Most people focus on the signature itself. Courts focus on what surrounds it.
When an e-signature is challenged — someone claims they never signed, that the document was changed, or that they never agreed to sign electronically — the mark on the page proves very little on its own. What matters is the audit trail: the record of exactly what happened to the document, when, and who did it.
What Is an E-Signature Audit Trail?
An audit trail is a time-stamped log of every action taken on a document, from the moment it is sent for signature to the moment the last person signs. The e-signature platform generates it automatically and keeps it with the signed document.
It is not an optional extra. It is the foundation of any e-signature you may one day need to defend.
What Does a Strong Audit Trail Record?
Platforms differ in how much they capture. These are the elements worth looking for, roughly in order of how often they matter.
Timestamps for every action
Every significant event is dated: when the document was sent, when each recipient was emailed, when each person opened it, when each signed, and when the document was completed. A good audit trail also states the timezone those times are in, so "10:42" cannot be read two ways.
Who each signer was, and how they were verified
At minimum, the audit trail records the name and email address each signing link was sent to. Stronger implementations add a verification step, such as a one-time passcode, multi-factor authentication or a government identity check. In India, Aadhaar eSign confirms the signer with a one-time password sent to the mobile number linked to their Aadhaar.
This is the record that ties a signature to a person, not just to anyone with access to an inbox.
The order things happened in
The full sequence of events, in order. If a document was signed in a set order, the trail shows that each person signed in their turn. If a reminder went out and someone signed shortly afterwards, the timeline shows it. If a signer delegated the task to a colleague, it shows who passed it to whom.
This level of detail is rarely needed. When it is, it is invaluable.
Proof the document has not changed
The strongest protection is a cryptographic one. At the moment of signing, a hash — a fingerprint calculated from the document's exact contents — is sealed into the signed file. Change a single character afterwards and the fingerprint no longer matches, which is mathematical proof of tampering.
This is what separates a properly sealed e-signature from a scanned image of a handwritten one, which has no equivalent protection. It is also the main difference between a basic electronic signature and a digital signature.
Device and network details
Some platforms also log the IP address and device used for each signing event. That data becomes relevant when someone claims they could not have signed — because, for example, they were somewhere else at the time.
What SignPe's Audit Trail Contains
Every SignPe document has a downloadable audit trail PDF. It sets out:
- The document — its ID, name and status, who created it, the organisation it belongs to, the signing order, and the dates it was sent and completed.
- Each recipient — their name, email address and role, and the date and time they were emailed, viewed the document and signed, alongside the signature they applied. Delegations are shown both ways: who handed the task on, and who it was handed to.
- A numbered event log — every event in order, with the person, their email address, their role and the timestamp.
- The timezone every time is shown in.
For signers in India, SignPe also offers Aadhaar eSign, which verifies the signer with a one-time password through eMudhra. The result is a PKI-signed PDF carrying a SHA-256 hash of the document, so any change made after signing can be detected, together with an evidence certificate.
How Is an Audit Trail Used in a Legal Dispute?
What happens when someone disputes an e-signature?
If a signer claims they never signed, or that the document now being presented is not the one they signed, the audit trail is the first evidence the other party reaches for.
It shows that a signing link was sent to that person's email address, when they opened it, when they signed, and where they sat in the signing order. Where the document was sealed with a hash, it also shows the document is bit-for-bit the one that was signed. Challenging all of that at once is very difficult.
A wet-ink signature on paper, by comparison, provides a date at most. Disputes over wet-ink signatures are fought with handwriting experts and witnesses, both of which are expensive and far from certain. The wet-ink vs electronic signature comparison covers the difference in more depth.
What Makes an Audit Trail Credible as Evidence?
An audit trail carries weight when it is:
- Generated by the platform, not typed up by either party.
- Not editable by the people on the document — the sender and signers cannot change what it records.
- Kept with the signed document, so the agreement and the evidence for it travel together.
- Exportable in a readable format that a lawyer, auditor or court can read without special software.
SignPe's audit trail is built from the platform's own record of each event and exported as a PDF, so you can file it with the signed copy the day a document completes. The guide to managing signed documents in one place covers how to organise both.
What Happens to the Audit Trail if a Document Is Voided?
Voiding a document does not erase its history. The void appears in the event log with who did it and when, alongside the requests that were sent and any signatures collected before it was cancelled.
See how to void a document in SignPe for what happens to a document after it is voided.
Frequently Asked Questions
What is the difference between an audit trail and a certificate of completion?
A certificate of completion is a summary produced at the end of the signing process, listing the signers and when they signed. The audit trail is the fuller, event-by-event record behind it. Some platforms issue them separately; SignPe puts both in one audit trail PDF.
Can an e-signature audit trail be altered or deleted?
On a properly built platform, not by the people on the document. The platform records each event as it happens and generates the audit trail from those records, so neither the sender nor a signer can edit the dates, names or events it shows.
How do I get the audit trail for a document in SignPe?
Open the document from your SignPe Documents list and download its audit trail PDF. It shows the document ID, the sent and completed dates, every signer with when they were emailed, viewed and signed, and a numbered log of each event. Keep it with the signed copy. If you need it for a legal matter, the SignPe support centre can help.
Does the audit trail prove that the right person signed?
It shows that the signing was done through a link sent to a specific email address, at a specific time, in a specific order. How strongly that ties the signature to a person depends on the verification used. Aadhaar eSign, which confirms the signer with a one-time password, gives far stronger identity evidence than email alone.
Is an audit trail required for an e-signature to be legally valid?
Most e-signature laws do not require a formal audit trail for a signature to be valid. But it is the practical standard for any signature that may need to be enforced. Without one, defending the signature in a dispute rests on whatever other evidence exists, which is usually very little.
Ready to sign your first document?
Free to start. No credit card, nothing to install for signers.
