Availability of validation data
Certificates and revocation data needed for later validation must be collected while they are available. Provider data sources may no longer be accessible years later.
TRUSTED PRESERVATION · VALIDATION AND ARCHIVING
Contracts and declarations may need to be verified years after signing. Our Trusted Archiving product supports this by validating signatures and renewing the timestamps needed for preservation. Built on EU DSS (Digital Signature Services), it uses a standard CMIS connection to work with the existing document repository.
A deployed Contum product with over eight years of preservation experience
Storing a file is not enough. Certificates, revocation information, timestamps and renewal events together create a defensible preservation chain.
Starting point
Long-term verifiability depends on preserving the technical evidence available at signing and periodically renewing the evidence chain.
Certificates and revocation data needed for later validation must be collected while they are available. Provider data sources may no longer be accessible years later.
B, T and LT levels contain different sets of timestamps and validation data. Each requires the appropriate additions for long-term preservation.
Unified enterprise handling of PDF, XML, CMS and container-based signatures.
Storing documents is not enough. Validation and timestamp-renewal jobs must be monitored, alongside expiring certificates and any processing errors.
Capabilities
Technical validation of electronic signatures and seals using the open-source EU DSS (Digital Signature Services) software and the configured validation policy.
Certificate chain, CRL, OCSP, timestamp and format checks before ingestion.
Optional sealing at ingestion and periodic renewal of the evidence chain.
Add the validation data and archive timestamps needed for future checks. The LTA (Long-Term Archival) level supports long-term verifiability.
Notifications, exception handling, certificate management and usage tracking.
The capability extends an existing ECM / DMS rather than operating as an isolated repository.
Integration
CMIS (Content Management Interoperability Services) provides a standard interface to content repositories. The preservation component uses it to work with documents in the existing repository, extending that system with Contum’s preservation functions.
Signed document from a signing platform, email, portal or external partner.
→Format, certificate chain, revocation data, timestamp and technically supported legal-effect result.
→Embed missing evidence, timestamp, create LTA and schedule renewal.
→Controlled storage of documents, metadata, validation reports and related evidence.
→Manage alerts, errors, certificates and resealing tasks.
Journey
Preservation can run automatically without business intervention while exceptions and errors stay visible.
Receive document and metadata from the source system.
Check signature, seal, timestamp, certificate and revocation status.
The business system applies its acceptance rules to the validation result. The preservation component produces the report and adds the data needed for long-term validation.
Hand document, evidence and validation result to the DMS.
Periodic check, new timestamp or seal and continuation of the evidence chain.
Use cases
Defensible long-term preservation of customer and partner agreements.
Technical validation of externally signed documents before acceptance.
Add authenticity capabilities to FileNet or another DMS.
Automatically validate and archive the result of signing journeys.
We have supported preservation of electronically signed documents in a client environment for over eight years.
Delivery
We connect technical validation with business acceptance rules, document classes and operational responsibilities.
Formats, signature methods, retention periods and evidentiary requirements.
Acceptance, rejection, augmentation, DMS metadata and exception handling.
Components, provider connections, migration, testing and operations readiness.
Standard and trusted-list changes, certificates, resealing and incidents.
PRESERVATION QUESTION
We assess document types, the current archive and the signature-validation chain.
Trusted Archive assessment↗