Save Signature Service Verification with airSlate SignNow

Verify electronic signature invite

hi everyone i'm lindsay bradfield from secured signing i'm responsible for our new business development and as such here first hand a lot of the security questions from our corporate and government clients around the use of digital signing what we wanted to raise awareness of in this webinar is the fact that in addition to the security of any digital signing software provider themselves there are a number of additional verification options that you as end users and your companies can apply that will make the digital signing process even more robust so just first some housekeeping your lines are on mute at the end we'll have some q a time so if you've got questions pop them through on the chat panel i've got some of our team supporting for those so they can be technical questions too and we'll have them join at the end and we'll be sending you a recording of the webinar afterwards as well cool um so this is me and my details um but in terms of what we're going to cover um over the next 40 minutes or so and we're going to go through what the key aspects are to a valid digital signature um i'll go through what the risks of digital signing can be and the ways that you can verify identities and reduce the risk we'll go through a really brief demo i'm showing some of the functionality to reduce risk and add further verification and then we'll cover their q a at the end cool and just a little bit of background about secured signing before we kick into it secured signing as a digital signing and online forms cloud platform we've been operating since 2010 um so clients signing for over 10 years we're headquartered out of new zealand home of the americas cup um and we're a global business with key operations in new zealand australia usa and the uk and we've actually got clients in 30 countries around the world as well so i've been doing this for a long time cool so um there's three key aspects to a valid digital signature and they're typically referred to as the three eyes the first is the identity of who was signing and that is strongly linked to the email address um matched up with the name date and time and device the second aspect is the intent to sign and that's what we'll be focusing a lot on today is how do you verify who was signing and their their intent um thirdly um the third eye is the integrity of the signature on the document um and the fact that the document hasn't been tampered with so it's a valid process cool and and now just to give a little bit more context around this um you probably hear of e-signatures so e-signatures is the broader category for signing and it is less robust than digital signatures which is a sub-category so if you look at these two images on screen the one on the right with the blue signature that's an electronic signature so that's one of those ones that where you draw your signature on a piece of paper upload it and then you copy and paste it into a word document so it's not robust because you can copy and paste that signature anywhere um and you could alter the document text after that's been placed as well so it's not giving you that security and robustness around how valid that signature would be so the signature on the left is a digital signature so in that whole box with um john testerman's name it's his signature it's showing his name printed out and the date and time stamp of when that signature was applied so all of those things together have sealed onto that document to form a valid binding signature now we use public key infrastructure digital signature technology and the specific technology we use at secured signing is a user-based pki digital signature and what that means is if you have a document with multiple people signing it the moment the first signature is applied it seals the document so that it can't be edited or if it was it would invalidate the signatures on it um so it's it's a really robust process um yeah so we can talk to you in more detail about that at any time so in terms of the risk of verifying um of not verifying who's signing your number one risk is fraud and it's worth pointing out that this can happen in a paper-based process as well if you've got if you're a bank with a customer signing a document at home on paper how do you really know it's the person you think it is signing that document anyway so digital signing provides more audit mechanisms about when it was signed as part of the audit trail and date stamped into it but of course it's not without its risk as well um and we saw that put into practice last year there was a court case in australia called market lend versus blackburn and essentially what happened there was a husband and wife had a business and they borrowed some money from a loan company um the wife was guarantor apparently um the husband actually gained access to her emails and um digital signing account and um forged the signature without her consent or knowledge but um from the loan providers um perspective they had a valid guarantor signature from the wife um the business went bust um and so the loan provider went to access the money um but they were unable to get the money from the waifuts guarantor because she could prove that she wasn't the one that applied the signature there were things that could have happened to make that whole signing process more robust for example no multi-factor authentication was used if um if the husband didn't have access to the wife's phone potentially that could have been applied um but then that's a risk as well often a lot of spouses will have access to the phone and email accounts of another and so today we'll talk you through some other options around that as well cool so sms i just touched on is the first and most commonly known and most commonly used option for multi-factor authentication and the advantage of that is it's got taking you to another device so if an email was hacked um for example um you would need to um access the person's mobile as well it's giving you a different channel to verify your identity um the second is id verification um secured signing offers a really robust process where your signer of a document can upload a state id so such as a driver's license our system will verify that the id isn't a fake id and then the person will take a selfie um and there's live facial recognition matching from the live selfie um to the id and only if those two pieces match will the signing process continue so we'll show you that today but it's a really robust option for verification other options are video confirmation and that's when you can have a signer doing some actions offline just picking up their mobile phone and the video gets stored with the signed document so a lot of our finance company clients use this they typically already have client records on file and so when they get the signed document with the video embedded with it they check the video likeness for their expectations of what the person looks like and then they release the funds so that's a free service that we offer and then finally the fourth option we want to talk about today is video signing so that's an all-in-one video and signing process and it provides evidence of all the different parties in the signing process who are signing at that point in time and this is often used for compliance related scenarios for example you might have a support person like a lawyer or an accountant or some other kind of advisor to support you in a meeting and that's evidence that they were there and participants in that meeting cool um so yeah just to go into the sms a little bit more um so basically um if somebody was going to hack your email they'd have to hack your phone as well so the process we use for sms authentication as uh we would email you a document um and then within the email as a link that asks for a code and then that you would be texted to the code on your phone and then have to enter it and to access the document so that's using those two um methods together to be able to unlock the document and verify that it is the right person signing so um that's very common with our clients um yeah the the most exciting and my view is our id verification and so you can see in the screenshot here um as part of the signing process you'd be uploading a copy of your id um using both sides taking a selfie and it uses facial recognition to match the selfie to the id it checks a massive database with over 4 000 government ids from 200 countries and there's over 50 forensic tests performed on the ids in real time so it's pretty cool um and i guess from an end user perspective it's got benefits because it's populating accurate data into your client applications within seconds that's stuff that you don't have to do manually so it's saving time adding to your compliance and reducing risk so you can actually if you've got certain fields that you need to capture um in a form for example um you can request those specific forms um checked on the id sorry first name last name that kind of thing cool and the third one is video confirmation so that records the signer at the signature moment so you can see i'm going to show you this in real time as well um it'll prompt me for some actions like tilt left ear to the left shoulder and i take a recording of that and that gets embedded in with the document um yeah and the beauty of this it's so easy to set up and it's completely free and video signing this is our all-in-one video signing solution so you don't need a separate video conferencing platform for this um it's all built into the um the video signing um solution and so it's a live real-time signing all the parties in the same meeting signing the document one after another at the same time um so that's a very good mechanism to support non-repudiation and it's very difficult to deny that you weren't in a meeting when there's a video of you in there signing it at the time and it's really simple and easy to use and the videos are passworded and stored with the document for future access so a good use case for that might be if you had a um a contract that had um multiple parties involved um and you knew there might be a potential for a legal challenge and years to come cool now um so there is a quick overview about our likes full key verification options um so what i'm going to show you now is a quick two-minute video of how the id verification works and then we'll go through a slightly slower process where i upload a document and show you how you would select the different verification options and remember if you've got questions just pop them into the panel and we can cover it off at the end as well cool oops and i will quickly log into my account cool all right so this is the screen when you first log into secured signing and as a user probably the first thing you would want to do is go to the screen box and add a document to upload so you simply browse your directory and grab a document that you want to add and add it on you could select multiple documents and bulk upload or combine them into one if you wanted to as well and also worth pointing out with an integration to another system like sharepoint online or salesforce you could be initiating that signing process directly from that system so for now i've uploaded a document and it's given me some nice easy prompts at the start i could either sign the document myself invite somebody else to sign turn it into a template um for example if it was a online form that's going to be accessed by lots of people lots of times um or commence the video signing process i'm going to select invite someone to sign cool so we've uploaded the document if i look at the right side i can see that it's a three-page document and click through to the different pages on my last page i can see there's a space for a signature box now i follow the reach button at the top and add my invitee's signature so i'm going to get belinda to sign this document and because i've used it before it's automatically populated her first name and last name and now i'm going to go add it's at the top so i drag and drop and i can resize to whatever space i'm working with and just pop it in there if you wanted to add additional invitees and that's easy to do as well we can add them in here just like this and again we would drag and drop them in here place them here you can also add a witness really easily so you can see richard would have a witness over here when this gets sent out richard would nominate who his witness would be now i'm not going to show these for demo purposes but i just wanted to show you how quick and easy it is to add other people and add witnesses so um you can also add an additional form data like drop down lists and um text boxes um with validation rules like to make sure it's a valid email address and things like that as well so but for today we're just going to sign this document now i'm going to hit the next button and it takes me to the signing workflow options now here um i've got a drop down of different verification options so by default it would send an email with a passcode to access the document but as we've been talking about these different verification options i could choose sms or id verification as well you can see once i select id verification it brings up some additional options so if i want the process to continue if the facial match doesn't happen or stop um i'm just going to focus on for this demo video confirmation so i'm going to click the video confirmation box um and other things to note in the background there's reminders depending on the dates you send out etc as well and you can edit the invitation email if we don't it just goes out with a standard wording anyway so we are showing video confirmation i'm now going to hit send and belinda is going to get an email with a request to sign the document you you send you send it with id verification so oh yeah okay let's do another one quick another one quick okay sorry about that thank you um good spot um the pearls of a live demo okay so i've got one in my inbox here and i'll quickly add it and i'm clicking to the last page adding my invitee signature and resizing it okay then next i'm turning off these options and we're going with a regular email with passcode and video confirmation activated and now i'm hitting send right now i can go back to my documents to see the signing status so we were in the inbox before now we're in the in progress folder and we can see the status of the signing so we've got multiple people signing it will show one of three signed etc i'm now going to go into my inbox and open the invitation request i'll just pull it over so you can see it so um this can be um branded with your own company branding on it um here we've got the passcode 4233 which i need to put into this link to access it remember if we had used sms as a form of verification this code would not go in the email it would go out separately via text but for now we're going to just pop it in here now i'm going to stop sharing my webcam while we do this because um you'll see a view of my video on the screen anyway cool now um with all um electronic um signing um you tick a box to a greater use of electronic records and digital signatures so i click ok and then i click into here to sign it and the first time you sign you get this range of options about how you sign and you can select a font to sign because it's combining with your email address this still forms a valid digital signature and you can draw the signature with your mouse if you want if you're talented that way you can upload your signature if you want a true likeness and you can use your device so your iphone or ipad etc um to draw on glass as well for today we'll just select this font option and hit sign and now this is where it's prompting me for the video confirmation so as part of the signing process belinda has been asked by lindsay to provide video confirmation of identity as part of the signing process and it's giving me the instruction to record myself making the head movement instructions provided the video will be saved to the vimeo platform and password protected the signed document provides a link and the password to view the video and by recording the video i acknowledge that anybody with access to the signed document will be able to view the video confirmation of identity and consent to secured signing providing this video confirmation right now we've got the video here i am again um anyway so i'm going to click the recording to start and it's going to give me a prompt so i have to blink twice one two and that's my recording so now i'm going to submit it and see if that gets pre-approved it does and my signature gets applied straight away and the signing process is complete now if i um jump back into my site now because i've been logged in as a different user i'm going to have to log in again but i'll quickly do this and we can see that that document has now progressed into the signed folder so you can see it was signed a minute ago and then i'll also get a signed copy in my inbox which will be coming through any moment when you have a video file attached it takes a little bit longer than if you didn't have a video so um if we were doing a regular signing process with sms or just email signing with nothing else it would be through by now as well so um and if there were multiple people in the signing process you would see um it's sitting in the in progress tab right now i've got the document through now um so what i've got is an email with the audit log of the or the document log of all the different actions that have taken place so we know that there was a video action where i had to blink twice and i agreed to electronic records and digital signatures there's a url and password to access etc so all of our signing actions are stored in this audit or document log here plus we have the signed pdf document here so if i jump to the end we can see the signature and here if i click over um sorry click into the signature box it tells me that the signature is valid um if you're a first-time user of secured signing you would need you'd have one action before this to download or accept the root certificate um and then you would instantly be able to validate the signature on every future occasion like i am right now cool so that's how easy it is to um run video confirmation um and now i will show you the id verification video so you can see how that works so um same as before i've had an email invite from somebody to sign a document this one has a pass code i click to view and sign into the passcode into the document and hit continue because id verification is enabled it's prompting for my cell phone and it's doing that to drive me to my phone because that has better photo quality for doing the id verification and selfie match so i'm entering the code into my phone um to get access this way and continue the process so the first thing i'm being asked to do is capture a photo of the front side of my id and then i also have to capture the back side of the id and so once that's captured it's scanning all the database of ids to make sure it's not a fake that it's a proper id and then it's prompting me to take a selfie um with my phone that it's going to match to that id and then it's using facial recognition to check that my live selfie matches the id and i've passed the verification and then it's letting me continue on with the signing process back on my desktop and again we're using a font signature there called signed and dated and just like that let's complete um and with the um signed document uh you can have the id um embedded in the document or if you just wanted it as a verification method and didn't want it visible with a document um you can deselect that as well i believe cool so um those are two quick run throughs of how easy it is to add additional verification to the signing process um so for now we will kick back to q and a so a nice quick demo for you um so send through any questions that you have um on the chat bar one question ask how much is the video confirmation oh the video confirmation is free um so that's a really good value add to get free access to an additional verification option nice you you have more question i can see just a minute um oh yes uh yeah for it's about the solution it's working in in us as well it's working in in there we are using a global supplier for ids and we can we can check more than 4000 ids so many passport many driver license in the us we support in all states and u.s passport in australia for example we supporting passport driver license and medicare new zealand we support in drive license and id of as a driver license passport and driver license there are many versions so we support in most of them or all of them we can say and um the setting for this process is actually um quite simple and you just need to enable id verification and all done for you um we the id verification support asian country as well so we have in the we have 200 countries so just few of them we don't support um and also more question come in just a minute yeah um there's a question um for id verification do you have your own system or using a third party um so just confirming we use a third party we partner with lexisnexis who are iso 27001 certified yeah um i was just going to move on um so um just confirming that in the us there's also a verification option called knowledge based authentication um and we've got a specific query about that i might take that one offline i think yeah yeah but we supporting we're supporting kba so if you are if you're in u.s you have another method of authentication you can use the knowledge based authentication for identity proofing so it's a it's a questionnaire or quiz generate based on the information you type it in in the um in the form and then you we auto populate the questionnaire for you and there was a question with id verification if the um selfie and the person uh sorry the selfie and the id don't match what happens um so there was an option when you set up the signing process you can either stop the signing process so they won't get access to the document sign or there is an option for you to allow it to continue i'm not quite sure why you would want to continue if it didn't match because that's the strength of the verification is the ability to stop it just to make it more technical point of view so the the match you need to get a score let's say the score is 80 point and the person took a picture but the score for the matching is 77 or 67 so we want to give you this option to make your decision by yourself if you want to continue or not because you will get the scoring and you see if the liveness and the scoring is very low so it's a very very suspicious but if it's a you know 67 or 76 or whatever something like that so you can continue this process because you can say the quality of the pic of the selfie was not too not too good so but it's so all right for you you can move that um um we have someone asking about the weakness um yeah how do you invite a non-signing witness um for example an attorney supervising notarization of his client yeah so this is a different process you have a ron remote online authorization and the attorney or lawyer or solicitor in our world can be um a guest so he can be a weakness in this in the in the run session or remote online authorization or video signing and part of this process you have id verification and the attorney doesn't need to take any any part of this it's just witness or just joining for the meeting and you can we can see all of them cool and i just wanted to clarify and because we've got um a mix of um kind of company types and countries on the line um in addition to regular digital signing we can sign documents and forms um in the us market um there's an online notarization process um so secured signing has um a purpose built um process for that um and you access that through an option um on our website um and if you were not part of that notarization process and just wanted to invite um a witness you would either set up a video meeting if they were a non-signing witness or you would add them as a witness into the document if you wanted them to sign but as i said the online notary process and the us has its own separate custom built process that handles that i can't access all of the questions so i may need um mike if you can access some of those if i've missed any no i i don't think we've uh i don't we can we can answer this offline so we get we can see all the questions later and we can answer them one by one and we reply to you by email okay fantastic so um yeah so i hope that was helpful if you're interested in seeing more we're happy to set up um custom demos for you um just email the info at securedsigning.com email address and if you're an existing client we'll get one of our support team to work with you and if you're a new client um we will get somebody else to um work with you depending on where you're located um but yeah i hope that was helpful um but yeah there are a lot of steps that you can take individually to increase the security robustness of your documents depending on the level of risk involved with them and the risk appetite of your company cool thanks for joining today everyone