whats-best.ai
Search Sign in

E-Signature

Autenti

Provenance unknown Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Autenti sp. z o.o. · autenti.com

Report an error on this page Is this your product? →

Link to this page

Autenti: AI-assisted analysis on whats-best.ai Autenti: AI-assisted analysis on whats-best.ai (dark)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

Autenti at a glance

Vendor
Autenti sp. z o.o.
Headquarters
Not stated on the vendor’s pages as of 3 Nov 2026
Data hosting
Not stated on the vendor’s pages as of 3 Nov 2026
Free plan
Yes, per the vendor’s own page source, captured 3 Nov 2026
Panel verdict
The AI panel rates Autenti 3/5, the mean of 6 judges. Autenti is a Polish e-signature platform whose bench scores cluster at 6-7 on signature levels, identity verification, signing workflow and evidence and retention, against a 4-4 range on integration and API. how scores are made
As of
Vendor pages captured 3 Nov 2026; evaluated by the panel 3 Nov 2026. all sources

Autenti alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The Data Protection Officer

Weighted verdict

Knows every signer who holds an ID card up to a camera hands biometric and identity data to a provider they never chose. Asks who performs the identification, where documents and ID data are stored, how long the audit trail keeps IP addresses, and who the subprocessors in the trust service chain are.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Data Protection Officer

Panel median The Data Protection Officer This judge’s scores over the panel median. Each label opens its reasoning below.
Scores per criterion, in stars out of 5
Criterion Panel median The Data Protection Officer
eIDAS levels & trust services 3.5 of 5 3.5 of 5
Signer identification 3 of 5 3 of 5
Signing workflow & signer experience 3 of 5 3 of 5
Evidence, validation & retention 3.5 of 5 3.5 of 5
Integrations & API 2 of 5 2 of 5
European sovereignty 2.5 of 5 2.5 of 5

eIDAS levels & trust services

How this is scored

Which signature levels the platform offers — simple, advanced, qualified, and qualified seals — through which qualified trust service provider on the EU Trust List, for which countries and legal regimes (eIDAS, ZertES), and on which plans.

0 — Not an electronic signature service: a PDF annotation or form tool that places a drawn or typed signature image without any eIDAS signature behind it.

3 — Electronic signatures at the simple level (SES) described as compliant with eIDAS; advanced and qualified levels and the trust service provider are basic or not described.

5 — Simple and advanced or qualified signatures (SES with AdES or QES) offered and named as eIDAS levels, with the plans or add-ons that include them and which documents need which level explained for Germany or the EU.

8 — SES, AdES and QES all documented with the plans and countries they are available in, the qualified trust service provider named with its entry on the EU Trust List linked, QES under eIDAS (and ZertES where relevant) stated, qualified electronic seals for company documents, and the signature level shown in the signed document and audit trail.

10 — Levels are an explicit product decision: the provider is or contracts a named QTSP with its conformity assessment published, level selection per document type or template, remote QES without a separate account, EUDI wallet support stated with a date, and the legal effect per level documented for the main EU markets.

Report an error

The Data Protection Officer

All three levels are documented — the tamper-evident Autenti signature, an advanced signature confirmed by at least two independent factors, and a qualified signature delivered through named providers Cencert, Certum (Simply Sign) and InfoCert — alongside an electronic seal based on qualified certificates and a qualified timestamp. What the captured pages do not show is those providers' entries on the EU Trust List, which plans include which level, or ZertES; a one-time qualified signature on mObywatel, where the signer activates nothing and bears no cost, is described for Poland. 3 4 6 7

Report an error

Signer identification

How this is scored

How the signer is identified for each level: email and SMS codes, video ident, eID card (Online-Ausweis), bank ident or EUDI wallet — who performs it, in which countries it works, and what happens to the ID data afterwards.

0 — No signer authentication offered: by the vendor's own description anyone holding the link can sign.

3 — Signers authenticated by an email link with an access code or SMS code; identification for advanced and qualified signatures is basic or not described.

5 — Email, SMS or access-code authentication, plus identification methods for AdES or QES listed by name (for example video ident, eID card, bank ident), with the countries or ID documents they accept stated.

8 — Methods documented per level and country with the identification provider named, automated and agent-based ident distinguished, reuse of an identification for later signatures explained, retention and deletion of ID data stated, and the ident provider listed as subprocessor.

10 — Identification is transparent end to end: every method with its countries, assurance level and completion guidance, EUDI wallet and national eID supported, ID data minimisation and retention committed, and the signer-facing privacy notice published.

Report an error

The Data Protection Officer

Seven identification routes are enumerated in the policy — electronic identification means, state-administered applications, selfie with liveness, AML-entity data transfer, data from qualified signatures and from eID document validation — and the mObywatel flow is documented step by step down to the CAN code, requiring a Polish e-ID card issued after March 4, 2019, with Cencert and BROKER ID named as the performing parties. My concerns: the flows are Poland-centred, the pages state no maximum retention or deletion for ID data and face images beyond the at-least-6-year trust-services retention, and we found no public information on the identification providers' subprocessor status or on reuse of an identification for later signatures. 3 4 5 6

Report an error

Signing workflow & signer experience

How this is scored

Getting a document out and back signed: templates and form fields, signing order and roles, bulk sending, reminders and delegation, signing without an account or app, mobile signing, and accessibility for signers.

0 — Not a signing workflow: the product signs a document locally for the user and sends nothing out to other signers.

3 — Documents sent to one or more signers by email with fields placed on the PDF; templates, signing order and reminders are basic or not described.

5 — Templates with field placement, several signers with a signing order, automatic reminders, signing in the browser on mobile without an account, and a status overview for the sender.

8 — Roles and conditional fields, parallel and sequential order, bulk sending, delegation and substitute signers, team and approval workflows, a branded signer experience, signer languages listed, and signer accessibility addressed.

10 — The workflow is complete and documented: web forms and self-service signing links, mixed signature levels within one process, in-person and remote signing, a published accessibility conformance statement, and team administration with shared templates and audit of sender actions.

Report an error

The Data Protection Officer

Templates with drag-and-drop variable fields autofilled from an address book, a configurable signing order with verification before signing, bulk signing of up to 100 simple and 50 qualified signatures at once, approver, reviewer and initialling roles, automatic language adaptation for signers, and email delivery of the finished document to everyone involved are all documented, with the signer needing no certificate, no account activation and paying nothing. We found no public information on delegation or substitute signers, conditional fields, or signer accessibility. 4 6 7 8

Report an error

Evidence, validation & retention

How this is scored

What proves a signature years later: the audit trail and certificate of completion, qualified timestamps, long-term validation (PAdES-LTV), validation reports, and how long signed documents and evidence are kept — and whether they can leave the platform.

0 — No evidence produced: by the vendor's own description the result is a flattened PDF with a signature image and no audit trail or certificate.

3 — An audit trail or completion certificate with the signed PDF; its contents, timestamps and the retention period are basic or not described.

5 — An audit trail or certificate of completion recording signer events, time and authentication method, attached to or embedded in the signed PDF, timestamps applied, and signed documents downloadable.

8 — PAdES signatures with long-term validation, qualified timestamps from a named provider, a validation tool or report, retention period stated and configurable with automatic deletion, and bulk export of documents with their evidence.

10 — Evidence outlives the subscription: LTV and archive timestamps documented, validation verifiable with independent tools such as the EU DSS validator, export to a DMS or archive with evidence intact, and post-termination access and deletion committed in the terms.

Report an error

The Data Protection Officer

An event register maintained by the provider, a Signatures&Seals Card documenting each trust service, a qualified timestamp, and a qualified validator issuing ETSI-compliant XML validation reports plus PDF validation certificates — including for documents created outside the platform — are documented, with trust-services data retained at least 6 years and a one-month download window after the service ends. The pages leave long-term preservation partly open: we found no named timestamp provider, no statement of long-term validation in PAdES terms, and no configurable retention or automatic deletion. 2 3 8

Report an error

Integrations & API

How this is scored

Signing from inside the systems where contracts are made: a documented API with webhooks and a sandbox, embedded signing, and connectors for Microsoft 365, CRM, HR, DMS and ERP systems.

0 — A closed web app by the vendor's own description: no API and no integrations offered.

3 — A few named integrations or a Zapier or Make connector; a documented API is basic or not described.

5 — A documented REST API with webhooks, plus named integrations with Microsoft 365 or Google Workspace and at least one CRM, HR or storage system.

8 — A sandbox, embedded signing in the customer's own application, API access to every signature level, versioned API with rate limits published, SDKs, and connectors for named DMS, ERP or HR systems with their scope.

10 — Integration is a product: white-label and embedded flows documented, API parity with the web app, a status page with incident history, deprecation policy, and a marketplace of integrations with stated maintainers.

Report an error

The Data Protection Officer

An open API through which documents are sent and signed from ERP systems, fully automated validation via API alongside the web interface, a platform-plus-integration deployment model, and a marketplace are named. We found no public documentation of webhooks, a sandbox, SDKs, or named connectors for Microsoft 365, CRM, HR or document management systems, so a buyer cannot gauge the API's reach from these pages. 1 2 5 8

Report an error

European sovereignty

How this is scored

Who the contracting entity, the trust service provider and their owners are, where documents, audit trails and ID data are stored and processed, and who the subprocessors are. Independently sourced by the sovereignty pipeline.

0 — Proven non-EU on every dimension the evidence covers: non-EU contracting entity and non-EU storage of documents and signer data, with no EU option stated.

3 — One European element proven: an EU contracting entity or EU representative, EU data storage stated, an EU qualified trust service provider, or a published DPA, with the rest of the chain unstated.

5 — EU contracting entity or EU representative and EU storage of documents stated as standard or selectable, with a DPA offered; the hosting, identification or trust service chain is unstated or partly non-EU.

8 — EU entity, documents, audit trails and ID data stored in named EU data centres, an EU qualified trust service provider, subprocessor list with locations published, and certifications (ISO 27001, ETSI conformity) published.

10 — Sovereign end to end and evidenced: European ownership, EU entity and EU QTSP, every processing location and subprocessor European, customer-selectable data residency, and certifications with their scope published.

Report an error

The Data Protection Officer

Autenti sp. z o.o. of Poznań is identified with full KRS, NIP and REGON numbers as controller and contracting entity, hosting is described as EU-based, and the qualified signature chain runs through European providers Cencert, Certum and InfoCert. Beyond that the chain goes dark: we found no public information on data-centre locations, a subprocessor list with locations, or a data processing agreement; the ISO compliance claim is stated without scope, and the policy commits only to a minimum 6-year retention of signer data with no stated maximum or deletion commitment. 1 3 7

Report an error

Pricing transparency not rated — the vendor publishes no price

How this is scored

Whether a buyer can compute the cost of their signing volume from public pages alone — plan prices, envelope or document limits, the per-signature price of AdES and QES, identification fees, API pricing and overage.

0 — No public prices at all; every plan is a sales conversation.

3 — A public "from" price or one priced plan, per user or flat.

5 — Plan prices public for the main plans with the billing period stated and the envelope or document limits and main features per plan listed.

8 — Every plan and limit priced publicly, AdES and QES priced per signature, identification fees and overage stated, API pricing published, and contract term and notice period given.

10 — Complete cost computability: the cost of a given monthly volume per signature level derivable from public pages, volume tiers published, and every add-on and price-change term on a public page.

Report an error

The Data Protection Officer

Public are a free account, a 20% discount code for the first billing period of annual eSign PRO and PREMIUM plans, signature packages scalable to need, ready-made templates at no additional cost, a pay-only-for-successfully-issued-certificates model, and signers bearing no cost. No figure for any paid plan, per-signature price, identification fee or document limit appears on the captured pages, so a buyer cannot compute the cost of their signing volume. 4 5 6 8

Report an error

European sovereignty — proven facts

0 of 6 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Hosting location Not determined — uncited Report an error
Hosting options Not determined — uncited Report an error
Open source Not determined — uncited Report an error
Data processing agreement Not determined — uncited Report an error
Transfer impact assessment Not determined — uncited Report an error

Questions about Autenti

Is Autenti European?

Not determined: the vendor’s pages as captured do not say where Autenti is based.

Where does Autenti store data?

Not stated on the vendor’s pages as of 3 Nov 2026.

Does Autenti have a free plan?

Yes. Autenti has a free plan, per the vendor’s page captured 3 Nov 2026.

What are the best alternatives to Autenti?

As of 3 Nov 2026, the panel rates sproof sign (3.5/5), MOXIS (3.5/5) and Signicat Sign (3/5) highest among the other 22 E-Signature products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is sproof sign (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Autenti alternatives.

Where this could be wrong

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

Do you know more about Autenti? Tell us Report an error on this page

Sources (8)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

  1. 1 Vendor page autenti.com Checked 3 Nov 2026 Details →
  2. 2 Security / trust page — found from the homepage autenti.com Checked 3 Nov 2026 Details →
  3. 3 EIDAS levels & trust services — found from sitemap autenti.com Checked 3 Nov 2026 Details →
  4. 4 EIDAS levels & trust services — found from sitemap autenti.com Checked 3 Nov 2026 Details →
  5. 5 Signer identification — found from sitemap autenti.com Checked 3 Nov 2026 Details →
  6. 6 Signer identification — found from sitemap autenti.com Checked 3 Nov 2026 Details →
  7. 7 Signing workflow & signer experience — found from sitemap autenti.com Checked 3 Nov 2026 Details →
  8. 8 Signing workflow & signer experience — found from sitemap autenti.com Checked 3 Nov 2026 Details →