CogniSoft CoSign - Simple signing in a digital world

  • CogniSoft have provided this service for Customers to allow the electronic signature of images and PDF documents
  • Documents here are encrypted to AES 256, an industry leading military grade encryption.
  • The signing of a document online is the same as signing a document in the real world. The contract is binding and the document created is available
How much does this cost?
We have reviewed the charging and CogniSoft will be applying a £1 per document signed charge to the user wishing the document to be signed. Document signing itself is free.

Customers are required to apply for a license which includes a pre-purchase agreement of a number of uses.

Packages are available in 100, 200, 500 or for higher numbers give sales and ring on 0161 777 2900, and I'm sure they'll do you a deal

So ... how do I use the service to get clients to sign documents?
Simple .... upload a document and give the key to a client. Ask them to come here and then they can read, download and eventually sign the document. Once it's signed you can use the same key to download the document. Done!
So ... how do I sign a document?
Simple .... you have a key. If you haven't we cannot help you. If you have enter the key on the Sign page and sign the document. Once signed you can download the signed document. And your done!
Is it really secure?
The data is transmitted using the same technology as your banks and governments. So that bit is as secure as it can be. CogniSoft are a ISO27001 certified and a Cyber Essentials company.

We test our systems regularly and have annual penetration tests.

The encryption is so strong CogniSoft themselves cannot decrypt documents (so don't lose the key!)

The main issue is with the keys and the documents. If you give your key to the wrong person or transmit it insecurely, then people you did not intend to have access will be able to download or sign the document. So don't do that. Give the key securely.

The problem with the documents is simple, you are allowed to download them and if you download them on a public computer or copy them somewhere you should not then that's a problem. So don't do that. Store them securely.

So, in summary, the document is secure as the key when stored for signing and when the document is downloaded, it's as secure as the location you store it.
Will this digitally sign my document?
No. Digital signatures are different to electronic signatures and this portal does not do that. Most people don't understand digital signatures and when they say digital they mean electronic.

CoSign is designed to replace the "in person" signing of a document.

To read more about digital signatures, click here, but remember that wikipedia can be edited by almost anyone.

But how can I tell if it's really the person I want signing the document?
This is the electronic signature world is known as authentication. How do you authentic the person in the real world? ID, visually because you have met them before? All good methods, however, electronically that is much more difficult.

The key is in the delivery of the key (sorry).

The protocol that you use to provide them with the key must be a method that you trust. Select a mechanism, that you can rely upon. For instance, if you have a valid mobile phone number you can message them the key, what's app, or other messenger service.

Use a portal that your can communicate with them on, or if all else fails, phone them, authenticate them, and read it to them.

Can someone guess a key?
It's possible, but not likely. If a specific location attempts to enter a key more than a few times we block that location for a period, or slow down the attempts. We also use a method called Recaptcha, to check if the signee is a human.
Will Government bodies and auditors accept this document?
Probably ... there are lots of governments and auditors with lots or rules. The only solution is to ask them. CogniSoft provide solutions for UK based organisations submitting documentation to DfE and the Skills Funding Agency. We cannot see why these organisations would not accept this type of document.