# The signature certificate and audit trail

> What the signature certificate at the end of an accepted quote's PDF records, and how the document hash and audit trail support the signature.

When a quote is accepted, Quoterium records who signed what, when and from where. This is printed as a **Signature certificate** at the end of the PDF, and summarised at the top of the customer page.

## The certificate

- **Certificate id**: a unique reference beginning "SIG-". It is also shown in the editor's acceptance notice.
- **Document hash**: a SHA-256 fingerprint of exactly what was agreed, including the number, title, text, items, choices, quantities, prices, totals, terms and payment milestones. Any later change to that content would produce a different hash.
- **Signed by**: the signer's name and email address, marked "email verified" if they confirmed a one-time code, or "recorded by" your organisation if you accepted on their behalf.
- **Signed at**: the date and time in your organisation's timezone, with the UTC time alongside.
- **IP address** and **Device**: the network address and browser used to accept.
- **Signature**: the drawn or typed signature.
- **Countersigned**: who countersigned for your organisation and when, if you have.
- **Issued by**: your organisation and the quote owner.

## The audit trail

Under the certificate, the **Audit trail** lists the key events in order with their times: when the quote was sent, each time it was viewed, verification codes sent and confirmed, the acceptance and the countersignature. Where known, the IP address is shown.

## On the customer page

The **Accepted** summary at the top of the customer's page shows the same essentials: who accepted and when, any reference, the signature, the countersignature, the certificate id, the digital fingerprint (time, email, IP address, device) and the document hash.

## Good to know

- The certificate is part of every PDF of the accepted quote, whether you or the customer downloads it.
- **Undo acceptance** removes the signature, certificate and countersignature. A new acceptance creates a new certificate.
- The full activity of the quote, including events not in the audit trail, is in the quote's **History**.

## See also

- [Accepting a quote with an e-signature](https://quoterium.com/help/customer-view-and-e-signature/accepting-a-quote-e-signature)
- [Email verification codes](https://quoterium.com/help/customer-view-and-e-signature/email-verification-codes)
- [Data and security](https://quoterium.com/help/security-and-privacy/data-and-security)

Source: https://quoterium.com/help/customer-view-and-e-signature/signature-certificate-and-audit-trail