Legality of eSignatures in Congo

Background

Electronic signatures are rapidly transforming the document authentication landscape in Congo and globally by introducing efficient, environmentally conscious solutions. The shift to paperless workflows and secure transactions with reduced bureaucracy has led to faster service delivery and timely closure of various deals, agreements and contracts.

For successful adoption, it is vital to select an eSignature that meets the country’s legal standards especially the Decree No. 2014-596 of November 3, 2014, of the Republic of Congo. The law grants eSignatures the same legal validity as their handwritten counterparts, provided they meet the requirement standards.¹ Despite the progressive acceptance, it is essential to recognize that some documents may still need a physical signature, and seeking legal consultation is advisable to navigate variable regional laws.

Security is the highest priority in eSignature usage. Services must integrate robust security features. such as data encryption, verification of signer details, and provision of audit trails to prevent unauthorized access and ensure document authenticity. For instance, BoldSign offers these imperative security features and complies with legal and security protocols.

In summary, eSignatures are indispensable for secure, efficient, and legally valid digital transactions, forming the backbone of the Congo’s digital transformation strategy.

Forms of electronic signatures

eSignatures or electronic signatures, come in various forms, all used to indicate agreement or approval on digital documents and transactions. Here are some common forms:

• Authorizing actions through application login.
• Signing with a stylus or finger on a digital tablet.
• Entering a name into an email as a signatory.
• Confirming agreement on a web page by clicking after verifying the identity prompt.
• Appending a digitized image of a handwritten signature.
• Voice command.

Overview of eSignature regulations

In the Republic of Congo, the use of eSignatures is regulated by:

• The Decree No. 2014-596 of November 3, 2014, of the Republic of Congo

The electronic signature law categorizes electronic signatures into:

• Standard electronic signature
• Qualified electronic signature

A standard electronic signature is any data resulting from a reliable identification process, with its probative value not tied to a specific secure criterion, and is assessed by the judges on a case-by-case basis².

A qualified electronic signature (QES) as per Articles 5 and 7 is a specific, higher-tier category which holds the same probative value as a handwritten signature and is enforceable against a judge, provided it is :³

• Based on a qualified certificate of conformity
• Created by a secure creation device
• Proposed by accredited certification authorities (specifically those accredited by the One-Stop Shop for cross-border operations)

The qualified electronic certificate must have⁴:

• A statement that the certificate is issued as a qualified certificate of conformity.
• The identification of the certification service provider and its country of establishment.
• The name of the signatory.
• The signature verification data that corresponds to the data for the creation of the signature under the control of the signatory.
• Indication of the beginning and end of the validity period of the certificate.
• The identity code of the certificate.
• The advanced signature of the certification service provider that issues the certificate.
• The holder of the certificate can be a natural or legal person.

Further clarification on the QES

Uniquely linked to the signer

An advanced electronic signature must be uniquely connected to the person using it. The signature must be uniquely generated using methods that only the signer can access, like a private key or confidential information, to verify their identity.

Use and incorporation remain in the signer’s sole control

The person using the advanced electronic signature must have sole control over the means of creating the signature. Typically, this requires managing a key pair or two-factor authentication, with the signer exclusively holding the private key to prevent signature forgery.

Identify the signatories

The process used to create the signature must be capable of identifying the person signing. This may include using a biometric signature, a Personal Identification Number (PIN), an email address, or a company registration number.

Track down any alterations made after signing

It is essential to preserve the authenticity of the signed document. Modifications made to the document post-signature should be identifiable. This is commonly accomplished through an audit trail. Audit trails record the signer’s IP address, timestamps of key signing events, and location, providing proof of identity, timing, and place of signature.

Summary analysis

The Decree No. 2014-596 of November 3, 2014, of the Republic of Congo.

Foreign recognition of electronic signature certificates in Congo

Providers of electronic certification services who wish to issue secure electronic certificates and manage related services must obtain authorization from the Single Window for Cross-Border Operations.⁵

The scope and limitations of eSignature transactions

The use of electronic signatures to complete transactions is not uniformly recognized as legal. As a result, electronic signatures are appropriate for certain transactions and applications, while they may be unsuitable for others. An examination of this issue is provided here, along with a condensed table outlining the various transactions.

Documents that can be signed

Electronic signatures can be employed to affix signatures and provide countersignatures on a diverse array of documents, such as:

• Human resources
• Procurement
• Non-disclosure agreements (assuming they are contracts, not formal deeds)
• Software license agreements
• Purchase orders
• Offer letters
• Insurance industry
• Educational field, etc.

Exempted transactions

Exclusions typically include:

• Wills and testamentary disposition
• Power of attorney
• Negotiable instruments
• Real estate transfers
• Trust

Summary table

To ensure the authenticity of an electronic signature, it is advised to follow these best practices while also fulfilling all applicable legal requirements:

• Ascertain the identity of the signatory and, when it involves corporate transactions, verify that the person has the authority to act on behalf of the corporation in signing the document.
• Secure explicit approval from the signatory, which can be documented in the contract or a separate agreement, to confirm their intention to use the specified electronic signature for the document.
• Protect the document from any changes after the electronic signature has been affixed.
• Keep a comprehensive log of the signing process that captures every step the signatory performs.

How does BoldSign help

The following elements of compliance available within BoldSign can be used to comply with Congolese eSignature laws:

• Secure and unique signing link: A secure and unique link to sign a document is sent directly to the signer's email address. This ensures that the document is only accessed by the intended signer and cannot be tampered with.
• Password protection: Senders can specify a password that needs to be entered before viewing and signing a document. This adds another layer of security to the signing process.
• Audit trail: The IP address of the signer and timestamps for all significant events in the signing process are recorded in an audit trail. This provides a record of who signed the document, when, and where.
• Digital signature: The final document is digitally signed with an AATL-compliant certificate. This ensures that the document cannot be tampered with without invalidating the signature.
• Consent: Signers are asked to confirm their intent to sign electronically and informed that they could opt out. This ensures that the signer is aware of the implications of signing electronically and has given their consent.
• Custom terms: Get your signers to agree to a custom set of terms. This can be useful to ensure additional security or that the signer understands the terms of the document.

Disclaimer: The information on this page is intended to help businesses understand the legal framework governing electronic signatures in this country.

However, Syncfusion’s officers, directors, stockholders, affiliates, attorneys, accountants, employees, or agents cannot provide legal advice. You should consult your personal attorney regarding your specific legal questions. Laws and regulations are subject to frequent changes, and the information may not be current or accurate. To the maximum extent permitted by law, Syncfusion provides this material on an “as-is” basis. Syncfusion disclaims and makes no representation or warranty of any kind with respect to this material, express, implied, or statutory, including representations, guarantees, or warranties of merchantability, fitness for a particular purpose, or accuracy.

Syncfusion makes no warranties of any kind, including but not limited to the information or the product, whether express, implied, statutory, or otherwise. To the maximum extent permitted by law, Syncfusion disclaims all conditions, representations, and warranties, whether express, implied, or statutory, with respect to this information, without limitation of any implied warranty of merchantability, fitness for a particular purpose, accuracy, or currentness of this information.

Neither Syncfusion nor its officers, directors, stockholders, employees, affiliates, attorneys, accountants, or agents shall be liable for indemnification, nor does this create an express or implied, contractual or statutory, equitable or otherwise, under this agreement. The officers, directors, stockholders, affiliates, attorneys, accountants, or agents will not have any liability in any form.