IT Act 2000 Compliant • PAdES • XAdES • RFC 3161

SignerX API Platform

Enterprise digital signing platform. One unified API to sign any document using any certificate authority, securely powered by software certificates or robust HSM integrations.

PAdES-LTA Verified
HSM PKCS#11 Secure
agreement_signed.pdf
Digitally Signed by SignerX API
Legally Valid (IT Act 2000)

Why Enterprise Digital Signing is Hard

Securing and verifying documents at scale requires navigating complex legal frameworks, cryptographic standards, and hardware integrations. Ad-hoc solutions often fail to meet stringent compliance requirements.

Complex Standards
HSM Security
Long-Term Trust
Legal Signatures Needed

PDFs, XML invoices, contracts, and official government filings require legally recognized signatures to ensure compliance and validity.

Diverse Certificate Types

Handling Class 3, Organization, and Document Signer certificates across different Certificate Authorities (CAs) adds integration friction.

HSM Integration Required

Cryptographic private keys must remain inside secure Hardware Security Modules (HSMs) to prevent unauthorized extraction.

Long-Term Validation (LTV)

Signatures must stay valid and verifiable years after signing, even after certificates expire or CAs change.

SignerX API Features

One API. Any Document. Any CA. Any HSM.

PDF Signing

Full support for PAdES-LT and PAdES-LTA levels. Customize signature appearance with visible branding or sign silently with invisible signatures.

XML Signing

Generate secure, standards-compliant XAdES-T signatures. Supports enveloped and enveloping formats to secure complex web services and invoices.

Any File (CAdES)

Sign binary data and any file type with CAdES-T detached P7S signatures, providing flexible data integrity and authorship verification.

HSM Support

Seamlessly integrates with PKCS#11 compliant Hardware Security Modules (HSMs) from all major vendors, securing high-value signing keys.

RFC 3161 Timestamps

Includes production-grade Time Stamping Authority (TSA) support. Embed cryptographically-verifiable proof of signing time for long-term validation.

How SignerX API Works

A unified REST API connecting your applications to secure signing hardware and trust services.

Client App

ERP / Web App / Mobile / PHP / Python

Python PHP Node.js C#
REST API
SignerX API Engine
v2.4
  • PDF Signer (PAdES)
  • XML Signer (XAdES)
  • File Signer (CAdES)
  • Cert Validator (CRL & OCSP)
  • Doc Timestamp (RFC 3161)
Key Providers
PFX Cert / Software Key
HSM (PKCS#11)
SignX TSA (RFC 3161)
Output
Signed PDF
Signed XML
.p7s File
JSON/TSR

Real-World Use Cases

Empowering diverse sectors with secure, high-throughput digital signing capabilities.

Banking & Finance

Perfect for loan agreements, customer KYC documents, NACH mandate files, and high-value trade finance transactions.

Healthcare

Digitally sign patient prescriptions, diagnostic laboratory reports, and official medical consent forms to ensure confidentiality and validity.

Legal & Compliance

Legally bind contracts, service agreements, court affidavits, legal submissions, and corporate Memorandums of Understanding (MOUs).

Government

Streamline e-tendering procedures, issue certified citizen documents, respond to RTI inquiries, and validate licenses and permits.

E-Commerce

Automate generation of GST e-invoices, purchase orders (POs), delivery confirmations, and supplier contracts at scale.

HR & Payroll

Issue secure candidate offer letters, employee salary slips, provident fund (PF) declarations, and annual performance appraisal reviews.

Sign a PDF (PAdES-LT)

Experience a sample HTTP REST request and response payload for signing and validating documents.

API Request
POST /sign-and-timestamp
file=@invoice.pdf
outputFormat=pdf_sign
visibleSignature=true
embedTimestamp=true
ltv=true
page=last
position=bottom-right
reason=Authorised Signatory
location=India
          
API Response
200 OK
{
  "success": true,
  "sessionId": "uuid",
  "signature": {
    "padesLevel": "PAdES-LT",
    "signedAt": "2026-06-16T12:00Z",
    "certificate": {
      "cn": "DS FUTURIQ..."
    },
    "certValidation": {
      "crl": { "passed": true }
    }
  },
  "timestamp": {
    "status": "granted",
    "env": "production"
  }
}
          

Standards & Compliance

Fully compliant with domestic legislation and global cryptographic formats.

IT Act 2000

Indian Information Technology Act — Legally admissible digital signatures recognized by all regulatory frameworks.

PAdES (ETSI EN 319 102)

PDF Advanced Electronic Signatures — Supports stable B-LT and LTA long-term validation verification levels.

XAdES (ETSI EN 319 132)

XML Advanced Electronic Signatures — Supports robust XAdES-T integration structures for automated reporting.

CAdES (ETSI EN 319 122)

CMS Advanced Electronic Signatures — Supports CAdES-T for arbitrary binary metadata payloads.

RFC 3161

Internet X.509 PKI Timestamp Protocol — Secure connection to trusted Time Stamping Authorities.

PKCS#11

Cryptographic Token Interface Standard — Direct native driver connection to hardware security modules.

Universal HSM Support

SignerX API works with ANY PKCS#11 compliant HSM — simply configure the library path and key labels in .env

HSM Vendor PKCS#11 Library Config Env Var Status
Utimaco libcs_pkcs11_R3.so CS_PKCS11_R3_CFG Tested
SafeNet/Thales Luna libCryptoki2_64.so ChrystokiConfigurationPath Supported
Entrust nShield libcknfast.so CKNFAST_LOADSHARING Supported
AWS CloudHSM libcloudhsm_pkcs11.so CLOUDHSM_PIN Supported
SoftHSM2 libsofthsm2.so SOFTHSM2_CONF Testing
Thales DPoD libpkcs11.so P11_LIB_PATH Supported

Easy Integration — Any Language

Integrate digital signing in minutes with standard HTTP POST requests.

Python
import requests
requests.post(
    url, 
    files={...}, 
    data={...}
)
          
PHP
curl_setopt(
    $curl, 
    CURLOPT_POSTFIELDS, 
    $data
);
// JSON response with signed URL
          
Java
HttpClient  multipart/form-data
// Works with:
Apache HttpClient
OkHttp or HttpURLConnection
          
C# / .NET
HttpClient.PostAsync(
    url, 
    MultipartFormDataContent
)
          
Node.js
axios.post(url, formData)
or 
node-fetch(url, {
  method: 'POST'
})
          
curl / Shell
curl -X POST \
  -F file=@document.pdf \
  -F visibleSignature=true \
  http://api.signerx.com/sign
          

AUA / KUA Integration

Secure identity verification workflow for Authentication & KYC User Agencies.

AUA

Authentication User Agency
Verifies Aadhaar holder identity details dynamically.

KUA

KYC User Agency
Retrieves authenticated full KYC profile data records.

HSM

Secure Key Storage
Decrypts records via RSA OAEP decryption protocols.

eKYC

Encrypted Response
AES-CFB decryption of received Aadhaar KYC XML.

Sign

XML Signing W3C DSig
Enveloped XML formats running SHA256withRSA.

Digital Banking KYC

Decrypt Aadhaar eKYC for account opening, loan applications, and credit card issuance.

Telecom SIM Activation

Verify subscriber identity using Aadhaar authentication for new SIM card issuance.

Insurance Onboarding

KYC verification for policy issuance, claims processing, and beneficiary setup.

Government Services

Citizen verification for welfare schemes, subsidy disbursement, and e-governance.

Corporate HR Onboarding

Employee identity verification during joining — PAN/Aadhaar linkage and BGV.

Digital Lending

Instant KYC for NBFC, P2P lending, and digital credit underwriting.

SignerX API — What We Deliver

A production-ready solution that solves complex signing, security, and integration challenges.

IT Act 2000 Compliant

Legally admissible digital signatures in India, fully recognized and compliant with national regulatory frameworks.

PAdES + XAdES + CAdES

Full conformance to major ETSI digital signature standards for PDFs, XMLs, and arbitrary binary datasets.

Any CA, Auto-Discovery

Automatically retrieves and reads OCSP, CRL, and AIA endpoints directly from certificates for rapid validation checks.

HSM Support (PKCS#11)

Out-of-the-box support for leading hardware token modules (Utimaco, SafeNet, nShield, AWS, and more).

RFC 3161 Timestamping

Production-grade TSA connectivity to stamp document authenticity at the exact moment of signing.

On-Premise Deployment

Complete control of your secure enterprise environments. Zero cloud dependencies or data leaks.

Ready to secure your documents?

Integrate the SignerX API in your applications today and deploy on-premise with zero dependencies.