# E-signature evidence: certificate, hash and audit trail

> What Quoterium records when a customer accepts a quote electronically, and where to find the signature certificate and audit trail.

When a customer accepts a quote, Quoterium records evidence of who accepted what, when and from where. How customers accept and sign is covered in [Accepting a quote and e-signatures](https://quoterium.com/help/customer-view-and-e-signature/accepting-a-quote-e-signature); this article explains the evidence itself.

## What is recorded

- **Certificate id**: a unique reference for the acceptance, starting with SIG-.
- **Document hash**: a SHA-256 fingerprint of the content the customer agreed to, including the quote number, title, text, items, totals and payment milestones. Any later change to that content would produce a different hash.
- **Signed by**: the name the customer entered and their email address, marked **(email verified)** when they confirmed it with a one-time code. If you accepted on the customer's behalf, the certificate says it was recorded by your organisation.
- **Signed at**: the date and time, including the exact UTC timestamp.
- **IP address** and **Device** (browser and operating system).
- **Signature**: the drawn or typed signature, if one was given.
- **Countersigned**: when your organisation countersigned, and by whom.

## Where to find it

The **Signature certificate** is printed at the end of the accepted quote's PDF, followed by an **Audit trail** of the quote's key events. Download the PDF from the quote's actions menu with **Download PDF**. Your team can also see the full history of a quote under **History** in the editor.

## Making the evidence stronger

Under [**Settings → Branding & layout**](https://app.quoterium.com/settings/branding) you can require the customer to tick the acceptance statement, require a signature, and require them to verify their email with a one-time code before signing. Countersigning accepted quotes adds your own signature to the record.

## If an acceptance is undone

If you use **Undo acceptance** on a quote, the certificate and any countersignature are cleared. A new acceptance creates a new certificate.

> Whether an electronic acceptance is legally binding depends on your contract, your customer and the law that applies. Quoterium provides the record; it isn't legal advice. If in doubt, ask a lawyer.

Source: https://quoterium.com/help/security-and-privacy/e-signature-evidence