Electronic Signatures - Damien Bouvy, R&D Developer, Odoo

1. Electronic Signatures
Damien BOUVY • R&D Developer
Stop freaking out!
2019
EXPERIENCE

2. Hi!1

3. Damien Bouvy (dbo)
/me
R&D Developer
Odoo.com SaaS Platform, Subscription App
Support & Upgrades
Sale, Subscription, Payment Providers, Sign
dbo-odoo / bouvyd
5y @ Odoo next week :)

5. A few definitions

6. What is a signature?
And why do we trust them?
A signature (/ˈsɪɡnətʃər/; from Latin: signare, "to sign") is a handwritten (and often
stylized) depiction of someone's name, nickname, or even a simple "X" or other mark
that a person writes on documents as a proof of identity and intent.

7. What is a signature?
And why do we trust them?
A signature (/ˈsɪɡnətʃər/; from Latin: signare, "to sign") is a handwritten (and often
stylized) depiction of someone's name, nickname, or even a simple "X" or other mark
that a person writes on documents as a proof of identity and intent.
A mark of identity and intent.
Steve Jobs Mark Wahlberg John Hancock

8. What is a signature?
And why do we trust them?
A signature (/ˈsɪɡnətʃər/; from Latin: signare, "to sign") is a handwritten (and often
stylized) depiction of someone's name, nickname, or even a simple "X" or other mark
that a person writes on documents as a proof of identity and intent.
A mark of identity and intent.
Steve Jobs Mark Wahlberg John Hancock
Tim Cook Mark Zuckerberg

9. What is a signature?
And why do we trust them?
Good faith of the signer
Force of habit
Difficult to forge (or is it?)
Legal deterrent for forgeries
TRUST

10. What is an electronic signature?
And why do we have a hard time trusting them?
Electronic Signature
An electronic signature, or e-signature, refers to data in
electronic form, which is logically associated with other data in
electronic form and which is used by the signatory to sign.
Examples:
- A checkbox in an online form
- Entering your name in an online form
- A faxed/emailed scan of a signed document
- Your name at the end of your email
- A signature made using a private key (e.g. Adobe Pro
signature)
Digital Signature
A digital signature is a mathematical scheme for verifying
the authenticity of digital messages or documents.
Digital signatures are used to assert the authenticity of the
signers and the integrity of the document (usually using
cryptographic tools).
Examples:
- A signature made using a certified private key
hosted on a PIN-protected smart card (eID cards in
Belgium or in Estonia)

11. What is an electronic signature?
And why do we have a hard time trusting them?
Electronic Signature
An electronic signature, or e-signature, refers to data in
electronic form, which is logically associated with other data in
electronic form and which is used by the signatory to sign.
Examples:
- A checkbox in an online form
- Entering your name in an online form
- A faxed/emailed scan of a signed document
- Your name at the end of your email
- A signature made using a private key (e.g. Adobe Pro
signature)
Digital Signature
A digital signature is a mathematical scheme for verifying
the authenticity of digital messages or documents.
Digital signatures are used to assert the authenticity of the
signers and the integrity of the document (usually using
cryptographic tools).
Examples:
- A signature made using a certified private key
hosted on a PIN-protected smart card (eID cards in
Belgium or in Estonia)

12. “Ease of forging” (or feeling thereof)
Unknown signer
Novelty, FUD
TRUST?
What is an electronic signature?
And why do we have a hard time trusting them?

13. Legal Aspects

14. Legal Aspects - European Union
eIDAS Directive
3 levels of electronic signatures:
1. Electronic Signature
2. Advanced Electronic Signature
3. Qualified Electronic Signature

15. Legal Aspects - European Union
eIDAS Directive
Section 4, Article 25, §1:
An electronic signature shall not be denied legal effect and admissibility as
evidence in legal proceedings solely on the grounds that it is in an electronic form or that
it does not meet the requirements for qualified electronic signatures.

16. Legal Aspects - European Union
eIDAS Directive

17. Legal Aspects - United States
ESIGN Act
Criteria for a legally receivable electronic signature:
1. Intent to sign
2. Consent to do business electronically
3. Clear signature attribution
4. Association of signature with the record
5. Record retention

18. Odoo Sign

19. Odoo Sign
Electronic Signatures in Odoo
Simple electronic signatures are sufficient in nearly all
business cases!
Some cases might require more than that; typically official acts done in front of a
notary (last wills, real estates sales, etc.)

20. Odoo Sign
Signature flows
1. Specific signature request
When the signers are known in advance (e.g. a specific employee or
customer)
2. “Public” signature request
A link is generated, every access will generate a unique signature
request. Can be sent by email, on your website, etc.

21. Odoo Sign
Audit Trail
Logged metadata:
● IP
● Timestamp
● Geolocation
● Email validity
● Phone number (2FA)
Logged operations:
● Creation
● Signature
● Access

22. Odoo Sign
Audit Trail
Sent by email along
signed document
- Event logs
- Access logs
- Traceability
- Sensitive data
hidden by default
(geolocation,
phone numbers)

23. Demo4

24. Electronic Signatures
Are they legal?
Short version: Yes

25. Electronic Signatures
Are they legal?
Short version: Yes
Longer version: Yes, they are.

26. Electronic Signatures
Are they legal?
Short version: Yes
Longer version: Yes, they are.
Longest version: this talk, the internet. Depends on the document, but for
normal business cases, yes.

27. Thank you.
#odooexperience
2018
2019
EXPERIENCE