Electronic signatures in ColombiaBuilt for business
across Colombia.

For many commercial agreements, the statute sets conditions rather than a blanket yes. Article 7 of Law 527 of 1999 says a signature requirement for a data message is met when a method identifies the initiator and shows that the initiator approved the content, and the method is reliable and appropriate for the purpose. Decree 2364 of 2012 regulates that article. Article 3 of the decree says the requirement is met if the electronic signature is as reliable as appropriate in all the circumstances, including any agreement. Article 5 gives that signature the same validity and effects as a signature only when article 3 is met. Article 6 says a writing requirement is met by a data message if the information remains accessible for later consultation. Article 10 says effect is not denied solely because the information is a data message. The standard inSigner signature is an electronic signature method. It is not a digital signature. Whether it is enough still depends on the document.

Article 2, letter c, defines a digital signature as a numeric value attached to a data message. A known mathematical procedure, linked to the initiator's key and the text, makes it possible to determine that the value was obtained exclusively with that key and that the initial message was not modified after the transformation. Article 28 presumes that the subscriber meant to accredit the message and to be bound by its content. The paragraph says a digital signature has the same force and effects as a handwritten signature only if it is unique to the person who uses it, can be verified, is under that person's exclusive control, is linked so that a change invalidates it, and conforms to the regulations adopted by the national government. Certification entities that issue certificates for digital signatures are authorized by the Superintendencia de Industria y Comercio. inSigner does not issue that certificate. QES for Europe is an Enterprise option and is not a Colombian digital signature.

Each person signs the fields you placed on the document you sent. The evidence record keeps their name and email or phone, when the document was sent, viewed, and signed, the IP address, the device data, and the authentication used.

Yes. You can download the completed PDF and the evidence record, including a SHA-256 hash of the final file. If a single byte changes, the hash no longer matches. Article 4 of Decree 2364 treats an electronic signature as reliable for its purpose if the creation data correspond exclusively to the signer in the context in which they are used, and if an unauthorized alteration after signing can be detected. Anyone may prove reliability another way, or prove that the signature is not reliable. The hash shows whether the final file still matches. It does not by itself decide article 4, and it is not encryption.

No. Essential and Pro use a simple electronic signature. Article 28's handwritten equivalence belongs to a digital signature that has the attributes in that paragraph and follows the government rules, including a certificate from a certification entity authorized by the Superintendencia de Industria y Comercio. inSigner does not issue that certificate. QES for Europe is an Enterprise option, priced separately, and it is not a Colombian digital signature. It is not on Essential or Pro.

No. Article 1 of Law 527 does not apply to obligations the Colombian state assumes under international treaties, or to written warnings that the law requires to be printed on certain products because of the risk of their sale, use, or consumption. inSigner does not act as a notary, does not issue a certificate from a certification entity, and does not file a document with a public registry. Your counsel decides the form a document needs.

Not by itself. Article 7 says that, until proof to the contrary, mechanisms of personal identification or electronic authentication that the parties agree to use are presumed to meet the electronic signature requirements. The paragraph says the party that provides the method under that agreement must make sure it is technically secure and reliable for its purpose, and must prove that if needed. Article 1 defines that agreement as the legal and technical conditions the parties set for their electronic dealings. Accepting the electronic process in inSigner records consent to sign that document. It is not, by itself, the agreement in article 1, and inSigner does not decide whether the presumption applies.

No. For the documents you send, you decide the purpose and Nubesti processes them under the data processing agreement. inSigner does not write your privacy notice or your authorization, and it does not make a workflow compliant with Law 1581 of 2012. Nubesti is the controller for the account, billing, security, support, and marketing. Do not use the product by default for patient forms, clinical consent, account opening, credit decisions, or KYC. There is no public status page and no uptime percentage. The mobile apps are planned, not a public download.