# Signicat Sign — E-Signature

Signicat Sign by Signicat AS holds a panel rating of 2.5/5 from 6 AI judges (category median 2.5/5), as of 2026-10-21. Provenance: provenance unknown; sovereignty: not determined.

- Vendor: Signicat AS (https://www.signicat.com)
- Category: [E-Signature](https://whats-best.ai/software/e-signature.md)
- Provenance (editorial classification): provenance unknown
- Canonical page: https://whats-best.ai/software/e-signature/signicat-sign
- Alternatives: https://whats-best.ai/software/e-signature/signicat-sign/alternatives ([markdown](https://whats-best.ai/software/e-signature/signicat-sign/alternatives.md))
- Data as of: 2026-10-21 · evaluated 2026-10-21 · oldest source captured 2026-10-20

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Signicat AS
- Headquarters: Not stated on the vendor’s pages as of 20 Oct 2026
- Data hosting: Default not stated; pages mention Europe [S6]
- Free plan: Not stated on the vendor’s pages as of 20 Oct 2026

## The panel's verdict

Signicat Sign is an e-signature product from Signicat AS of Trondheim, Norway; the vendor names itself an eIDAS-certified qualified trust service provider. Identity verification is the strongest area, with over 240 identity methods: 35 European eIDs such as MitID, BankID and itsme, all EU Digital Identity Wallets, NFC chip reading and video identification. Evidence and retention rests on PAdES packaging, timestamped authentication events and retention configurable from 1 month to 50 years; signing workflow covers templates with conditional logic and parallel multi-signer signing. Signature levels sit at a flat 4: only the qualified level (single-use or four-year certificates) is labelled, with no public information on which plan or country offers which level. Integration and API scores span 4-6 — Sign API v2 has public documentation, sandbox and SDKs; we found no public information on named connectors. Sovereignty scores 3-4: Signicat AS is a Norwegian (EEA, not EU) entity, and the captured pages give different figures for storage — Europe on one, the EU on the other. Pricing transparency scores 0-1; only a free trial and test account are public.

**Speaks for it:**
- Over 240 identity methods are named, from 35 European eIDs such as MitID, BankID and itsme to all EU Digital Identity Wallets, NFC chip reading and video identification, with the vendor performing verification itself.
- Retention is configurable from 1 month to 50 years, with a documented retention and deletion lifecycle guide.
- Qualified signatures are offered as single-use or four-year certificates by a vendor that names itself the eIDAS-certified qualified trust service provider.
- Sign API v2 has public OpenAPI reference documentation, webhooks, sandbox environments, SDKs and a free developer test account.
- Signed documents are packaged as PAdES containers, with audit trails and automatic timestamping of authentication events stored for audits and dispute resolution.

**Held against it:**
- Only the qualified signature level is labelled; we found no public information on which plan or country offers which level.
- We found no public information on connectors for Microsoft 365, Google Workspace or any CRM, HR, DMS or ERP system, nor on published API rate limits.
- We found no public information on ownership, a subprocessor list or certifications such as ISO 27001, and corporate email is processed through Microsoft Exchange cloud.
- The audit trail's contents are not spelled out; we found no public information on long-term validation, a named timestamp provider or bulk export of documents with their evidence.
- We found no public information on plan prices, per-signature fees, identification fees or API pricing; the public offers are a free eID and wallets trial and a free developer test account.

**Best for:**
- You sign with people across the Nordics, DACH or Benelux who hold national eIDs such as BankID, MitID or itsme, or EU wallets.
- You need qualified electronic signatures with retention you can set from 1 month to 50 years for contracts that may be disputed years later.
- Your developers will drive signing through a documented REST API with a sandbox and SDKs rather than a standalone portal.
- You need each signer's identity verified in the same flow, using NFC chip reading or video identification.

**Avoid if:**
- You need to know the cost of your signing volume before talking to sales — the public pages show only a free eID and wallets trial, a free developer test account and expert contact.
- You must route documents by labelled simple, advanced and qualified levels per plan and country — the captured pages label only the qualified level.
- You expect to send documents from inside Microsoft 365, Google Workspace or your CRM without developers — the documented integration paths are OpenID Connect, SAML 2.0 and REST.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The Legal Counsel | The HR Operations Lead | The Revenue Operations Lead | The Integration Engineer | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| eIDAS levels & trust services | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Signer identification | 3/5 | 3.5/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| Signing workflow & signer experience | 3/5 | 3/5 | 2.5/5 | 3/5 | 3/5 | 2.5/5 |
| Evidence, validation & retention | 3/5 | 3/5 | 3/5 | 2.5/5 | 2.5/5 | 2.5/5 |
| Integrations & API | 2.5/5 | 2/5 | 2.5/5 | 3/5 | 2/5 | 2/5 |
| European sovereignty | 1.5/5 | 2/5 | 1.5/5 | 2/5 | 2/5 | 2/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **2.5/5** | **3/5** | **2.5/5** | **2.5/5** | **2.5/5** | **2.5/5** |

### The judges

- **The Legal Counsel** (v1.0): Decides which contracts may be signed electronically and at which level. Wants SES, AdES and QES named per plan and country, the qualified trust service provider linked to the EU Trust List, and an audit trail with timestamps that still validates when the contract is disputed in eight years.
- **The HR Operations Lead** (v1.0): Sends two hundred employment contracts a year, many of them fixed-term and so under written form. Wants QES that a new hire can complete on a phone in ten minutes, identification that accepts the IDs applicants actually hold, bulk sending from templates, and a price per qualified signature known before the contract is signed.
- **The Revenue Operations Lead** (v1.0): Measures how long a quote takes to come back signed and where it stalls. Wants signing from inside the CRM, templates sales cannot break, reminders and signing order that run themselves, and a signer experience that needs no account, no app and no explanation.
- **The Integration Engineer** (v1.0): Embeds signing into the company's own portal and archives the result in the DMS. Wants a versioned API with webhooks and a sandbox, every signature level reachable through the API rather than only in the web app, and signed documents exported with their evidence intact.
- **The Data Protection Officer** (v1.0): Knows every signer who holds an ID card up to a camera hands biometric and identity data to a provider they never chose. Asks who performs the identification, where documents and ID data are stored, how long the audit trail keeps IP addresses, and who the subprocessors in the trust service chain are.
- **The Skeptic** (v1.0): Knows "legally binding" usually means a simple signature. Reads for the level the default plan actually signs at, the QTSP the provider does not operate itself, the per-QES and ident fees on top of the plan, the envelope limit, and "eIDAS-compliant" from a provider that names no trust service at all.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Accessibility measures: mission statement inclusion · internal policies · procurement practices · accessibility officer · staff training · goals and responsibilities · quality assurance methods [S8]
- Aml standards: 5AMLD · 6AMLD [S4]
- Assessment approach: Self-evaluation [S8]
- Claim: Regulatory compliant electronic signatures [S11]
- Cookie analytics tools: Google Analytics · Unbounce · HubSpot · Olark · Salesforce · Bing Ads [S2]
- Eidas EU interoperability: yes [S4]
- Enforcing authority norway: Norwegian Digitalisation Agency · Norway [S8]
- EU regulations: Europe · European regulations and best practices [S10]
- GDPR purpose: yes [S2]
- Opt out: yes [S2]
- Regulations: AMLR · KYC · eIDAS 2.0 · GDPR [S5]
- Statement date: 2021-12-20 [S8]
- Technologies: HTML · WAI-ARIA · CSS · JavaScript [S8]

**Data**
- Demo deletion: yes [S2]
- Ip truncation: yes [S2]
- Lifecycle docs: yes [S11]

**Hosting**
- Data residency: Europe [S6]
- EU storage: EU · yes [S10]

**Integrations**
- API base URL: https://api.signicat.com/sign [S11]
- API reference: yes [S11]
- Standards: OpenID Connect (OIDC) · SAML 2.0 · REST API [S1]
- Webhook events: package.completed · package.failed · Signicat Dashboard [S11]

**Legal**
- Entity: Signicat AS · Beddingen 16, 7042 Trondheim, Norway · Norway · NO989584022 [S2]

**Pricing**
- Free trial: free eID and wallets trial · yes [S5]

**Product**
- Any device onboarding: yes [S4]
- Assurance levels: All assurance levels for low and high risk onboarding cases [S6]
- Audit trails: yes [S10]
- Authentication: eID and Wallet Hub · ReuseID · Passkeys · MobileID · multi-factor login with electronic IDs, EU Digital Identity Wallets, biometric scanning, SMS/email OTP and in-app solutions [S1]
- Authentication vault: automatic timestamping · storage of authentication events · yes · audits · dispute resolution [S5]
- Benefits: yes · yes · yes [S9]
- Capabilities: secure logins · identity verification · e-signatures · payment approvals [S5]
- Capabilities: storage · security · search · sealing · signicat future offering [S9]
- Certificate options: single use · long term valid four years [S4]
- Company experience: nearly two decades [S5]
- Core purpose: Reliable evidence of who did what and when; storage and management of consent and transactional data [S9]
- Country examples: Swedish BankID · Norwegian BankID · MitID · Mobiilivarmenne [S5]
- Covered countries: Nordics · DACH · Benelux · Other [S5]
- Customer count: 21000 [S1]
- Developer experience: yes · yes · yes [S5]
- Eid combination: ID document verification can be combined with eID or EUDI Wallet verification [S6]
- Eid count: all EU Digital Identity Wallets · 35 · single API [S5]
- Eid names: MitID, BankID, FTN, itsme and many more [S5]
- Eidas2 alignment: yes [S5]
- Eidas qtsp status: yes [S4]
- Electronic signing: Electronic Signature API · Dokobit Portal by Signicat · Digital Evidence Management [S1]
- Encryption: yes · yes [S10]
- EU digital identity wallets: wallet-based logins and signatures, age and identity verification, verified credentials issuance [S1]
- Eudi deadline: Strong Customer Authentication (SCA) · late 2027 [S5]
- Free account: free test account offered for developers [S1]
- GDPR rights: informed · access · rectification · withdraw consent / be forgotten · blocking · object to direct marketing [S2]
- Global coverage: Global coverage; remotely onboard users from anywhere [S6]
- Id archival: Verified ID documents archived for years per AML regulations, with redaction and watermarking safeguards [S6]
- Id document biometric verification: Signicat offers ID document and biometric verification for automating ID document checks [S6]
- Identity methods count: 240 [S1]
- Identity proofing: eID and Wallet Hub · ID Document and Biometric Verification · ReuseID · Data Verification · identity checks as part of KYC/KYB and AML-compliant digital onboarding [S1]
- Instant retrieval: user interface · yes [S10]
- Legal binding equivalence: yes [S4]
- Mandatory view only documents: yes [S11]
- Merchant signing: yes · no [S11]
- Multi signer parallel authentication: Freja · MitID · FTN · iDIN · SMS OTP · Email OTP · yes [S11]
- Newsletter third party: email · yes [S2]
- Newsletter unsubscribe: yes · yes [S2]
- Norwegian bankid pki locking: yes · yes [S11]
- Notifications email sms: email · sms · yes [S11]
- Packaging async webhook: yes · webhook [S11]
- Pades packaging: yes [S11]
- Parallel transition: yes [S5]
- Permission required: Signature API [S11]
- Platform summary: AI-powered digital identity platform covering onboarding, signing, login and identity workflow automation [S1]
- Pre authentication: yes [S11]
- Processing pipeline: real-time video processing · deep learning biometrics · IDs verification across Europe · instant OCR data extraction [S4]
- Product accessibility statements: developer documentation site · yes [S8]
- Qes combination: Combines with electronic signatures for Qualified Electronic Signatures [S6]
- Qesmulti video identification: QES with AI-powered biometric video identification for onboarding [S4]
- Readid biometric options: ReadID offers optional biometric holder checks and deepfake detection, fully automatic and scalable [S6]
- Readid false accepts: yes [S6]
- Readid nfc verification: ReadID: NFC-based verification reading the secure chip of e-passports, ID cards, residence permits via cryptographically signed chip data [S6]
- Rejection with reason: yes · yes [S11]
- Requested attributes: yes [S11]
- Retention customisable: 50 · 1 · yes [S10]
- Retention range: 50 [S10]
- Reuseid: ReuseID: onboarding credentials reused for passwordless logins or payment authorisations [S6]
- Scenarios: payment transactions · GDPR · KYC and AML · fraud detection and prevention · handle disputes [S9]
- Signature forwarding: yes [S11]
- Signature type in output: XADES · PADES_CONTAINER [S11]
- Signicat mint: Signicat Mint: no-code end-to-end onboarding flows for identity verification, fraud/AML risk assessment, document signing [S6]
- Signing flows: AUTHENTICATION_BASED · PKISIGNING [S11]
- Signing session deadline: 45 · 30 [S11]
- Single integration API: One API, one vendor, all major ID verification methods [S6]
- Template example document kyc: Document-based KYC template: verify user identities using document capture, biometrics and automated compliance checks [S7]
- Templates access path: Products > Signicat Mint > Templates [S7]
- Templates completeness: yes [S7]
- Templates definition: Signicat Mint templates are pre-built, ready-to-use workflow blueprints [S7]
- Templates embeddable in workflows: yes [S7]
- Templates modifiable: yes [S7]
- Templates use cases: user_onboarding · electronic_signing · identity_verification · data_collection [S7]
- Text signing: yes [S11]
- Trust orchestration: Signicat Mint · RiskFlow Orchestration · Digital Evidence Management [S1]
- Unsigned documents: yes [S10]
- Upload document formats: pdf · plain_text · yes [S11]
- Vault compliance: yes · yes [S5]
- Verification process: Process: ID document verification, then biometric holder verification, then decision [S6]
- Videoid fraud detection: VideoID analyses each video frame in real time with ML models for fraud, deepfakes, tampering [S6]
- Videoid use cases: VideoID suited when AML/risk requires human-in-the-loop or recorded evidence, for web flows and regions without chipped IDs [S6]
- Videoid verification: VideoID: video-based verification with AI/ML, liveness check, and optional human checks [S6]
- View only excluded from archive: no · no · no [S11]
- Visitor logs: IP address · page views · visit duration [S2]
- Wallet rollout: 2026 · yes [S5]

**Support**
- Documentation: yes [S6]
- Documentation: yes [S9]
- Expert contact: yes [S9]
- Feedback channel: feedback on accessibility barriers welcomed [S8]

## Questions

### Is Signicat Sign European?

Not determined: the vendor’s pages as captured do not say where Signicat Sign is based.

### Where does Signicat Sign store data?

The default storage location for customer data is not stated on the vendor’s pages as of 20 Oct 2026. The vendor’s pages mention Europe as hosting location, per [the vendor’s page captured 20 Oct 2026](https://whats-best.ai/evidence/9430).

### Does Signicat Sign have a free plan?

Not stated on the vendor’s pages as of 20 Oct 2026.

### What are the best alternatives to Signicat Sign?

As of 21 Oct 2026, the panel rates [Scrive (3/5)](https://whats-best.ai/software/e-signature/scrive), [Viafirma Documents (2.5/5)](https://whats-best.ai/software/e-signature/viafirma-documents) and [Penneo (2.5/5)](https://whats-best.ai/software/e-signature/penneo) highest among the other 18 E-Signature products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Scrive](https://whats-best.ai/software/e-signature/scrive) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Signicat Sign alternatives](https://whats-best.ai/software/e-signature/signicat-sign/alternatives).

## What this page leaves out

- 7 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown.

## Sources

- [S1] Vendor page: https://www.signicat.com (checked 2026-10-20)
- [S2] Privacy policy — found from the homepage: https://www.signicat.com/about/privacy-policy (checked 2026-10-20)
- [S3] EIDAS levels & trust services — found from sitemap: https://www.signicat.com/about/qualified-signature-seal-validation-services (checked 2026-10-20)
- [S4] EIDAS levels & trust services — found from sitemap: https://www.signicat.com/products/electronic-signing/signatureid-qes (checked 2026-10-20)
- [S5] Signer identification — found from sitemap: https://www.signicat.com/products/identity-proofing/eid-hub (checked 2026-10-20)
- [S6] Signer identification — found from sitemap: https://www.signicat.com/products/identity-proofing/id-document-and-biometric-verification (checked 2026-10-20)
- [S7] Signing workflow & signer experience — found from sitemap: https://developer.signicat.com/docs/mint/templates/ (checked 2026-10-20)
- [S8] Signing workflow & signer experience — found from sitemap: https://www.signicat.com/about/accessibility-statement (checked 2026-10-20)
- [S9] Evidence, validation & retention — found from sitemap: https://www.signicat.com/products/digital-evidence-management (checked 2026-10-20)
- [S10] Evidence, validation & retention — found from sitemap: https://www.signicat.com/products/electronic-signing/signicat-archive (checked 2026-10-20)
- [S11] Integrations & API — found from sitemap: https://developer.signicat.com/docs/electronic-signing/sign-api-v2/integration-guide/ (checked 2026-10-20)

---

Cite as: whats-best.ai, "Signicat Sign — E-Signature", AI panel analysis, as of 2026-10-21. https://whats-best.ai/software/e-signature/signicat-sign

Corrections: https://whats-best.ai/correct/900?target=page