What is Audit Trail?

A timestamped, immutable record of every action taken on a document, view, sign, decline, download, share.

An audit trail is the chronological evidence log that backs an electronic signature's legal enforceability. Every viewing, signing, declining, and downloading event is captured with a UTC timestamp, the actor's IP address and user-agent, and a hash that links the event to the signed document. Under ESIGN, eIDAS, and UETA, a complete audit trail is what transforms a click into a court-admissible signature.

Drop your document here and sign it now. PDF, Word and Excel all work: a .docx or .xlsx is laid out in your browser exactly as it was written, so there is nothing to convert first. Add a signature, a date, a company stamp or a watermark, then download it sealed. Free to start, no account, and the file is never uploaded to open it.

What PDF Verified captures

For every signer event we record: timestamp (UTC, server-side), actor identity, IP address, user-agent, geo-IP city (where available), action type (view, sign, decline, download, comment), the document's SHA-256 hash at that moment, and a sequence number. The trail is append-only and tamper-evident: changing any past event invalidates the chain hash.

Audit Certificate

On request (e.g. when the signer or owner clicks Download Audit Certificate), PDF Verified renders the full audit trail as a PDF with QR-verified provenance. The certificate is JIT-generated, never stored, so there's no risk of an outdated copy sitting in storage.

Court admissibility

In ESIGN/UETA/eIDAS jurisdictions, audit trails are routinely accepted as evidence of intent, attribution, and integrity. The chain of custody + cryptographic hash + timestamp + IP linkage covers all four UETA elements (intent, consent, association, retention).

What PDF Verified is, and what it is not

Electronic signature law is settled in broad terms and specific in the details. The ESIGN Act, UETA, eIDAS and their equivalents recognise electronic signatures across more than 190 countries, and what decides a particular case is intent to sign plus evidence connecting the signature to the signer, which is what the audit certificate records. Certain document types carry their own formalities wherever you are: deeds, wills, some property instruments, and anything requiring a witness or a notary. Sign only what you are authorised to sign, since applying another person signature without their authority is forgery whatever tool is used.

PDF Verified is a tool for preparing, signing, stamping and checking documents. It is not a law firm, a compliance service or a forensic examiner, and nothing here is legal, financial or compliance advice. Requirements differ by country, by document type and by the party asking, so check what applies to your document before you rely on it, and take advice where the document matters. You are responsible for the documents you create, sign and send, and for having the authority to do so: signing or stamping in somebody else name, or as an organisation you do not represent, is forgery whatever tool is used. To the extent the law allows, we accept no liability for how a document made with this tool is used or relied on. The full position is in our terms of service.