivalent to a handwritten signature across all member states.
What this means in practice
For 95% of the documents a freelancer or small business handles — contracts, invoices, NDAs, statements of work — a clean electronic signature flow is both legal and practical. The signed PDF, plus an audit trail (timestamp, IP address, email used to access the document), is enough to hold up if challenged. Reach for a full digital signature when the document type or jurisdiction specifically requires it.
Building an audit trail
Even with simple electronic signatures, keep a record of who signed, when, from where, and which version of the document they saw. A short audit-trail page appended to the PDF is the practical standard. AetherSign generates this automatically and embeds it as the final page of the signed document, so the evidence travels with the contract.
Bottom line
Every digital signature is an electronic signature. Not every electronic signature is a digital signature. Know which one your specific document type needs, pick the lightest tool that meets the bar, and don't over-engineer the rest.