Electronic signature vs digital signature: what is the difference?

The short answer

“Electronic signature” covers electronic data used by a person to sign. It describes what the action does in a transaction. “Digital signature” commonly means a method using public-key cryptography: a private key creates a signature that can be checked with a corresponding public key. It describes an underlying technical mechanism.

A digital signature can therefore be a form of electronic signature when it is used to sign, but not every electronic signature uses a digital certificate. Product marketing sometimes blurs these terms, so ask a supplier to explain the exact control rather than relying on the label.

Compare the questions each concept answers

• Electronic-signature process: What did the person see? How did they express intent? Which document and transaction was the action associated with?
• Digital-signature mechanism: Which key produced the cryptographic value? Can the signed data be shown to differ from the data checked later? Who issued and manages any certificate?

Neither phrase alone proves that the human using a device was properly identified, had organisational authority, understood the document or followed a witnessing requirement. Certificate validation and human identity assurance are connected only through the certificate issuance and key-control process.

Advanced and qualified signatures

The eIDAS framework describes advanced electronic signatures through requirements including unique linkage, signer identification, signer control and detectable later change. It also defines qualified electronic signatures through additional qualified certificate and device requirements. Consult the current official Regulation text and specialist advice rather than inferring a status from a product logo.

Orbis Sign should not be described as providing an advanced or qualified electronic signature merely because it captures workflow evidence or hashes completed bytes in some completion paths. Those are specific controls, not a certification claim.

Which should a business use?

Choose a process after assessing document rules, likelihood and impact of dispute, counterparty access, identity assurance, longevity and verification needs. A straightforward electronic workflow may be proportionate for routine paperwork. A regulated or high-risk transaction may justify independent identity checks, certificate-based signing or a specialist execution service.

Whatever method is chosen, keep the surrounding controls: approved-version management, signer authority checks, understandable consent, exception handling and appropriate retention. Read how electronic signatures work for that wider process.