New to the DARZ portfolio:
Electronic signatures — securely operated in Germany
Now available, powered by Paperless Trust
We now offer qualified electronic signatures and seals compliant with eIDAS 2.0. Unlike cloud-only solutions, our service is operated in our own high-security data centers in Germany — geo-redundant, independently certified, and designed to give you full data sovereignty.
What the service sees — and what it doesn’t
When it comes to digital signatures, one question matters: What information does the signature service actually receive?
Our approach is simple: Your documents stay within your environment. Only a cryptographic fingerprint — known as a hash — is transmitted to the signature service. This enables the cryptographic signing process without exposing or allowing reconstruction of the original document content.
The service’s role is to securely manage the cryptographic keys. These keys are stored exclusively in certified hardware security modules (HSM/QSCD) and never leave them. Because control of the keys ultimately means control of the signature, where the signature service is operated matters.
With our solution, both your documents and cryptographic keys remain under German data sovereignty throughout the entire process.
Our credentials at a glance:
- ISO/IEC 27001: Certified information security operations
- BSI C5 Type 2: Independently verified effectiveness of controls over a defined audit period
- DIN EN 50600 CAT III: High-availability infrastructure
- Geo-redundancy: Mirrored operations across separate locations in Germany
- HSM / QSCD: Keys are securely stored in certified security modules and cannot be exported
Our technology partner Paperless Trust, acting as a Qualified Trust Service Provider (QTSP), delivers the qualified trust service. DARZ operates the infrastructure and remains your primary point of contact.
The certificates are listed on the EU Trusted List, ensuring that signatures and seals are recognised and validated in applications such as Adobe Acrobat — including the familiar “green checkmark”.
No special hardware. No account required for external signers.
As a fully remote signing and sealing service, there’s no need for signature cards or card readers. Sign securely from any device, always under your sole control.
The process starts with a one-time identity verification. Choose from eID, automated or AI-powered identification, video identification, or in-person verification. Once verified, your identity can be reused.
External signers don’t need an account, password, or second authentication factor.
Use the service through our platform, integrate it directly into your own systems via REST API and SDK, or choose from ready-to-use clients — including Explorer and SAP integration.
Pricing is based on volume packages, with lower transaction costs at higher volumes. Identity verification is a one-time process per person. Certificates and qualified timestamps are included, with no setup fees.
Sign digitally with confidence — from any device, without special hardware, and with German data sovereignty.
The difference shows when it matters: during an audit
When everything runs smoothly, one signature service can look much like another. The real difference becomes clear when your auditor starts asking questions:
Where are the keys stored? Who has access? And over what period has the effectiveness of the controls been independently verified?
Our answer is documentation — not promises.
We provide an ISO 27001 certificate, a BSI C5 Type 2 attestation covering a defined audit period, and clear information about our locations and operating model. Everything is clearly defined, independently documented, and available for review before you make your decision.
Can the solution be integrated with our existing systems?
Yes. Our API makes it easy to integrate the solution with your existing systems. Typical use cases include ERP, CRM and document management systems, as well as other business applications. Once we have reviewed your interfaces and requirements, we can provide an estimate of the implementation effort involved.
Can the solution be integrated with our existing systems?
Yes. Our API makes it easy to integrate the solution with your existing systems. Typical use cases include ERP, CRM and document management systems, as well as other business applications. Once we have reviewed your interfaces and requirements, we can provide an estimate of the implementation effort involved.
Do I need a signature card?
No. With remote signing, you can sign documents securely and with legal validity directly in your browser — no additional hardware required.
Where is the data processed?
All data is processed exclusively in Germany. The service is operated and data is hosted in DARZ’s ISO 27001-certified data center in Darmstadt. Data processing is governed by a data processing agreement in accordance with Article 28 of the GDPR.
Where is the data processed?
All data is processed exclusively in Germany. The service is operated and data is hosted in DARZ’s ISO 27001-certified data center in Darmstadt. Data processing is governed by a data processing agreement in accordance with Article 28 of the GDPR.
Can we create and modify forms ourselves?
Yes. Forms can be created using a simple drag-and-drop editor and maintained directly by your business teams. We’re here to support you with the initial setup and more complex field logic.
