[{"data":1,"prerenderedAt":1969},["ShallowReactive",2],{"article:\u002Ffr\u002Fblog\u002Fniveaux-de-signature-electronique-eidas":3},{"post":4,"en":279,"fr":1372},{"id":5,"title":6,"body":7,"category":263,"country":264,"description":265,"extension":266,"featured":267,"meta":268,"navigation":269,"path":270,"primaryKeyword":271,"pubDate":272,"published":267,"readingTime":273,"seo":274,"stat":275,"statCaption":275,"stem":276,"translationKey":277,"verifiedDate":272,"__hash__":278},"blogFr\u002Ffr\u002Fblog\u002Fniveaux-de-signature-electronique-eidas.md","SES, AES et QES : les trois niveaux eIDAS et celui dont vous avez réellement besoin",{"type":8,"value":9,"toc":249},"minimark",[10,14,17,22,99,104,107,114,117,120,124,127,130,133,136,140,143,150,153,159,163,166,172,178,181,185,192,195,198,202,208,214,218,225,232,235],[11,12,13],"p",{},"Toute signature électronique dans l'Union européenne se situe à l'un de trois niveaux. Ce ne sont pas des paliers commerciaux inventés par les fournisseurs : ils sont définis par eIDAS, le règlement qui encadre l'identification électronique et les services de confiance, et le niveau détermine ce qui se passe le jour où quelqu'un conteste la signature.",[11,15,16],{},"La plupart des gens qui achètent un outil de signature ne savent jamais quel niveau ils achètent. C'est le problème que cet article cherche à résoudre.",[18,19,21],"h2",{"id":20},"les-trois-niveaux","Les trois niveaux",[23,24,25,43],"table",{},[26,27,28],"thead",{},[29,30,31,34,37,40],"tr",{},[32,33],"th",{},[32,35,36],{},"Exige",[32,38,39],{},"En cas de litige",[32,41,42],{},"Usage typique",[44,45,46,65,82],"tbody",{},[29,47,48,56,59,62],{},[49,50,51,55],"td",{},[52,53,54],"strong",{},"SES"," simple",[49,57,58],{},"Une signature et, en pratique, une piste d'audit. Aucun certificat.",[49,60,61],{},"Recevable. C'est à vous de prouver qui a signé.",[49,63,64],{},"Validations internes, consentement à faible enjeu.",[29,66,67,73,76,79],{},[49,68,69,72],{},[52,70,71],{},"AES"," avancée",[49,74,75],{},"Signataire authentifié, signature liée de façon univoque, modifications ultérieures détectables.",[49,77,78],{},"Forte. Difficile à désavouer de façon crédible.",[49,80,81],{},"La plupart des accords commerciaux.",[29,83,84,90,93,96],{},[49,85,86,89],{},[52,87,88],{},"QES"," qualifiée",[49,91,92],{},"Tout l'AES, plus un certificat qualifié d'un prestataire inscrit sur la liste de confiance européenne et une clé en matériel certifié.",[49,94,95],{},"Équivalente à la signature manuscrite dans toute l'UE. C'est à l'autre de prouver qu'elle est invalide.",[49,97,98],{},"Là où la loi l'exige spécifiquement.",[100,101,103],"h3",{"id":102},"ses-le-niveau-par-défaut-plus-faible-quil-ny-paraît","SES : le niveau par défaut, plus faible qu'il n'y paraît",[11,105,106],{},"La signature électronique simple est le socle. eIDAS la définit assez largement pour qu'un nom saisi au clavier, un tracé au doigt ou une case « j'accepte » cochée relèvent tous du même niveau. Ni certificat ni contrôle d'identité ne sont exigés par la définition.",[11,108,109,110,113],{},"Le point essentiel n'est pas que la SES ne vaut rien. eIDAS dit explicitement qu'une signature ne peut pas être privée d'effet juridique ",[52,111,112],{},"au seul motif"," qu'elle est électronique ou qu'elle ne satisfait pas aux exigences d'une signature qualifiée. Une SES est recevable.",[11,115,116],{},"Ce que la SES ne fait pas, c'est vous aider quand l'autre partie dit « ce n'était pas moi ». Vous devez alors le prouver vous-même, à partir de tout ce que vous avez conservé autour : les échanges, l'adresse IP, les horodatages, le comportement. Si vous avez tenu une bonne piste d'audit, cela suffit souvent. Si vous n'avez rien gardé, vous avez une signature que personne ne peut se voir attribuer.",[11,118,119],{},"La plupart des signatures électroniques en usage commercial quotidien sont des SES. C'est adapté à la plupart des usages qu'on en fait.",[100,121,123],{"id":122},"aes-le-niveau-à-viser","AES : le niveau à viser",[11,125,126],{},"Une signature électronique avancée doit satisfaire quatre exigences : être liée au signataire de manière univoque, permettre de l'identifier, être créée à l'aide de données que le signataire peut utiliser sous son contrôle exclusif, et être liée aux données signées de telle sorte que toute modification ultérieure soit détectable.",[11,128,129],{},"Lisez-les attentivement et remarquez ce qui manque : rien n'impose qu'un tiers se porte garant de l'identité. On peut atteindre le niveau AES avec sa propre infrastructure, à condition d'authentifier réellement le signataire et de lier réellement la signature au document.",[11,131,132],{},"C'est pourquoi l'AES est le niveau que la plupart des produits devraient viser, et celui dont la plupart des contrats commerciaux ont réellement besoin. Il fait passer de « nous pensons que c'était lui » à « la signature était liée cryptographiquement à une session authentifiée, et le document n'a pas changé depuis ». En pratique, cela met fin à la plupart des litiges avant qu'ils n'en deviennent.",[11,134,135],{},"Le coût du passage de SES à AES est un travail d'ingénierie, pas un contrat fournisseur. C'est le fait le plus utile de cet article.",[100,137,139],{"id":138},"qes-le-niveau-le-plus-élevé-et-le-besoin-le-plus-étroit","QES : le niveau le plus élevé, et le besoin le plus étroit",[11,141,142],{},"Une signature électronique qualifiée est une signature avancée créée à l'aide d'un dispositif qualifié de création de signature et reposant sur un certificat qualifié. Le certificat est délivré par un prestataire de services de confiance qualifié inscrit sur une liste de confiance officielle de l'Union, après vérification de l'identité de la personne, et la clé privée réside dans du matériel certifié.",[11,144,145,146,149],{},"Le bénéfice juridique est précis et considérable : une QES a l'",[52,147,148],{},"effet juridique équivalent à celui d'une signature manuscrite"," dans toute l'Union, et chaque État membre doit reconnaître une QES délivrée dans un autre État membre. La charge de la preuve s'inverse : c'est à celui qui conteste de démontrer l'invalidité.",[11,151,152],{},"Le coût est tout aussi précis. Chaque signataire doit être identifié par le prestataire, ce qui représente un coût par personne et une étape réelle dans le parcours utilisateur. Les tarifs sont sur devis et augmentent avec la méthode d'identification.",[11,154,155,158],{},[52,156,157],{},"Qui a réellement besoin d'une QES ?"," Certaines transactions immobilières, les actes notariés, certains dépôts auprès d'administrations, et des contrats de travail ou de crédit spécifiques dans des pays dont l'Allemagne, l'Espagne, l'Italie et la France. La liste est plus étroite que ne le laissent entendre les fournisseurs, elle est nationale plutôt qu'européenne, et elle évolue. Si quelqu'un vous affirme que votre contrat de prestation B2B ordinaire exige une QES, demandez-lui sur quelle disposition nationale il s'appuie.",[18,160,162],{"id":161},"comment-déterminer-le-niveau-quil-vous-faut","Comment déterminer le niveau qu'il vous faut",[11,164,165],{},"Deux questions, dans cet ordre.",[11,167,168,171],{},[52,169,170],{},"Un : existe-t-il une exigence légale ?"," Pour ce type de document précis, dans ce pays précis, une règle impose-t-elle une signature qualifiée ou un acte notarié ? Si oui, la réponse est arrêtée pour vous, et aucune ingénierie ne s'y substitue. Si non, passez à la suite.",[11,173,174,177],{},[52,175,176],{},"Deux : quel est votre risque réel ?"," Combien d'argent est en jeu, quelle est la probabilité que la partie adverse conteste, et quelle preuve voudriez-vous avoir devant un juge ? Pour un bon de livraison signé par un chauffeur, une piste d'audit est proportionnée. Pour un contrat de location de matériel à cinquante mille euros, vous voulez probablement que le signataire soit authentifié.",[11,179,180],{},"Remarquez que la seconde question porte sur la preuve, pas sur la conformité. La plupart du temps, vous ne satisfaites pas une règle : vous décidez quelle quantité de preuve acheter.",[18,182,184],{"id":183},"le-cachet-qui-nest-pas-sur-cette-échelle","Le cachet, qui n'est pas sur cette échelle",[11,186,187,188,191],{},"Un point qui brouille souvent le tableau : eIDAS définit aussi les ",[52,189,190],{},"cachets"," électroniques, qui suivent la même graduation simple, avancé, qualifié, mais font un travail différent.",[11,193,194],{},"Une signature est donnée par une personne et porte une intention. Un cachet est émis par une organisation et porte une origine. Comme un cachet n'attend personne, il peut être apposé automatiquement, au moment où le document est généré, ce qu'aucune signature ne peut faire à aucun niveau.",[11,196,197],{},"Les deux ne sont donc pas des alternatives. Un document peut porter le cachet d'une organisation prouvant d'où il vient, et la signature d'une personne prouvant qu'elle l'a accepté, chacun répondant à une question que l'autre ne peut pas traiter.",[18,199,201],{"id":200},"deux-expressions-à-considérer-avec-méfiance","Deux expressions à considérer avec méfiance",[11,203,204,207],{},[52,205,206],{},"« Conforme eIDAS »."," Les trois niveaux sont conformes au règlement : l'expression est donc tout aussi vraie de l'option la plus faible du marché que de la plus forte. Techniquement exacte, elle n'apporte aucune information. Demandez toujours le niveau.",[11,209,210,213],{},[52,211,212],{},"« Signature certifiée »."," Cela n'a aucune définition dans eIDAS. Les niveaux sont simple, avancé, qualifié. Un terme extérieur au vocabulaire du règlement ne peut pas être vérifié au regard de celui-ci.",[18,215,217],{"id":216},"ce-que-fait-docspawn","Ce que fait docspawn",[11,219,220,221,224],{},"docspawn génère des documents à partir de vos données et y recueille des signatures. Ces signatures sont des ",[52,222,223],{},"signatures électroniques simples"," : un lien, un nom donné sur un téléphone, et une piste d'audit indiquant qui a rempli quoi et quand. Aucune vérification d'identité n'intervient dans ce parcours à ce jour, et le niveau avancé est prévu.",[11,226,227,228,231],{},"Séparément, et c'est la partie qui est en production : vous pouvez cacheter n'importe quel document généré par docspawn avec un ",[52,229,230],{},"cachet électronique qualifié"," et un horodatage qualifié, apposés pendant la production du document. Le cachet est une option que vous activez, pas quelque chose d'appliqué à tout. Et c'est un cachet, pas une signature : il prouve que le document a été émis par le système de docspawn, à partir de cet enregistrement, à cet instant, et qu'il n'a pas changé depuis. Il ne dit rien de qui l'a signé.",[11,233,234],{},"Nous indiquons le niveau de signature actuel clairement, et nous refusons de laisser le cachet le brouiller, parce que c'est précisément le propos de cet article : les fournisseurs devraient le faire. Si l'un d'eux ne peut pas vous dire lequel des trois niveaux vous achetez, c'est déjà une réponse.",[11,236,237,238,243,244,248],{},"À lire également : ",[239,240,242],"a",{"href":241},"\u002Ffr\u002Fblog\u002Fqu-est-ce-qu-un-cachet-electronique","Qu'est-ce qu'un cachet électronique, et en quoi diffère-t-il d'une signature ?"," et ",[239,245,247],{"href":246},"\u002Ffr\u002Fblog\u002Fprovenance-et-integrite","Provenance et intégrité : deux choses différentes qu'un document peut prouver",".",{"title":250,"searchDepth":251,"depth":251,"links":252},"",2,[253,259,260,261,262],{"id":20,"depth":251,"text":21,"children":254},[255,257,258],{"id":102,"depth":256,"text":103},3,{"id":122,"depth":256,"text":123},{"id":138,"depth":256,"text":139},{"id":161,"depth":251,"text":162},{"id":183,"depth":251,"text":184},{"id":200,"depth":251,"text":201},{"id":216,"depth":251,"text":217},"trust","eu","Le droit européen classe les signatures électroniques selon l'identité vérifiée qui se trouve derrière. Ce qu'exige chaque niveau, ce qu'il vaut en cas de litige, et pourquoi la plupart des contrats n'ont pas besoin du plus élevé.","md",false,{},true,"\u002Ffr\u002Fblog\u002Fniveaux-de-signature-electronique-eidas","signature électronique valeur légale","2026-07-27",8,{"title":6,"description":265},null,"fr\u002Fblog\u002Fniveaux-de-signature-electronique-eidas","eidas-signature-levels","is4sgxzOy8C0A1WFHvv5g9anln2B754mxRRLcYSVJio",[280,531,769,944,1128],{"id":281,"title":282,"body":283,"category":263,"country":523,"description":524,"extension":266,"featured":267,"meta":525,"navigation":269,"path":526,"primaryKeyword":275,"pubDate":272,"published":267,"readingTime":527,"seo":528,"stat":275,"statCaption":275,"stem":529,"translationKey":275,"verifiedDate":272,"__hash__":530},"blogEn\u002Fblog\u002Fdoes-a-generated-pdf-hold-up.md","Does a generated PDF hold up as evidence?",{"type":8,"value":284,"toc":514},[285,288,291,294,298,305,308,315,319,322,333,339,345,349,352,355,389,392,395,399,402,409,416,422,425,429,436,439,442,449,453,456,483,486,490,493,496,499,502],[11,286,287],{},"Somebody disputes a delivery note. The customer says the damage was already there. You have a PDF, generated automatically, with a signature drawn on a phone at the depot.",[11,289,290],{},"Does it hold up?",[11,292,293],{},"Usually yes, and considerably less strongly than the people who generated it assume. The reasons are worth understanding before you need them rather than after.",[18,295,297],{"id":296},"the-good-news-first","The good news first",[11,299,300,301,304],{},"A document is not inadmissible because it was produced by software. In the EU, eIDAS is explicit that an electronic signature cannot be denied legal effect ",[52,302,303],{},"solely"," because it is electronic or because it fails to meet the requirements of a qualified signature. Comparable principles apply in most other jurisdictions with modern evidence rules.",[11,306,307],{},"So the naive fear, that automating document production somehow makes the output count for less, is unfounded. A generated PDF is a document like any other.",[11,309,310,311,314],{},"The real question was never admissibility. It is ",[52,312,313],{},"weight",": how much work your document does once it is in front of someone who has to decide.",[18,316,318],{"id":317},"what-actually-decides-weight","What actually decides weight",[11,320,321],{},"Three things, roughly in order of how often they matter.",[11,323,324,327,328,332],{},[52,325,326],{},"Can you attribute it to a person?"," This is where most disputes live. Not \"was this document altered\" but \"was that actually them, and did they understand what they were agreeing to\". A drawn signature on a phone, with no identity check anywhere in the process, is evidence that ",[329,330,331],"em",{},"somebody"," signed. Tying it to a named individual depends entirely on the surrounding record.",[11,334,335,338],{},[52,336,337],{},"Can you show it has not changed?"," Easier to answer, and the part most tooling covers. A cryptographic seal or signature over the document's hash makes any later edit detectable. Without one, you are relying on your own file storage and your own word.",[11,340,341,344],{},[52,342,343],{},"Can you show where it came from?"," The question people forget until they need it. Was this generated from the order record it references, or typed into a template by hand? A document can be entirely unaltered and still have been wrong from the moment it was created. Integrity protection does not catch that; it fixes the contents in place without saying anything about whether they were right.",[18,346,348],{"id":347},"the-audit-trail-is-doing-more-work-than-you-think","The audit trail is doing more work than you think",[11,350,351],{},"For a signature with no identity verification behind it, the audit trail is not a nice extra. It is most of your case.",[11,353,354],{},"What is worth capturing, and what a dispute actually turns on:",[356,357,358,365,371,377,383],"ul",{},[359,360,361,364],"li",{},[52,362,363],{},"Who"," the link was sent to, and by what channel",[359,366,367,370],{},[52,368,369],{},"When"," each step happened: sent, opened, filled, submitted",[359,372,373,376],{},[52,374,375],{},"What"," was on screen at the moment of signing, meaning the exact document version",[359,378,379,382],{},[52,380,381],{},"From where",", meaning IP address and device, imperfect but corroborating",[359,384,385,388],{},[52,386,387],{},"What changed afterwards",", ideally nothing, and provably so",[11,390,391],{},"None of that is exotic, and most systems capture some of it. The failure mode is capturing it in a form that is not exportable, or overwriting it, or keeping it only for ninety days.",[11,393,394],{},"A practical test: could you produce, today, a complete history of one specific document from eighteen months ago, in a form somebody outside your company could read? If not, your audit trail is a log rather than evidence.",[18,396,398],{"id":397},"the-three-levels-briefly","The three levels, briefly",[11,400,401],{},"European law grades electronic signatures by how much verified identity sits behind them, and the level maps directly onto the attribution question above.",[11,403,404,405,408],{},"A ",[52,406,407],{},"simple"," signature (SES) is a signature with no certificate and no required identity check. Admissible, and you carry the burden of proving who signed.",[11,410,411,412,415],{},"An ",[52,413,414],{},"advanced"," signature (AES) authenticates the signer, binds the signature uniquely to them, and makes later changes detectable. This is the level that turns the attribution question from an argument into a record, and it is where most commercial documents should be.",[11,417,404,418,421],{},[52,419,420],{},"qualified"," signature (QES) adds a certificate issued by a trust service provider on the EU trusted list, after that provider has verified the person's identity. It carries the same legal effect as a handwritten signature across the EU, and the burden of proof reverses onto whoever disputes it.",[11,423,424],{},"Moving from simple to advanced is engineering work. Moving to qualified means paying a third party to identify every signer. That is why the middle level is where most of the value sits.",[18,426,428],{"id":427},"what-a-seal-adds-that-a-signature-does-not","What a seal adds that a signature does not",[11,430,431,432,435],{},"A signature says a person agreed. A ",[52,433,434],{},"seal"," says an organisation issued this.",[11,437,438],{},"Because a seal belongs to the organisation rather than an individual, it needs nobody's participation, and can therefore be applied automatically at the moment a document is generated. That is exactly when the useful context still exists: the source record, the template version, the timestamp.",[11,440,441],{},"For the disputed delivery note, a seal applied at generation lets you demonstrate that the document came out of your system, referencing that job, at that time, and has not changed since. The signature question is separate, and both need answering.",[11,443,444,445,448],{},"Note the honest limit: a seal is ",[52,446,447],{},"tamper evident",", not tamper proof. It does not prevent editing. It makes editing detectable, which is the useful property, but it is not the same claim.",[18,450,452],{"id":451},"four-things-to-keep","Four things to keep",[11,454,455],{},"Independently of what tooling you buy:",[457,458,459,465,471,477],"ol",{},[359,460,461,464],{},[52,462,463],{},"The document as issued",", byte for byte, not a regenerated copy. A regenerated PDF is a new document that happens to look the same.",[359,466,467,470],{},[52,468,469],{},"The full timeline",", exportable, in a format a third party can read.",[359,472,473,476],{},[52,474,475],{},"The link between document and source record",", so you can show what it was made from.",[359,478,479,482],{},[52,480,481],{},"Whatever identity evidence you have",", however weak, because weak evidence that exists beats strong evidence you did not capture.",[11,484,485],{},"Most organisations have the first and some of the second. The third is the one that quietly does not exist, and it is the one that is impossible to reconstruct after the fact.",[18,487,489],{"id":488},"where-docspawn-fits","Where docspawn fits",[11,491,492],{},"docspawn generates documents from your data and keeps everything collected in a filterable library with saved views, versions and an audit trail, so the record outlives the document rather than being buried in a PDF in somebody's inbox.",[11,494,495],{},"Against the four things worth keeping above: you can seal any document it generates with a qualified electronic seal and a qualified timestamp, applied as the document is produced. On a sealed document that covers the second and third items directly. You can show it has not changed, and you can show which record and template produced it, without relying on your own file storage or your own word. Sealing is an option per document, so it is worth turning on for the documents most likely to be disputed rather than treating it as a blanket setting.",[11,497,498],{},"The first and fourth are still yours to get right, and the fourth is where we are deliberately unimpressive: signatures docspawn collects are simple electronic signatures with no identity check, and advanced level is on the roadmap. The seal does not help here, because it proves who issued the document rather than who signed it. For the disputed delivery note, that means a sealed one answers the origin question cleanly, and the attribution question only as well as your audit trail allows. Which is a good argument for turning sealing on before the dispute rather than after it.",[11,500,501],{},"We would rather tell you which half is solved than let a seal imply the other one is.",[11,503,504,505,509,510,248],{},"Also worth reading: ",[239,506,508],{"href":507},"\u002Fblog\u002Fprovenance-vs-integrity","Provenance and integrity: two different things a document can prove"," and ",[239,511,513],{"href":512},"\u002Fblog\u002Feidas-signature-levels","SES, AES and QES: the three eIDAS levels",{"title":250,"searchDepth":251,"depth":251,"links":515},[516,517,518,519,520,521,522],{"id":296,"depth":251,"text":297},{"id":317,"depth":251,"text":318},{"id":347,"depth":251,"text":348},{"id":397,"depth":251,"text":398},{"id":427,"depth":251,"text":428},{"id":451,"depth":251,"text":452},{"id":488,"depth":251,"text":489},"global","Usually yes, and less strongly than people assume. What actually decides whether a document survives a dispute, what an audit trail is worth, and the four things to keep.",{},"\u002Fblog\u002Fdoes-a-generated-pdf-hold-up",7,{"title":282,"description":524},"blog\u002Fdoes-a-generated-pdf-hold-up","oMGmQ5J0VEFUkLvX2B5P_dV6fD3xsvn_1_Lv3LH1dY0",{"id":532,"title":533,"body":534,"category":263,"country":264,"description":763,"extension":266,"featured":267,"meta":764,"navigation":269,"path":512,"primaryKeyword":765,"pubDate":272,"published":267,"readingTime":273,"seo":766,"stat":275,"statCaption":275,"stem":767,"translationKey":275,"verifiedDate":272,"__hash__":768},"blogEn\u002Fblog\u002Feidas-signature-levels.md","SES, AES and QES: the three eIDAS levels and which one you actually need",{"type":8,"value":535,"toc":752},[536,539,542,546,612,616,619,625,628,631,635,638,641,644,647,651,654,661,664,670,674,677,683,689,692,696,703,706,709,713,719,725,727,734,741,744],[11,537,538],{},"Every electronic signature in the European Union sits at one of three levels. They are not marketing tiers invented by vendors. They are defined in eIDAS, the regulation governing electronic identification and trust services, and the level determines what happens when someone disputes the signature.",[11,540,541],{},"Most people buying signature software never find out which level they are getting. That is the problem this article is meant to solve.",[18,543,545],{"id":544},"the-three-levels","The three levels",[23,547,548,563],{},[26,549,550],{},[29,551,552,554,557,560],{},[32,553],{},[32,555,556],{},"Requires",[32,558,559],{},"In a dispute",[32,561,562],{},"Typical use",[44,564,565,580,596],{},[29,566,567,571,574,577],{},[49,568,569,55],{},[52,570,54],{},[49,572,573],{},"A signature and, in practice, an audit trail. No certificate.",[49,575,576],{},"Admissible. You prove who signed.",[49,578,579],{},"Internal approvals, low-value consent.",[29,581,582,587,590,593],{},[49,583,584,586],{},[52,585,71],{}," advanced",[49,588,589],{},"Signer authenticated, signature uniquely linked to them, later changes detectable.",[49,591,592],{},"Strong. Hard to repudiate credibly.",[49,594,595],{},"Most commercial agreements.",[29,597,598,603,606,609],{},[49,599,600,602],{},[52,601,88],{}," qualified",[49,604,605],{},"All of AES, plus a qualified certificate from a provider on the EU trusted list and a key in certified hardware.",[49,607,608],{},"Equal to handwriting EU-wide. They prove it is wrong.",[49,610,611],{},"Where law specifically demands it.",[100,613,615],{"id":614},"ses-the-default-and-it-is-weaker-than-it-looks","SES: the default, and it is weaker than it looks",[11,617,618],{},"A simple electronic signature is the baseline. eIDAS defines it broadly enough that a typed name, a drawn squiggle, or a clicked \"I agree\" all qualify. There is no certificate and no identity check required by the definition.",[11,620,621,622,624],{},"The critical thing about SES is not that it is worthless. eIDAS explicitly says a signature cannot be denied legal effect ",[52,623,303],{}," because it is electronic or because it does not meet the requirements of a qualified signature. An SES is admissible.",[11,626,627],{},"What SES does not do is help you when the other side says \"that was not me\". You are left proving it yourself from whatever surrounding evidence you kept: the email trail, the IP address, the timestamps, the behaviour. If you kept a good audit trail, that is often enough. If you kept nothing, you have a signature that cannot be attributed to anybody.",[11,629,630],{},"Most electronic signatures in daily commercial use are SES. That is fine for most of what they are used for.",[100,632,634],{"id":633},"aes-the-level-worth-aiming-at","AES: the level worth aiming at",[11,636,637],{},"An advanced electronic signature has to satisfy four requirements. It must be uniquely linked to the signatory, capable of identifying them, created using data the signatory can use under their sole control, and linked to the signed data such that any later change is detectable.",[11,639,640],{},"Read those carefully and notice what is absent: nothing says a third party has to vouch for the identity. You can meet the AES bar with your own infrastructure, provided you actually authenticate the signer and actually bind the signature to the document.",[11,642,643],{},"That is why AES is the level most products should be aiming at, and the level most business contracts genuinely need. It moves you from \"we think this was them\" to \"this was cryptographically bound to an authenticated session, and the document has not changed since\". In practice, that ends most disputes before they become disputes.",[11,645,646],{},"The cost of getting from SES to AES is engineering work, not a supplier contract. That is the single most useful fact in this article.",[100,648,650],{"id":649},"qes-the-top-level-and-the-narrowest-need","QES: the top level, and the narrowest need",[11,652,653],{},"A qualified electronic signature is an advanced signature created by a qualified signature creation device and based on a qualified certificate. The certificate is issued by a qualified trust service provider listed on an official EU trusted list, after that provider has verified the individual's identity, and the private key lives in certified hardware.",[11,655,656,657,660],{},"The legal payoff is specific and large: a QES has the ",[52,658,659],{},"equivalent legal effect of a handwritten signature"," across the EU, and other member states must recognise a QES issued in any member state. The burden of proof reverses. The person disputing it has to prove it is invalid.",[11,662,663],{},"The cost is also specific. Every signer must be identified by the trust service provider, which is a per-person cost and a real step in the user's journey. Pricing is quote-based and rises with identification method.",[11,665,666,669],{},[52,667,668],{},"Who genuinely needs QES?"," Certain real estate transactions, notarial acts, some public-sector filings, and specific employment and credit contracts in countries including Germany, Spain, Italy and France. The list is narrower than vendors imply, it is national rather than EU-wide, and it changes. If someone tells you your ordinary B2B service agreement requires QES, ask them which national provision they are relying on.",[18,671,673],{"id":672},"how-to-work-out-which-level-you-need","How to work out which level you need",[11,675,676],{},"Two questions, in this order.",[11,678,679,682],{},[52,680,681],{},"One: is there a legal requirement?"," For a specific document type, in a specific country, is there a rule that says this must be a qualified signature or notarised? If yes, the answer is decided for you and no amount of engineering substitutes for it. If no, move on.",[11,684,685,688],{},[52,686,687],{},"Two: what is your actual risk?"," How much money is on the line, how likely is the counterparty to dispute it, and what evidence would you want in front of a judge? For a delivery note signed by a driver, an audit trail is proportionate. For a fifty thousand euro equipment lease, you probably want the signer authenticated.",[11,690,691],{},"Notice that the second question is about evidence, not compliance. Most of the time you are not satisfying a rule, you are deciding how much proof to buy.",[18,693,695],{"id":694},"the-seal-which-is-not-on-this-ladder","The seal, which is not on this ladder",[11,697,698,699,702],{},"One thing that confuses this picture: eIDAS also defines electronic ",[52,700,701],{},"seals",", which run through the same simple, advanced and qualified grading but do a different job.",[11,704,705],{},"A signature is given by a person and carries intent. A seal is issued by an organisation and carries origin. Because a seal has no human to wait for, it can be applied automatically, at the moment a document is generated, which is something no signature can do at any level.",[11,707,708],{},"That means the two are not alternatives. A document can carry an organisation's seal proving where it came from, and a person's signature proving they agreed to it, and each answers a question the other cannot.",[18,710,712],{"id":711},"two-phrases-to-distrust","Two phrases to distrust",[11,714,715,718],{},[52,716,717],{},"\"eIDAS compliant.\""," All three levels are eIDAS compliant, so the phrase is equally true of the weakest option on the market and the strongest. It is technically accurate and informationally empty. Always ask which level.",[11,720,721,724],{},[52,722,723],{},"\"Certified signature.\""," This has no definition in eIDAS. The levels are simple, advanced and qualified. A term outside the regulation's vocabulary cannot be checked against it.",[18,726,489],{"id":488},[11,728,729,730,733],{},"docspawn generates documents from your data and collects signatures on them. Those signatures are ",[52,731,732],{},"simple electronic signatures",": a link, a name given on a phone, and an audit trail of who filled what and when. There is no identity verification in that flow today, and advanced level is on the roadmap.",[11,735,736,737,740],{},"Separately, and this is the part that is live: you can seal any document docspawn generates with a ",[52,738,739],{},"qualified electronic seal"," and a qualified timestamp, applied as the document is produced. Sealing is an option you turn on, not something applied to everything. And it is a seal, not a signature: it proves the document was issued by docspawn's system, from that record, at that moment, and has not changed since. It says nothing about who signed it.",[11,742,743],{},"We are stating the current signature level plainly, and refusing to let the seal blur it, because the point of this article is that vendors should. If a supplier cannot tell you which of the three levels you are buying, that is the answer.",[11,745,504,746,509,750,248],{},[239,747,749],{"href":748},"\u002Fblog\u002Fwhat-is-an-electronic-seal","What is an electronic seal, and how is it different from a signature?",[239,751,282],{"href":526},{"title":250,"searchDepth":251,"depth":251,"links":753},[754,759,760,761,762],{"id":544,"depth":251,"text":545,"children":755},[756,757,758],{"id":614,"depth":256,"text":615},{"id":633,"depth":256,"text":634},{"id":649,"depth":256,"text":650},{"id":672,"depth":251,"text":673},{"id":694,"depth":251,"text":695},{"id":711,"depth":251,"text":712},{"id":488,"depth":251,"text":489},"European law grades electronic signatures by how much verified identity sits behind them. What each level requires, what it is worth in a dispute, and why most contracts do not need the top one.",{},"eidas electronic signature",{"title":533,"description":763},"blog\u002Feidas-signature-levels","-Zk7dfy1yonsriL4fNp8lNFma6vtUP_tspBVFkkq-4U",{"id":770,"title":508,"body":771,"category":263,"country":523,"description":938,"extension":266,"featured":267,"meta":939,"navigation":269,"path":507,"primaryKeyword":275,"pubDate":272,"published":267,"readingTime":940,"seo":941,"stat":275,"statCaption":275,"stem":942,"translationKey":275,"verifiedDate":272,"__hash__":943},"blogEn\u002Fblog\u002Fprovenance-vs-integrity.md",{"type":8,"value":772,"toc":930},[773,776,782,788,791,795,798,801,804,807,810,814,820,823,826,833,840,843,847,853,859,862,865,869,872,879,882,885,888,892,895,900,903,906,909,911,914,917,924],[11,774,775],{},"There are two different claims a document can make about itself, and they get treated as one thing constantly.",[11,777,778,781],{},[52,779,780],{},"Integrity",": this file has not changed since it was sealed.",[11,783,784,787],{},[52,785,786],{},"Provenance",": this file was produced from this data, by this system, at this moment.",[11,789,790],{},"Integrity is the one everybody sells. Provenance is the one that answers the question people actually have.",[18,792,794],{"id":793},"the-distinction-concretely","The distinction, concretely",[11,796,797],{},"Imagine an invoice arrives and someone says the total is wrong.",[11,799,800],{},"An integrity guarantee answers: has this PDF been altered since it was signed? That is a real and useful answer. It rules out one specific kind of fraud, the after-the-fact edit.",[11,802,803],{},"It does not answer: was this total ever correct? Did it come from the order record it claims to reference? Which price list was applied? Was this generated from the system of record, or typed by hand into a template by someone who then signed it?",[11,805,806],{},"A perfectly intact document can be perfectly wrong. Integrity says nothing about whether the contents were right when they were fixed in place. It only says they have not moved since.",[11,808,809],{},"Provenance is the claim that covers that gap. It ties the document back to the thing it was made from.",[18,811,813],{"id":812},"why-the-distinction-is-structural-not-competitive","Why the distinction is structural, not competitive",[11,815,816,817,248],{},"Here is the part that is easy to miss: the difference between these two claims is not a feature gap. It is a consequence of ",[52,818,819],{},"where each system sits in the workflow",[11,821,822],{},"Think about what a signing platform receives. A finished PDF. Somebody uploaded a file.",[11,824,825],{},"By the time that file exists, the interesting metadata is already gone. The record it was built from, the template version, the field values, the identity of whoever triggered generation, the moment it was produced: none of that is inside the PDF. It was discarded when the document was rendered. The platform is not withholding it or failing to expose it. It never had it.",[11,827,828,829,832],{},"So the strongest honest claim available to any tool that receives a finished document is ",[52,830,831],{},"\"this file has not changed since I first saw it.\""," Not because the engineering is lacking, but because that is genuinely the extent of what it witnessed.",[11,834,835,836,839],{},"The system that ",[52,837,838],{},"generates"," the document is in a completely different position. At the moment of generation, and only at that moment, all of those things exist together in one place: the source record, the template version, the resolved field values, the timestamp, the user. That is the only point in the lifecycle where a document can be bound to its origin, because it is the only point where its origin is still present.",[11,841,842],{},"Miss that moment and it cannot be recovered later. Not by a better signing platform, not by a better PDF library, not by anyone.",[18,844,846],{"id":845},"what-this-looks-like-in-practice","What this looks like in practice",[11,848,849,850],{},"A document with integrity protection carries, in effect: ",[329,851,852],{},"a hash, and a mark saying this hash was correct when I saw it.",[11,854,855,856],{},"A document with provenance carries something closer to: ",[329,857,858],{},"this was generated from record 4471, using template version 12, on 3 March at 14:22, by this system, and here is a mark proving all of that and proving the contents have not changed since.",[11,860,861],{},"The second contains the first. Provenance is not an alternative to integrity, it is integrity plus the context that makes integrity meaningful.",[11,863,864],{},"The mechanism for asserting it is not exotic. An electronic seal covers a hash of the document, and the metadata bound into the sealed payload rides along with it. The hard part was never the cryptography. The hard part is being present at the moment of creation, which is a matter of what your product is, not how good your crypto is.",[18,866,868],{"id":867},"why-this-is-becoming-urgent","Why this is becoming urgent",[11,870,871],{},"For most of the history of business documents, producing a convincing-looking document took effort. Not much effort, but enough that volume was self-limiting.",[11,873,874,875,878],{},"That constraint is gone. Generating a plausible invoice, report or certificate now costs approximately nothing, and generating a plausible ",[52,876,877],{},"fake"," one costs exactly the same, because they are the same operation. The skill floor that used to make forgery rare has collapsed.",[11,880,881],{},"The consequence is that a document's appearance has stopped being evidence of anything. A well-formatted PDF with a company logo used to carry weak but real signal. It now carries none.",[11,883,884],{},"What is left with value is proof of origin: the ability of a document to demonstrate where it came from, rather than merely looking like it came from somewhere. That is why this distinction is worth understanding now rather than in five years.",[11,886,887],{},"Regulators are circling the same problem from a different angle. The EU AI Act's transparency obligations, which begin applying in August 2026, require marking of AI-generated content, and commentary on the final rules has noted that no current marking technology meets all of the required properties. Watermarks can be stripped. A cryptographic seal cannot be stripped without breaking, which is a meaningfully different property.",[18,889,891],{"id":890},"what-to-ask-a-vendor","What to ask a vendor",[11,893,894],{},"One question separates the two claims cleanly:",[11,896,897],{},[52,898,899],{},"\"At what point in the process does your proof get applied, and what does it know at that point?\"",[11,901,902],{},"If the answer is \"when the document is uploaded to us\", you are buying integrity. That may be exactly what you need, and it is worth having.",[11,904,905],{},"If the answer is \"at generation, and it knows which record and template produced it\", you are buying provenance.",[11,907,908],{},"Both are legitimate products. They are just answers to different questions, and the pricing pages rarely make that clear.",[18,910,489],{"id":488},[11,912,913],{},"docspawn sits at the generation end. It holds the source record, the template version and the timestamp at the moment a document comes into existence, which is the position provenance requires.",[11,915,916],{},"That position is usable. Turn sealing on for a document and it gets a qualified electronic seal and a qualified timestamp, applied as it is produced, which is the only moment when the record, the template version and the timestamp all still exist together. It is an option per document rather than something applied to everything, and that is the right shape: provenance is worth paying for on the documents that will be argued about, not on all of them.",[11,918,919,920,923],{},"The honest limit, because this article is about being precise: the seal covers ",[52,921,922],{},"origin and integrity",", not identity. It proves the document came from this system, from that record, at that time, and has not changed since. Who signed it is a different question with a different answer, and docspawn collects simple electronic signatures with no identity check today. A seal is not a signature, and it does not upgrade one.",[11,925,504,926,509,928,248],{},[239,927,749],{"href":748},[239,929,282],{"href":526},{"title":250,"searchDepth":251,"depth":251,"links":931},[932,933,934,935,936,937],{"id":793,"depth":251,"text":794},{"id":812,"depth":251,"text":813},{"id":845,"depth":251,"text":846},{"id":867,"depth":251,"text":868},{"id":890,"depth":251,"text":891},{"id":488,"depth":251,"text":489},"Integrity says a file has not changed since someone saw it. Provenance says where it came from. Only the system that produced the document can attest to the second, and the reason is structural.",{},6,{"title":508,"description":938},"blog\u002Fprovenance-vs-integrity","i8f-f6ALMUfXidnP6L-ddYKbFy8pxB0SoAuHChVM8gk",{"id":945,"title":749,"body":946,"category":263,"country":264,"description":1122,"extension":266,"featured":267,"meta":1123,"navigation":269,"path":748,"primaryKeyword":1124,"pubDate":272,"published":267,"readingTime":527,"seo":1125,"stat":275,"statCaption":275,"stem":1126,"translationKey":275,"verifiedDate":272,"__hash__":1127},"blogEn\u002Fblog\u002Fwhat-is-an-electronic-seal.md",{"type":8,"value":947,"toc":1113},[948,955,958,962,972,975,978,982,985,988,995,998,1002,1007,1010,1013,1016,1020,1023,1026,1033,1039,1046,1050,1053,1056,1063,1066,1070,1076,1079,1082,1089,1091,1094,1097,1100,1107],[11,949,950,951,954],{},"An electronic seal is a cryptographic mark that says ",[52,952,953],{},"an organisation issued this document",". It is defined in EU law, it is not the same thing as an electronic signature, and the difference is not a technicality. It changes what the mark can be used for and when it can be applied.",[11,956,957],{},"The short version: a signature is given by a person, a seal is issued by a legal entity. Everything else follows from that.",[18,959,961],{"id":960},"the-definition-and-why-it-is-worded-that-way","The definition, and why it is worded that way",[11,963,964,965,967,968,971],{},"eIDAS, the EU regulation that governs electronic trust services, defines an electronic seal as data attached to other data to ensure the latter's ",[52,966,922],{},". The signature definition is deliberately different: a signature is data used by a signatory ",[52,969,970],{},"to sign",", which is to say, to express intent.",[11,973,974],{},"That is the whole distinction in the legislation's own vocabulary. A signature carries an act of will: a human being read something and agreed to it. A seal carries an attribution: this came from us, and it has not changed since.",[11,976,977],{},"A useful analogy is the paper world. A director's handwritten signature at the bottom of a contract is a signature. The company stamp pressed into the letterhead is a seal. Nobody confuses the two on paper, and nobody would accept a rubber stamp as evidence that a specific person agreed to a specific clause. The electronic versions keep exactly that division of labour.",[18,979,981],{"id":980},"why-a-seal-can-be-automatic-and-a-signature-cannot","Why a seal can be automatic and a signature cannot",[11,983,984],{},"This is the practical consequence, and it is the reason seals matter for anyone generating documents at volume.",[11,986,987],{},"A signature has to be collected. Someone has to be shown the document, has to understand it, and has to choose to sign. You can make that fast and pleasant, but you cannot make it happen without them, and you certainly cannot do it on their behalf.",[11,989,990,991,994],{},"A seal has no such requirement. It belongs to the organisation, the organisation holds the key, and the organisation alone decides which of its documents get sealed. There is no second party to wait for. That means a seal can be applied ",[52,992,993],{},"at the moment a document is generated",", as part of producing it, rather than as a separate step afterwards.",[11,996,997],{},"If you produce two hundred delivery notes on a Tuesday morning, sealing all two hundred is a configuration decision. Getting two hundred signatures is a project.",[18,999,1001],{"id":1000},"the-qualified-level","The qualified level",[11,1003,1004,1005,248],{},"eIDAS grades seals the same way it grades signatures: simple, advanced, and qualified. The word that matters is ",[52,1006,420],{},[11,1008,1009],{},"A qualified electronic seal is created using a qualified certificate for electronic seals, issued by a qualified trust service provider that appears on an official EU trusted list, with the private key held in certified hardware. That last constraint is why a qualified seal is not something you can produce with a self-signed certificate and a script.",[11,1011,1012],{},"What qualification buys you is a legal presumption. Under eIDAS, a qualified electronic seal enjoys a presumption of the integrity of the data and of the correctness of the origin of that data. In plain terms: the burden of proof moves. Someone disputing a qualified-sealed document has to show it is wrong, rather than you having to show it is right.",[11,1014,1015],{},"An unqualified seal still carries cryptographic weight. It just does not carry that presumption, so you are back to arguing about your own key management.",[18,1017,1019],{"id":1018},"tamper-evident-not-tamper-proof","Tamper evident, not tamper proof",[11,1021,1022],{},"This distinction gets flattened in marketing copy constantly, so it is worth being precise.",[11,1024,1025],{},"A seal does not stop anyone editing a document. Nothing does. A PDF sitting on someone's laptop can be opened and altered like any other file.",[11,1027,1028,1029,1032],{},"What a seal does is make the alteration ",[52,1030,1031],{},"detectable",". The seal covers a cryptographic hash of the document's contents. Change a digit in a total, move a decimal point, replace a photograph, and the hash no longer matches, so the seal fails validation. Anyone who checks sees a broken seal rather than a clean one.",[11,1034,1035,1036,1038],{},"That is the correct claim: ",[52,1037,447],{},". If you see a vendor writing \"tamper proof\" or \"unforgeable\", they are describing something that does not exist.",[11,1040,1041,1042,1045],{},"Pairing the seal with a ",[52,1043,1044],{},"qualified timestamp"," adds the other half of the story. The seal says what the document contained; the timestamp says when it demonstrably existed in that state, attested by a third party rather than by your own server clock. Together they answer \"what\" and \"when\", which is most of what a dispute turns on.",[18,1047,1049],{"id":1048},"where-seals-are-already-routine","Where seals are already routine",[11,1051,1052],{},"Seals are not speculative technology waiting for adoption. They are load-bearing in European e-invoicing today.",[11,1054,1055],{},"Italy has required structured, cryptographically signed electronic invoices through its Sistema di Interscambio since 2019. Spain's Verifactu regime requires a qualified electronic signature on invoicing records that are not filed directly with the tax authority, phasing in during 2027. France, Germany and Poland are phasing in their own e-invoicing mandates between 2026 and 2028.",[11,1057,1058,1059,1062],{},"One important caveat, because it cuts against the obvious sales pitch: ",[52,1060,1061],{},"no general rule requires an ordinary business to seal its own documents."," Poland's KSeF is the clearest counterexample. It puts authenticity guarantees at the platform layer and explicitly does not require a per-invoice seal. Anyone telling you the law forces you to seal your paperwork is overstating it, and the counterexample is one search away.",[11,1064,1065],{},"The honest version is that mandates in this space are training a continent to expect documents that can prove things about themselves, without any single mandate covering the general case.",[18,1067,1069],{"id":1068},"the-vocabulary-trap","The vocabulary trap",[11,1071,1072,1073],{},"If you take one practical thing from this article, take this: ",[52,1074,1075],{},"\"eIDAS compliant\" on its own means nothing.",[11,1077,1078],{},"A simple electronic signature is eIDAS compliant. So is an advanced one. So is a qualified seal. The regulation defines all of them, so the phrase is equally true of the weakest and the strongest option on the market, while sounding like it describes the strongest.",[11,1080,1081],{},"Similarly, \"certified signature\" has no definition in eIDAS at all. The levels are simple, advanced and qualified. A term outside that vocabulary cannot be checked, which is usually why it gets used.",[11,1083,1084,1085,1088],{},"When you are evaluating anything in this space, the only useful question is: ",[52,1086,1087],{},"which level, exactly?"," A vendor who can answer that immediately is telling you something. A vendor who reaches for \"compliant\" or \"certified\" is telling you something too.",[18,1090,489],{"id":488},[11,1092,1093],{},"You can seal any document docspawn generates. Turn sealing on and the document gets a qualified electronic seal and a qualified timestamp, applied as it is produced rather than added afterwards. That is the whole argument of this article put into practice: because docspawn is the thing producing the document, the seal can be bound to the record it came from, the template version used, and the moment it was produced. A tool that receives a finished PDF never had any of that, because it was discarded before the file arrived.",[11,1095,1096],{},"Sealing is an option rather than something applied to everything, which is the right shape for it. Most documents in most businesses do not need to prove their origin to anybody. The ones that do tend to know who they are: the condition report that will be argued about, the certificate somebody will present to a third party, the invoice that has to survive an audit.",[11,1098,1099],{},"Signatures are a separate question, and worth keeping separate. docspawn collects simple electronic signatures: a link, a name given on a phone, and an audit trail of who filled what and when. There is no identity check in that flow, which is why the product says so plainly on the form itself. Advanced level is on the roadmap.",[11,1101,1102,1103,1106],{},"The seal does not change that. It proves who ",[52,1104,1105],{},"issued"," the document, not who signed it. A sealed document carrying a simple signature is exactly that, and anyone telling you a seal upgrades a signature has the two concepts confused.",[11,1108,504,1109,509,1111,248],{},[239,1110,513],{"href":512},[239,1112,508],{"href":507},{"title":250,"searchDepth":251,"depth":251,"links":1114},[1115,1116,1117,1118,1119,1120,1121],{"id":960,"depth":251,"text":961},{"id":980,"depth":251,"text":981},{"id":1000,"depth":251,"text":1001},{"id":1018,"depth":251,"text":1019},{"id":1048,"depth":251,"text":1049},{"id":1068,"depth":251,"text":1069},{"id":488,"depth":251,"text":489},"An electronic seal is issued by an organisation, not given by a person. What eIDAS says it is, what the qualified level adds, and why a seal can be applied automatically where a signature cannot.",{},"what is an electronic seal",{"title":749,"description":1122},"blog\u002Fwhat-is-an-electronic-seal","xql4YB1_vXKI2j0fXcyra8KcnPmxsQ2w-BY2GL_tYEo",{"id":1129,"title":1130,"body":1131,"category":1364,"country":523,"description":1365,"extension":266,"featured":267,"meta":1366,"navigation":269,"path":1367,"primaryKeyword":1368,"pubDate":272,"published":269,"readingTime":527,"seo":1369,"stat":275,"statCaption":275,"stem":1370,"translationKey":275,"verifiedDate":272,"__hash__":1371},"blogEn\u002Fblog\u002Fwhat-is-document-generation.md","What is document generation?",{"type":8,"value":1132,"toc":1356},[1133,1136,1139,1142,1146,1149,1156,1162,1168,1174,1178,1181,1187,1193,1199,1205,1208,1212,1215,1221,1224,1230,1248,1251,1255,1258,1264,1270,1276,1282,1286,1289,1331,1334,1337,1339,1342,1345,1348],[11,1134,1135],{},"Document generation is the practice of producing a finished document by merging structured data into a fixed layout, automatically, so that nobody retypes anything.",[11,1137,1138],{},"That is the whole idea. You have data somewhere: a spreadsheet row, a CRM record, a form submission, the output of a script. You have a document that has to look a particular way: an inspection report, a delivery note, a contract, a certificate. Document generation is the machinery between the two.",[11,1140,1141],{},"The reason it has a name at all is that the naive version does not scale. Copying a template, filling in the blanks by hand and exporting a PDF works fine for the first document and roughly the twentieth time it starts costing real hours. Document generation is what you reach for when that stops being acceptable.",[18,1143,1145],{"id":1144},"what-document-generation-is-not","What document generation is not",[11,1147,1148],{},"The term gets used loosely, so it helps to draw the borders.",[11,1150,1151,1152,1155],{},"It is ",[52,1153,1154],{},"not document editing",". A word processor is where a human writes prose. Document generation assumes the prose is already decided and only the data changes.",[11,1157,1151,1158,1161],{},[52,1159,1160],{},"not e-signature",". Signing is what can happen to a document after it exists. Generation is how it comes to exist. The two are often bought together, which is why they get confused.",[11,1163,1151,1164,1167],{},[52,1165,1166],{},"not form building",". A form builder collects data. That is one input to document generation, not the thing itself. A form builder that emails you a summary of the responses has not generated your document, it has shown you the answers.",[11,1169,1151,1170,1173],{},[52,1171,1172],{},"not a PDF filler",". Filling a fillable PDF by hand is a manual act with a nicer interface. It becomes generation when the filling happens from a data source, without a person doing it.",[18,1175,1177],{"id":1176},"the-four-pieces","The four pieces",[11,1179,1180],{},"Every document generation setup, no matter who sells it, is made of the same four parts. If you are evaluating tools, work out which of the four each one actually covers, because most cover two or three.",[11,1182,1183,1186],{},[52,1184,1185],{},"1. The template."," The fixed layout, with holes in it where data goes. This is where the biggest differences between tools live, and the next section is entirely about it.",[11,1188,1189,1192],{},[52,1190,1191],{},"2. The data source."," Where the values come from. A spreadsheet, a database, a CRM, a form submission, an API call, a person on a phone in a car park.",[11,1194,1195,1198],{},[52,1196,1197],{},"3. The generation engine."," The thing that takes template plus data and returns a document. This is the part everyone means when they say \"document generation\", and it is the part that is mostly a solved problem.",[11,1200,1201,1204],{},[52,1202,1203],{},"4. Delivery."," Getting the finished document to whoever needs it: emailed to a customer, filed in a system, attached to a record, handed to the next step in a workflow.",[11,1206,1207],{},"The fourth one is the one that quietly gets dropped. A tool that generates a beautiful PDF and leaves it in a folder has solved three quarters of the problem and left you with the quarter that involves a human doing the same thing every day.",[18,1209,1211],{"id":1210},"templates-rebuild-or-bring-your-own","Templates: rebuild, or bring your own",[11,1213,1214],{},"There are two philosophies, and the choice constrains everything downstream.",[11,1216,1217,1220],{},[52,1218,1219],{},"Rebuild it in their editor."," The tool gives you a template builder and you recreate your document inside it. This is the common approach because it makes the tool's job easy: it controls the layout format, so it can guarantee the output.",[11,1222,1223],{},"The cost lands on you. If your document is a plain letter, rebuilding takes ten minutes and nobody minds. If it is a three page inspection report with a checkbox grid, embedded photos, a signature block and a table that grows, rebuilding is a project. And every time the real document changes, you do it again.",[11,1225,1226,1229],{},[52,1227,1228],{},"Bring your own file."," The tool works from the PDF you already use, and you tell it where the fields are. Nothing gets rebuilt, so nothing drifts from the document your business actually issues.",[11,1231,1232,1233,1236,1237,1240,1241,1247],{},"This is where PDF form technology matters. A PDF can carry interactive form fields, and there have historically been two competing ways to do it. ",[52,1234,1235],{},"AcroForms"," were introduced in the PDF 1.2 specification and are present in every later version. ",[52,1238,1239],{},"XFA",", an XML based alternative, arrived in PDF 1.5, was never compatible with AcroForms, and was deprecated from the format in PDF 2.0. Most PDF software does not handle XFA content at all. (",[239,1242,1246],{"href":1243,"rel":1244},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FPDF",[1245],"nofollow","Wikipedia: PDF, interactive forms",")",[11,1249,1250],{},"The practical consequence: AcroForm fields are the interoperable way to describe \"this box holds the customer name\", and a bring-your-own-file approach depends on being able to find and address those fields. Where they do not exist yet, they have to be added, which is the tedious part, and increasingly the part that gets detected automatically rather than drawn by hand.",[18,1252,1254],{"id":1253},"where-these-setups-break","Where these setups break",[11,1256,1257],{},"Four failure modes account for most of the disappointment.",[11,1259,1260,1263],{},[52,1261,1262],{},"The document is more complex than the tool assumed."," Tables that grow with the data, checkbox grids, conditional pages that appear only sometimes, photos captured in the field with annotations on them. Tools built for the letter-shaped document degrade badly here, and you usually discover this after choosing one.",[11,1265,1266,1269],{},[52,1267,1268],{},"It needs a developer, permanently."," Plenty of excellent generation engines are libraries and APIs. They are the right answer if you have engineers and want programmatic control. They are the wrong answer if the person who needs to change the wording of a clause is in operations, because every change becomes a ticket.",[11,1271,1272,1275],{},[52,1273,1274],{},"It stops before delivery."," See the fourth piece above. Generation without distribution leaves a human in the loop doing the least interesting job in the company.",[11,1277,1278,1281],{},[52,1279,1280],{},"The data goes nowhere."," The document gets made and sent, and the values inside it are gone, buried in a PDF in an inbox. Six months later somebody asks how many inspections failed on the same fault and the only way to answer is to open files one at a time. The data collected during generation is often more valuable than the document, and it is routinely thrown away.",[18,1283,1285],{"id":1284},"do-you-actually-need-it","Do you actually need it?",[11,1287,1288],{},"Two variables decide: how many documents, and how complex each one is.",[23,1290,1291,1303],{},[26,1292,1293],{},[29,1294,1295,1297,1300],{},[32,1296],{},[32,1298,1299],{},"Simple document",[32,1301,1302],{},"Complex document",[44,1304,1305,1318],{},[29,1306,1307,1312,1315],{},[49,1308,1309],{},[52,1310,1311],{},"Low volume",[49,1313,1314],{},"Do it by hand. Genuinely.",[49,1316,1317],{},"Do it by hand, carefully.",[29,1319,1320,1325,1328],{},[49,1321,1322],{},[52,1323,1324],{},"High volume",[49,1326,1327],{},"Almost any generation tool works. Pick on price and delivery.",[49,1329,1330],{},"This is the case that needs real evaluation.",[11,1332,1333],{},"The bottom right cell is where most of the frustration lives, because it is where the general purpose tools stop fitting and the specialist ones start needing developers.",[11,1335,1336],{},"One useful signal: if somebody in your organisation has a folder of near-identical documents named after customers, and opens the most recent one to make the next one, you have an unautomated document generation process. It just has a person in the middle of it.",[18,1338,489],{"id":488},[11,1340,1341],{},"docspawn takes the bring-your-own-file side of the template question. You upload the complex PDF you already use, AI detects the fillable fields so they do not have to be drawn by hand, and the output keeps the pixel-accurate fidelity of your original file, including tables, checkbox grids, annotated photos, signatures and multi-page layouts.",[11,1343,1344],{},"On the other three pieces: data can be captured from anyone through web, mobile or voice, including public links that let third parties upload PDFs and IDs without an account. Conditional logic decides what gets generated and what gets appended. A spreadsheet becomes a batch of documents in one run. The finished document is sent, rather than left in a folder. And everything collected stays in a filterable library with saved views, versions and an audit trail, so the data outlives the document.",[11,1346,1347],{},"An MCP server and an API, so that a CLI, n8n, Zapier or an AI agent can hand over data and get a finished document back, are on the roadmap and not yet released.",[11,1349,1350,1351,1355],{},"If that maps onto the problem you actually have, ",[239,1352,1354],{"href":1353},"#book-demo","book a demo"," and we will walk through your document rather than a sample one.",{"title":250,"searchDepth":251,"depth":251,"links":1357},[1358,1359,1360,1361,1362,1363],{"id":1144,"depth":251,"text":1145},{"id":1176,"depth":251,"text":1177},{"id":1210,"depth":251,"text":1211},{"id":1253,"depth":251,"text":1254},{"id":1284,"depth":251,"text":1285},{"id":488,"depth":251,"text":489},"automation","Document generation turns structured data into a finished document with nobody retyping it. What it covers, the four pieces it needs, and where it breaks.",{},"\u002Fblog\u002Fwhat-is-document-generation","what is document generation",{"title":1130,"description":1365},"blog\u002Fwhat-is-document-generation","k_IJCGtIspj5ou1oYkwQd9Oug-JZV2kqZemDA548HYc",[4,1373,1549,1732],{"id":1374,"title":247,"body":1375,"category":263,"country":523,"description":1543,"extension":266,"featured":267,"meta":1544,"navigation":269,"path":246,"primaryKeyword":275,"pubDate":272,"published":267,"readingTime":940,"seo":1545,"stat":275,"statCaption":275,"stem":1546,"translationKey":1547,"verifiedDate":272,"__hash__":1548},"blogFr\u002Ffr\u002Fblog\u002Fprovenance-et-integrite.md",{"type":8,"value":1376,"toc":1535},[1377,1380,1386,1392,1395,1399,1402,1405,1408,1411,1414,1418,1424,1427,1430,1437,1444,1447,1451,1457,1463,1466,1469,1473,1476,1483,1486,1489,1492,1496,1499,1504,1507,1510,1513,1515,1518,1521,1528],[11,1378,1379],{},"Un document peut faire deux affirmations différentes à son propre sujet, et on les confond en permanence.",[11,1381,1382,1385],{},[52,1383,1384],{},"L'intégrité"," : ce fichier n'a pas changé depuis qu'il a été scellé.",[11,1387,1388,1391],{},[52,1389,1390],{},"La provenance"," : ce fichier a été produit à partir de ces données, par ce système, à cet instant.",[11,1393,1394],{},"L'intégrité est celle que tout le monde vend. La provenance est celle qui répond à la question que les gens se posent vraiment.",[18,1396,1398],{"id":1397},"la-distinction-concrètement","La distinction, concrètement",[11,1400,1401],{},"Imaginez qu'une facture arrive et que quelqu'un affirme que le total est faux.",[11,1403,1404],{},"Une garantie d'intégrité répond à : ce PDF a-t-il été modifié depuis sa signature ? C'est une réponse réelle et utile. Elle écarte une forme précise de fraude, la retouche après coup.",[11,1406,1407],{},"Elle ne répond pas à : ce total a-t-il jamais été exact ? Provenait-il de la commande qu'il prétend référencer ? Quel tarif a été appliqué ? Ce document a-t-il été généré depuis le système de référence, ou saisi à la main dans un modèle par quelqu'un qui l'a ensuite signé ?",[11,1409,1410],{},"Un document parfaitement intact peut être parfaitement faux. L'intégrité ne dit rien de l'exactitude du contenu au moment où il a été figé. Elle dit seulement qu'il n'a pas bougé depuis.",[11,1412,1413],{},"La provenance est l'affirmation qui comble cet écart. Elle rattache le document à ce dont il est issu.",[18,1415,1417],{"id":1416},"pourquoi-la-distinction-est-structurelle-pas-concurrentielle","Pourquoi la distinction est structurelle, pas concurrentielle",[11,1419,1420,1421,248],{},"Voici la partie facile à manquer : l'écart entre ces deux affirmations n'est pas un manque de fonctionnalité. C'est une conséquence de ",[52,1422,1423],{},"la position de chaque système dans le flux de travail",[11,1425,1426],{},"Que reçoit une plateforme de signature ? Un PDF terminé. Quelqu'un a téléversé un fichier.",[11,1428,1429],{},"Au moment où ce fichier existe, les métadonnées intéressantes ont déjà disparu. L'enregistrement dont il est issu, la version du modèle, la valeur des champs, l'identité de celui qui a déclenché la génération, l'instant de production : rien de tout cela n'est dans le PDF. Tout a été perdu au rendu. La plateforme ne vous le cache pas et ne néglige pas de l'exposer. Elle ne l'a jamais eu.",[11,1431,1432,1433,1436],{},"L'affirmation la plus forte honnêtement disponible pour un outil qui reçoit un document terminé est donc ",[52,1434,1435],{},"« ce fichier n'a pas changé depuis que je l'ai vu »",". Non par insuffisance technique, mais parce que c'est réellement l'étendue de ce dont il a été témoin.",[11,1438,1439,1440,1443],{},"Le système qui ",[52,1441,1442],{},"génère"," le document se trouve dans une position totalement différente. Au moment de la génération, et à ce moment-là seulement, tous ces éléments coexistent au même endroit : l'enregistrement source, la version du modèle, les valeurs résolues, l'horodatage, l'utilisateur. C'est le seul point du cycle de vie où un document peut être lié à son origine, parce que c'est le seul point où son origine est encore présente.",[11,1445,1446],{},"Manquez ce moment et il devient irrécupérable. Ni par une meilleure plateforme de signature, ni par une meilleure bibliothèque PDF, ni par personne.",[18,1448,1450],{"id":1449},"à-quoi-cela-ressemble-en-pratique","À quoi cela ressemble en pratique",[11,1452,1453,1454],{},"Un document protégé en intégrité porte, en substance : ",[329,1455,1456],{},"une empreinte, et une marque disant que cette empreinte était correcte quand je l'ai vue.",[11,1458,1459,1460],{},"Un document doté de provenance porte plutôt : ",[329,1461,1462],{},"ceci a été généré depuis l'enregistrement 4471, avec la version 12 du modèle, le 3 mars à 14h22, par ce système, et voici une marque qui prouve tout cela et prouve que le contenu n'a pas changé depuis.",[11,1464,1465],{},"Le second contient le premier. La provenance n'est pas une alternative à l'intégrité : c'est l'intégrité plus le contexte qui la rend signifiante.",[11,1467,1468],{},"Le mécanisme n'a rien d'exotique. Un cachet électronique couvre une empreinte du document, et les métadonnées liées à la charge scellée voyagent avec lui. La difficulté n'a jamais été la cryptographie. La difficulté est d'être présent au moment de la création, ce qui relève de la nature de votre produit, pas de la qualité de votre cryptographie.",[18,1470,1472],{"id":1471},"pourquoi-cela-devient-urgent","Pourquoi cela devient urgent",[11,1474,1475],{},"Pendant presque toute l'histoire des documents d'entreprise, produire un document d'apparence convaincante demandait un effort. Pas énorme, mais suffisant pour que le volume se limite de lui-même.",[11,1477,1478,1479,1482],{},"Cette contrainte a disparu. Générer une facture, un rapport ou un certificat plausible ne coûte pratiquement plus rien, et en générer un ",[52,1480,1481],{},"faux"," plausible coûte exactement la même chose, puisque c'est la même opération. Le seuil de compétence qui rendait la falsification rare s'est effondré.",[11,1484,1485],{},"Conséquence : l'apparence d'un document a cessé d'être une preuve de quoi que ce soit. Un PDF bien mis en page avec un logo portait autrefois un signal faible mais réel. Il n'en porte plus aucun.",[11,1487,1488],{},"Ce qui garde de la valeur, c'est la preuve d'origine : la capacité d'un document à démontrer d'où il vient, plutôt que de simplement en avoir l'air. C'est pourquoi cette distinction mérite d'être comprise maintenant et non dans cinq ans.",[11,1490,1491],{},"Les régulateurs abordent le même problème par un autre angle. Les obligations de transparence du règlement européen sur l'IA, applicables à partir d'août 2026, imposent un marquage des contenus générés par IA, et les commentaires du texte final relèvent qu'aucune technologie de marquage actuelle ne satisfait l'ensemble des propriétés exigées. Un filigrane peut être retiré. Un cachet cryptographique ne peut pas l'être sans se rompre, ce qui est une propriété sensiblement différente.",[18,1493,1495],{"id":1494},"ce-quil-faut-demander-à-un-fournisseur","Ce qu'il faut demander à un fournisseur",[11,1497,1498],{},"Une question sépare proprement les deux affirmations :",[11,1500,1501],{},[52,1502,1503],{},"« À quel moment du processus votre preuve est-elle apposée, et que connaît-elle à ce moment-là ? »",[11,1505,1506],{},"Si la réponse est « quand le document nous est téléversé », vous achetez de l'intégrité. C'est peut-être exactement ce dont vous avez besoin, et cela vaut la peine d'être acheté.",[11,1508,1509],{},"Si la réponse est « à la génération, et elle sait de quel enregistrement et de quel modèle le document est issu », vous achetez de la provenance.",[11,1511,1512],{},"Les deux sont des produits légitimes. Ce sont simplement des réponses à des questions différentes, et les pages tarifaires le disent rarement.",[18,1514,217],{"id":216},[11,1516,1517],{},"docspawn se tient du côté de la génération. Il détient l'enregistrement source, la version du modèle et l'horodatage au moment où un document vient à exister, c'est-à-dire la position qu'exige la provenance.",[11,1519,1520],{},"Cette position est exploitable. Activez le cachet sur un document et il reçoit un cachet électronique qualifié et un horodatage qualifié, apposés pendant sa production, c'est-à-dire au seul moment où l'enregistrement, la version du modèle et l'horodatage coexistent encore. C'est une option document par document plutôt qu'un réglage global, et c'est la bonne forme : la provenance vaut d'être payée sur les documents qui seront contestés, pas sur tous.",[11,1522,1523,1524,1527],{},"La limite honnête, puisque cet article porte sur la précision : le cachet couvre l'",[52,1525,1526],{},"origine et l'intégrité",", pas l'identité. Il prouve que le document provient de ce système, à partir de cet enregistrement, à cet instant, et qu'il n'a pas changé depuis. Qui l'a signé est une autre question, avec une autre réponse : docspawn recueille aujourd'hui des signatures électroniques simples, sans contrôle d'identité. Un cachet n'est pas une signature, et il n'en relève pas le niveau.",[11,1529,237,1530,243,1532,248],{},[239,1531,242],{"href":241},[239,1533,1534],{"href":270},"SES, AES et QES : les trois niveaux eIDAS",{"title":250,"searchDepth":251,"depth":251,"links":1536},[1537,1538,1539,1540,1541,1542],{"id":1397,"depth":251,"text":1398},{"id":1416,"depth":251,"text":1417},{"id":1449,"depth":251,"text":1450},{"id":1471,"depth":251,"text":1472},{"id":1494,"depth":251,"text":1495},{"id":216,"depth":251,"text":217},"L'intégrité dit qu'un fichier n'a pas changé depuis qu'on l'a vu. La provenance dit d'où il vient. Seul le système qui a produit le document peut attester la seconde, et la raison est structurelle.",{},{"title":247,"description":1543},"fr\u002Fblog\u002Fprovenance-et-integrite","provenance-vs-integrity","eacKLkZ2_snbLJac1XksBdv3G_7R-lXJE5l67iGFV2s",{"id":1550,"title":242,"body":1551,"category":263,"country":264,"description":1725,"extension":266,"featured":267,"meta":1726,"navigation":269,"path":241,"primaryKeyword":1727,"pubDate":272,"published":267,"readingTime":527,"seo":1728,"stat":275,"statCaption":275,"stem":1729,"translationKey":1730,"verifiedDate":272,"__hash__":1731},"blogFr\u002Ffr\u002Fblog\u002Fqu-est-ce-qu-un-cachet-electronique.md",{"type":8,"value":1552,"toc":1716},[1553,1560,1563,1567,1577,1580,1583,1587,1590,1593,1600,1603,1607,1613,1616,1619,1622,1626,1629,1632,1639,1642,1649,1653,1656,1659,1666,1669,1673,1679,1682,1685,1692,1694,1697,1700,1703,1710],[11,1554,1555,1556,1559],{},"Un cachet électronique est une marque cryptographique qui dit qu'",[52,1557,1558],{},"une organisation a émis ce document",". Il est défini par le droit européen, il n'est pas la même chose qu'une signature électronique, et la différence n'est pas un détail technique. Elle change ce que la marque permet de prouver, et à quel moment elle peut être apposée.",[11,1561,1562],{},"En une phrase : une signature est donnée par une personne, un cachet est émis par une entité juridique. Tout le reste en découle.",[18,1564,1566],{"id":1565},"la-définition-et-pourquoi-elle-est-formulée-ainsi","La définition, et pourquoi elle est formulée ainsi",[11,1568,1569,1570,1572,1573,1576],{},"Le règlement eIDAS définit le cachet électronique comme des données jointes à d'autres données pour en garantir l'",[52,1571,1526],{},". La définition de la signature est délibérément différente : la signature est utilisée par un signataire ",[52,1574,1575],{},"pour signer",", c'est-à-dire pour exprimer une intention.",[11,1578,1579],{},"Toute la distinction tient dans ce vocabulaire. Une signature porte un acte de volonté : un être humain a lu quelque chose et l'a accepté. Un cachet porte une attribution : cela vient de nous, et cela n'a pas changé depuis.",[11,1581,1582],{},"L'analogie papier est utile. La signature manuscrite d'un dirigeant au bas d'un contrat est une signature. Le tampon de la société apposé sur le papier à en-tête est un cachet. Personne ne confond les deux sur papier, et personne n'accepterait un tampon comme preuve qu'une personne précise a accepté une clause précise. Les versions électroniques conservent exactement cette répartition des rôles.",[18,1584,1586],{"id":1585},"pourquoi-un-cachet-peut-être-automatique-et-pas-une-signature","Pourquoi un cachet peut être automatique et pas une signature",[11,1588,1589],{},"C'est la conséquence pratique, et la raison pour laquelle les cachets comptent pour quiconque génère des documents en volume.",[11,1591,1592],{},"Une signature doit être recueillie. Il faut montrer le document à quelqu'un, il faut qu'il comprenne, et il faut qu'il choisisse de signer. On peut rendre cela rapide et agréable, mais on ne peut pas le faire sans lui, et encore moins à sa place.",[11,1594,1595,1596,1599],{},"Un cachet n'a pas cette contrainte. Il appartient à l'organisation, l'organisation détient la clé, et elle seule décide lesquels de ses documents sont cachetés. Il n'y a pas de seconde partie à attendre. Le cachet peut donc être apposé ",[52,1597,1598],{},"au moment où le document est généré",", dans le geste même qui le produit, plutôt qu'après coup.",[11,1601,1602],{},"Si vous produisez deux cents bons de livraison un mardi matin, les cacheter tous les deux cents est une décision de configuration. Obtenir deux cents signatures est un projet.",[18,1604,1606],{"id":1605},"le-niveau-qualifié","Le niveau qualifié",[11,1608,1609,1610,248],{},"eIDAS classe les cachets comme il classe les signatures : simple, avancé, qualifié. Le mot qui compte est ",[52,1611,1612],{},"qualifié",[11,1614,1615],{},"Un cachet électronique qualifié repose sur un certificat qualifié pour cachet électronique, délivré par un prestataire de services de confiance qualifié figurant sur une liste de confiance officielle de l'Union, la clé privée étant conservée dans du matériel certifié. Cette dernière contrainte explique qu'un cachet qualifié ne se fabrique pas avec un certificat auto-signé et un script.",[11,1617,1618],{},"Ce que la qualification apporte, c'est une présomption juridique. Un cachet électronique qualifié bénéficie d'une présomption d'intégrité des données et d'exactitude de leur origine. Autrement dit : la charge de la preuve se déplace. Celui qui conteste un document cacheté doit démontrer qu'il est faux, plutôt que l'inverse.",[11,1620,1621],{},"Un cachet non qualifié conserve un poids cryptographique réel. Il ne porte simplement pas cette présomption, et vous voilà de retour à discuter de votre propre gestion de clés.",[18,1623,1625],{"id":1624},"inaltérable-de-façon-détectable-pas-inviolable","Inaltérable de façon détectable, pas inviolable",[11,1627,1628],{},"Cette nuance disparaît constamment dans les argumentaires commerciaux, elle mérite donc d'être posée précisément.",[11,1630,1631],{},"Un cachet n'empêche personne de modifier un document. Rien ne l'empêche. Un PDF posé sur un ordinateur portable s'ouvre et se modifie comme n'importe quel fichier.",[11,1633,1634,1635,1638],{},"Ce que fait le cachet, c'est rendre la modification ",[52,1636,1637],{},"détectable",". Le cachet couvre une empreinte cryptographique du contenu du document. Changez un chiffre dans un total, déplacez une virgule, remplacez une photo, et l'empreinte ne correspond plus : la validation du cachet échoue. Quiconque vérifie voit un cachet rompu au lieu d'un cachet intact.",[11,1640,1641],{},"C'est cela, l'affirmation exacte. Si un fournisseur écrit « infalsifiable » ou « inviolable », il décrit quelque chose qui n'existe pas.",[11,1643,1644,1645,1648],{},"Associer le cachet à un ",[52,1646,1647],{},"horodatage qualifié"," complète l'histoire. Le cachet dit ce que contenait le document ; l'horodatage dit à quel moment il existait démontrablement dans cet état, attesté par un tiers plutôt que par l'horloge de votre serveur. Ensemble, ils répondent au « quoi » et au « quand », c'est-à-dire à l'essentiel de ce sur quoi porte un litige.",[18,1650,1652],{"id":1651},"là-où-les-cachets-sont-déjà-la-norme","Là où les cachets sont déjà la norme",[11,1654,1655],{},"Les cachets ne sont pas une technologie spéculative en attente d'adoption. Ils sont structurants dans la facturation électronique européenne d'aujourd'hui.",[11,1657,1658],{},"L'Italie impose depuis 2019 des factures électroniques structurées et signées cryptographiquement via son Sistema di Interscambio. Le régime espagnol Verifactu exige une signature électronique qualifiée sur les registres de facturation qui ne sont pas déposés directement auprès de l'administration fiscale, avec une entrée en vigueur en 2027. La France, l'Allemagne et la Pologne déploient leurs propres obligations entre 2026 et 2028.",[11,1660,1661,1662,1665],{},"Une réserve importante, car elle va contre l'argument de vente évident : ",[52,1663,1664],{},"aucune règle générale n'oblige une entreprise ordinaire à cacheter ses propres documents."," Le KSeF polonais en est le contre-exemple le plus net : il place les garanties d'authenticité au niveau de la plateforme et n'exige explicitement aucun cachet par facture. Quiconque vous dit que la loi vous oblige à cacheter votre paperasse exagère, et le contre-exemple se trouve en une recherche.",[11,1667,1668],{},"La version honnête, c'est que les obligations de ce domaine habituent tout un continent à attendre des documents capables de prouver quelque chose sur eux-mêmes, sans qu'aucune obligation unique ne couvre le cas général.",[18,1670,1672],{"id":1671},"le-piège-du-vocabulaire","Le piège du vocabulaire",[11,1674,1675,1676],{},"S'il ne faut retenir qu'une chose pratique : ",[52,1677,1678],{},"« conforme eIDAS », seul, ne veut rien dire.",[11,1680,1681],{},"Une signature électronique simple est conforme au règlement. Une avancée aussi. Un cachet qualifié également. Le règlement définit les trois, donc l'expression est tout aussi vraie de l'option la plus faible du marché que de la plus forte, tout en donnant l'impression de décrire la plus forte.",[11,1683,1684],{},"De même, « signature certifiée » n'a aucune définition dans eIDAS. Les niveaux sont simple, avancé, qualifié. Un terme extérieur à ce vocabulaire ne peut pas être vérifié, ce qui est en général la raison de son emploi.",[11,1686,1687,1688,1691],{},"Quand vous évaluez une offre dans ce domaine, la seule question utile est : ",[52,1689,1690],{},"quel niveau, exactement ?"," Un fournisseur qui répond immédiatement vous apprend quelque chose. Un fournisseur qui se rabat sur « conforme » ou « certifié » vous apprend aussi quelque chose.",[18,1693,217],{"id":216},[11,1695,1696],{},"Vous pouvez cacheter n'importe quel document généré par docspawn. Activez le cachet et le document reçoit un cachet électronique qualifié et un horodatage qualifié, apposés pendant sa production plutôt qu'ajoutés après coup. C'est toute la thèse de cet article mise en pratique : parce que docspawn est ce qui produit le document, le cachet peut être lié à l'enregistrement dont il est issu, à la version du modèle utilisée et à l'instant où il a été produit. Un outil qui reçoit un PDF terminé n'a jamais rien eu de tout cela : c'était déjà perdu quand le fichier est arrivé.",[11,1698,1699],{},"Le cachet est une option, et non quelque chose d'appliqué à tout, ce qui est la bonne forme. La plupart des documents n'ont besoin de prouver leur origine à personne. Ceux qui en ont besoin se reconnaissent en général sans peine : l'état des lieux qui sera contesté, l'attestation présentée à un tiers, la facture qui doit survivre à un contrôle.",[11,1701,1702],{},"Les signatures sont une autre question, et il vaut mieux la garder distincte. docspawn recueille des signatures électroniques simples : un lien, un nom donné sur un téléphone, et une piste d'audit indiquant qui a rempli quoi et quand. Aucune vérification d'identité n'intervient dans ce parcours, et le produit le dit clairement sur le formulaire lui-même. Le niveau avancé est prévu.",[11,1704,1705,1706,1709],{},"Le cachet n'y change rien. Il prouve qui a ",[52,1707,1708],{},"émis"," le document, pas qui l'a signé. Un document cacheté portant une signature simple reste exactement cela, et quiconque vous dit qu'un cachet relève le niveau d'une signature confond les deux notions.",[11,1711,237,1712,243,1714,248],{},[239,1713,1534],{"href":270},[239,1715,247],{"href":246},{"title":250,"searchDepth":251,"depth":251,"links":1717},[1718,1719,1720,1721,1722,1723,1724],{"id":1565,"depth":251,"text":1566},{"id":1585,"depth":251,"text":1586},{"id":1605,"depth":251,"text":1606},{"id":1624,"depth":251,"text":1625},{"id":1651,"depth":251,"text":1652},{"id":1671,"depth":251,"text":1672},{"id":216,"depth":251,"text":217},"Un cachet électronique est émis par une organisation, il n'est pas donné par une personne. Ce que dit eIDAS, ce qu'ajoute le niveau qualifié, et pourquoi un cachet peut être apposé automatiquement là où une signature ne le peut pas.",{},"créer un cachet électronique",{"title":242,"description":1725},"fr\u002Fblog\u002Fqu-est-ce-qu-un-cachet-electronique","what-is-an-electronic-seal","DQ6YpQ6xtqEaasLHQ8gcFSTRu4wB3HGKsDaC1KxtZYs",{"id":1733,"title":1734,"body":1735,"category":1364,"country":523,"description":1962,"extension":266,"featured":267,"meta":1963,"navigation":269,"path":1964,"primaryKeyword":275,"pubDate":272,"published":267,"readingTime":527,"seo":1965,"stat":275,"statCaption":275,"stem":1966,"translationKey":1967,"verifiedDate":272,"__hash__":1968},"blogFr\u002Ffr\u002Fblog\u002Fqu-est-ce-que-la-generation-de-documents.md","Qu'est-ce que la génération de documents ?",{"type":8,"value":1736,"toc":1954},[1737,1740,1743,1746,1750,1753,1760,1766,1772,1778,1782,1785,1791,1797,1803,1809,1812,1816,1819,1825,1828,1834,1847,1850,1854,1857,1863,1869,1875,1881,1885,1888,1930,1933,1936,1938,1941,1944,1947],[11,1738,1739],{},"La génération de documents est la pratique consistant à produire un document fini en fusionnant des données structurées dans une mise en page fixe, automatiquement, de sorte que personne ne ressaisisse rien.",[11,1741,1742],{},"C'est toute l'idée. Vous avez des données quelque part : une ligne de tableur, une fiche CRM, une réponse de formulaire, la sortie d'un script. Vous avez un document qui doit avoir une apparence précise : un rapport d'inspection, un bon de livraison, un contrat, une attestation. La génération de documents est la machinerie entre les deux.",[11,1744,1745],{},"Si cette pratique porte un nom, c'est que la version naïve ne tient pas à l'échelle. Copier un modèle, remplir les blancs à la main et exporter un PDF fonctionne très bien pour le premier document, et vers le vingtième cela commence à coûter des heures réelles. La génération de documents est ce vers quoi on se tourne quand ce n'est plus acceptable.",[18,1747,1749],{"id":1748},"ce-que-la-génération-de-documents-nest-pas","Ce que la génération de documents n'est pas",[11,1751,1752],{},"Le terme est employé de façon lâche, il est donc utile d'en tracer les bords.",[11,1754,1755,1756,1759],{},"Ce n'est ",[52,1757,1758],{},"pas de la rédaction",". Un traitement de texte est l'endroit où un humain écrit de la prose. La génération de documents suppose la prose déjà arrêtée : seules les données changent.",[11,1761,1755,1762,1765],{},[52,1763,1764],{},"pas de la signature électronique",". La signature est ce qui peut arriver à un document une fois qu'il existe. La génération est la façon dont il vient à exister. Les deux sont souvent achetées ensemble, d'où la confusion.",[11,1767,1755,1768,1771],{},[52,1769,1770],{},"pas de la création de formulaires",". Un formulaire collecte des données. C'est une entrée de la génération de documents, pas la chose elle-même. Un formulaire qui vous envoie un récapitulatif des réponses n'a pas généré votre document : il vous a montré les réponses.",[11,1773,1755,1774,1777],{},[52,1775,1776],{},"pas un remplisseur de PDF",". Remplir un PDF à la main reste un acte manuel avec une meilleure interface. Cela devient de la génération quand le remplissage se fait depuis une source de données, sans intervention humaine.",[18,1779,1781],{"id":1780},"les-quatre-pièces","Les quatre pièces",[11,1783,1784],{},"Toute installation de génération de documents, quel que soit le vendeur, se compose des quatre mêmes parties. Si vous évaluez des outils, déterminez lesquelles chacun couvre réellement, car la plupart en couvrent deux ou trois.",[11,1786,1787,1790],{},[52,1788,1789],{},"1. Le modèle."," La mise en page fixe, avec des trous là où vont les données. C'est là que se logent les plus grandes différences entre outils.",[11,1792,1793,1796],{},[52,1794,1795],{},"2. La source de données."," D'où viennent les valeurs. Un tableur, une base, un CRM, une réponse de formulaire, un appel d'API, une personne au téléphone sur un parking.",[11,1798,1799,1802],{},[52,1800,1801],{},"3. Le moteur de génération."," Ce qui prend le modèle plus les données et renvoie un document. C'est la partie que tout le monde désigne en disant « génération de documents », et c'est essentiellement un problème résolu.",[11,1804,1805,1808],{},[52,1806,1807],{},"4. La distribution."," Amener le document fini à qui en a besoin : envoyé au client, classé dans un système, rattaché à une fiche, transmis à l'étape suivante.",[11,1810,1811],{},"La quatrième est celle qu'on laisse discrètement tomber. Un outil qui génère un beau PDF et le laisse dans un dossier a résolu les trois quarts du problème et vous laisse le quart qui implique un humain faisant la même chose tous les jours.",[18,1813,1815],{"id":1814},"les-modèles-reconstruire-ou-apporter-le-vôtre","Les modèles : reconstruire, ou apporter le vôtre",[11,1817,1818],{},"Il existe deux philosophies, et le choix contraint tout l'aval.",[11,1820,1821,1824],{},[52,1822,1823],{},"Le reconstruire dans leur éditeur."," L'outil vous donne un constructeur de modèles et vous recréez votre document dedans. C'est l'approche courante car elle facilite le travail de l'outil : il contrôle le format de mise en page, donc il peut garantir le rendu.",[11,1826,1827],{},"Le coût retombe sur vous. Si votre document est un courrier simple, le reconstruire prend dix minutes et personne ne s'en plaint. S'il s'agit d'un rapport d'inspection de trois pages avec une grille de cases à cocher, des photos intégrées, un bloc de signature et un tableau qui s'allonge, la reconstruction est un projet. Et chaque fois que le vrai document change, vous recommencez.",[11,1829,1830,1833],{},[52,1831,1832],{},"Apporter votre propre fichier."," L'outil travaille à partir du PDF que vous utilisez déjà, et vous lui indiquez où sont les champs. Rien n'est reconstruit, donc rien ne dérive du document que votre entreprise émet réellement.",[11,1835,1836,1837,1839,1840,1842,1843,1247],{},"C'est là que la technologie des formulaires PDF compte. Un PDF peut porter des champs de formulaire interactifs, et il y a historiquement eu deux façons concurrentes de le faire. Les ",[52,1838,1235],{}," ont été introduits dans la spécification PDF 1.2 et sont présents dans toutes les versions ultérieures. ",[52,1841,1239],{},", une alternative fondée sur XML, est arrivée avec PDF 1.5, n'a jamais été compatible avec les AcroForms, et a été retirée du format en PDF 2.0. La plupart des logiciels PDF ne gèrent pas du tout le contenu XFA. (",[239,1844,1846],{"href":1243,"rel":1845},[1245],"Wikipedia : PDF, formulaires interactifs",[11,1848,1849],{},"Conséquence pratique : les champs AcroForm sont la manière interopérable de décrire « cette case contient le nom du client », et une approche « apportez votre fichier » dépend de la capacité à retrouver et adresser ces champs. Là où ils n'existent pas encore, il faut les ajouter, ce qui est la partie fastidieuse, et de plus en plus la partie qui se détecte automatiquement plutôt que de se tracer à la main.",[18,1851,1853],{"id":1852},"là-où-ces-installations-cassent","Là où ces installations cassent",[11,1855,1856],{},"Quatre modes de défaillance expliquent l'essentiel des déceptions.",[11,1858,1859,1862],{},[52,1860,1861],{},"Le document est plus complexe que ce que l'outil supposait."," Tableaux qui s'allongent avec les données, grilles de cases à cocher, pages conditionnelles n'apparaissant que parfois, photos prises sur le terrain avec des annotations. Les outils conçus pour le document en forme de courrier se dégradent mal ici, et on le découvre en général après en avoir choisi un.",[11,1864,1865,1868],{},[52,1866,1867],{},"Il faut un développeur, en permanence."," Beaucoup d'excellents moteurs de génération sont des bibliothèques et des API. C'est la bonne réponse si vous avez des ingénieurs et voulez un contrôle programmatique. C'est la mauvaise réponse si la personne qui doit changer la formulation d'une clause travaille aux opérations, car chaque modification devient un ticket.",[11,1870,1871,1874],{},[52,1872,1873],{},"Cela s'arrête avant la distribution."," Voir la quatrième pièce. Générer sans distribuer laisse un humain dans la boucle à faire le travail le moins intéressant de l'entreprise.",[11,1876,1877,1880],{},[52,1878,1879],{},"Les données ne vont nulle part."," Le document est fabriqué et envoyé, et les valeurs qu'il contient sont perdues, enfouies dans un PDF dans une boîte mail. Six mois plus tard, quelqu'un demande combien d'inspections ont échoué sur le même défaut, et la seule façon de répondre est d'ouvrir les fichiers un par un. Les données collectées pendant la génération valent souvent plus que le document, et elles sont couramment jetées.",[18,1882,1884],{"id":1883},"en-avez-vous-réellement-besoin","En avez-vous réellement besoin ?",[11,1886,1887],{},"Deux variables décident : combien de documents, et à quel point chacun est complexe.",[23,1889,1890,1902],{},[26,1891,1892],{},[29,1893,1894,1896,1899],{},[32,1895],{},[32,1897,1898],{},"Document simple",[32,1900,1901],{},"Document complexe",[44,1903,1904,1917],{},[29,1905,1906,1911,1914],{},[49,1907,1908],{},[52,1909,1910],{},"Faible volume",[49,1912,1913],{},"Faites-le à la main. Vraiment.",[49,1915,1916],{},"Faites-le à la main, soigneusement.",[29,1918,1919,1924,1927],{},[49,1920,1921],{},[52,1922,1923],{},"Fort volume",[49,1925,1926],{},"Presque n'importe quel outil convient. Choisissez sur le prix et la distribution.",[49,1928,1929],{},"C'est le cas qui demande une vraie évaluation.",[11,1931,1932],{},"La case en bas à droite est celle où se loge l'essentiel de la frustration, parce que c'est là que les outils généralistes cessent de convenir et que les spécialistes commencent à réclamer des développeurs.",[11,1934,1935],{},"Un signal utile : si quelqu'un dans votre organisation a un dossier de documents quasi identiques nommés d'après des clients, et ouvre le plus récent pour fabriquer le suivant, vous avez un processus de génération de documents non automatisé. Il a simplement une personne au milieu.",[18,1937,217],{"id":216},[11,1939,1940],{},"docspawn prend le parti « apportez votre fichier » de la question des modèles. Vous importez le PDF complexe que vous utilisez déjà, l'IA détecte les champs à remplir pour qu'ils n'aient pas à être tracés à la main, et la sortie conserve la fidélité au pixel près de votre fichier d'origine, y compris tableaux, grilles de cases à cocher, photos annotées, signatures et mises en page multi-pages.",[11,1942,1943],{},"Sur les trois autres pièces : les données peuvent être collectées auprès de n'importe qui via le web, le mobile ou la voix, y compris par des liens publics permettant à des tiers de déposer PDF et pièces d'identité sans compte. La logique conditionnelle décide de ce qui est généré et de ce qui est ajouté. Un tableur devient un lot de documents en une seule exécution. Le document fini est envoyé, plutôt que laissé dans un dossier. Et tout ce qui est collecté reste dans une bibliothèque filtrable avec vues enregistrées, versions et piste d'audit, de sorte que les données survivent au document.",[11,1945,1946],{},"Un serveur MCP et une API, pour qu'un CLI, n8n, Zapier ou un agent IA puisse transmettre des données et récupérer un document fini, sont prévus et pas encore disponibles.",[11,1948,1949,1950,1953],{},"Si cela correspond au problème que vous avez réellement, ",[239,1951,1952],{"href":1353},"réservez une démo"," et nous parcourrons votre document plutôt qu'un exemple.",{"title":250,"searchDepth":251,"depth":251,"links":1955},[1956,1957,1958,1959,1960,1961],{"id":1748,"depth":251,"text":1749},{"id":1780,"depth":251,"text":1781},{"id":1814,"depth":251,"text":1815},{"id":1852,"depth":251,"text":1853},{"id":1883,"depth":251,"text":1884},{"id":216,"depth":251,"text":217},"La génération de documents transforme des données structurées en document fini sans que personne ne ressaisisse quoi que ce soit. Ce qu'elle recouvre, les quatre pièces qu'il lui faut, et là où elle casse.",{},"\u002Ffr\u002Fblog\u002Fqu-est-ce-que-la-generation-de-documents",{"title":1734,"description":1962},"fr\u002Fblog\u002Fqu-est-ce-que-la-generation-de-documents","what-is-document-generation","UeAp-ziTGsrPt6cLOcYUO3kjfYor2V66urpH6b38pr8",1785171669426]