e-Sign: Official Digital Signatures for Indonesia
Legal basis: UU ITE Articles 5 & 11 · Law No. 19 of 2016 · PP No. 71 of 2019
What is e-Sign?
e-Sign is a digital signature on an electronic document — not a pasted photo of a signature, but a process that binds the signer's identity to the document's contents through a digital fingerprint (hash). If even a single character of the document changes, the fingerprint no longer matches and the change is immediately exposed.
The SHA-256 hash is computed from the document's contents. A signature image can be copied onto another document; a hash cannot.
Identity is checked via OTP before signing, and every action is recorded in an audit trail: who, when, and from which IP address.
Every document carries a public verification code. Anyone can check it themselves without needing an account.
The legal basis for digital signatures in Indonesia
Electronic signatures are recognised as legally valid evidence in Indonesia under Law (UU) No. 11 of 2008 on Electronic Information and Transactions, as amended by Law No. 19 of 2016, with implementation details set out in Government Regulation (PP) No. 71 of 2019.
Electronic information, electronic documents, and their printouts are legally valid evidence — and constitute an extension of the evidence recognised under the procedural law in force in Indonesia.
An electronic signature has legal force as long as it meets certain requirements, including that the signature creation data relates only to the signer, any change after signing can be detected, and there is a way to identify the signer.
Certified vs non-certified
A certified signature is issued by a PSrE (Electronic Certification Provider) recognised by Komdigi (Indonesia's Ministry of Communication and Digital Affairs) and is bound to a digital certificate.
Resmi.ID e-Sign is non-certified: it remains valid as evidence under UU ITE, but its evidentiary weight is assessed based on the reliability of the system — which is why we equip every document with a SHA-256 hash, a hash-chained audit trail, and public verification.
For documents that require a PSrE certificate, an additional integration is needed that is not yet active in this service. We state this openly so you can judge for yourself whether it is sufficient.
How e-Sign works
Four steps, all in the browser. Signers do not need to create an account.
- 1Upload your document
Upload the PDF to be signed, then specify where each signature should be placed.
- 2Send to signers
Enter the recipients' names and contact details. They receive a personal link — no need to register an account first.
- 3Verify & sign
The signer's identity is checked via OTP, then the signature is applied directly in the browser. Every action is recorded in the audit trail.
- 4Issued & verifiable
The final document carries a SHA-256 hash and a public verification code. If needed, an IDR 10,000 e-Meterai (Indonesia's official electronic stamp duty) can be affixed to the same document.
e-Sign compared with wet-ink signatures
| e-Sign | Wet-ink signature | |
|---|---|---|
| Time | Minutes | Days if parties are in different cities |
| Print & scan | Not needed | Required |
| Proof of changes | SHA-256 hash — changes are exposed immediately | Hard to prove |
| Process trail | Recorded automatically: opened, signed, time, IP | None |
| Third-party verification | Public verification code, no account needed | Requires manual checking |
| Legal force | Valid under UU ITE Articles 5 & 11 | Valid |
Frequently asked questions
Is e-Sign, or a digital signature, legally valid in Indonesia?
Yes. Article 5 of UU ITE recognises electronic documents and their printouts as legally valid evidence, and Article 11 sets out the requirements for an electronic signature to have legal force. PP 71/2019 details how this is implemented.
What is the difference between a certified and a non-certified digital signature?
A certified signature is issued by a PSrE (Electronic Certification Provider) recognised by Komdigi and is bound to a digital certificate. A non-certified signature is still valid as evidence under UU ITE, but its evidentiary weight is assessed by the judge based on the reliability of the system. Resmi.ID e-Sign falls into the non-certified category, with a SHA-256 hash, an audit trail, and public verification as proof of reliability.
Do signers need to create an account?
No. Recipients simply open the link they are sent, verify their identity via OTP, and sign directly in the browser. Only the party sending the document needs an account.
How can I check the authenticity of a signed document?
Every document carries a SHA-256 hash and a public verification code. Anyone can check it on the docs.resmi.id verification page without an account; if even one character of the document changes, the hash will not match.
Can e-Sign be combined with e-Meterai?
Yes. The same document can be digitally signed and stamped with an official IDR 10,000 e-Meterai issued by Peruri (Indonesia's state security printer) in a single flow, without printing or scanning.
Get Started
Start signing digitally today
Create, send, and sign documents at docs.resmi.id — signers do not need an account, and every document can be publicly verified.