EN
Ihor Nikolenko- What Diia.Signature Is, and Why It Carries the Same Weight as a Handwritten One
- What Activation Requires
- How to Sign a Document: Three Scenarios
- How to Verify a Signature, and What Happens to the File Format
- Paper or Diia.Signature: An Honest Comparison
- Security: Your Phone, Your Code, and What to Do If You Lose Them
- Where Diia.Signature Changes Business the Most
- In Short
- Frequently Asked Questions
A contract with a client in another city. A completion certificate for a contractor who's currently abroad. An application you used to have to deliver in person. Just a few years ago, every one of these documents meant a printer, a signature, a scan, sometimes the mail, and a few days of waiting. Now it's a few taps on your phone — if you have Diia.Signature and know how to use it.
I've heard the skepticism for a long time: 'paper is more reliable,' 'what if they don't accept it,' 'what if my phone gets stolen.' Some of these doubts have real substance, and I'll address them separately. But most of it is just habit. The same entrepreneur who doesn't trust an electronic signature confirms payments in a banking app every day without ever doubting their legal weight.
This guide covers what Diia.Signature is and how it differs from other electronic signatures, what activation requires, how to sign a document in the app and on a website, how to verify someone else's signature, where it's accepted and where it's worth double-checking, and how to handle your phone, your code, and security so the signature works for you instead of against you.
What Diia.Signature Is, and Why It Carries the Same Weight as a Handwritten One
Diia.Signature is a qualified electronic signature created and stored inside Diia, Ukraine's e-government app. The word 'qualified' is the key part here. Ukraine's law on electronic trust services establishes that a qualified electronic signature carries the exact same legal weight as a handwritten signature on paper. In other words, a document signed through Diia isn't an 'electronic copy' or a 'scanned-in signature' — it's a full, genuine original.
The difference from the file-based keys issued by banks or the tax authority is that with Diia.Signature, the key lives inside the app, tied to your specific device and protected by biometrics and a code. There's no file to store, no flash drive to remember, no worrying about someone having copied it. At the same time, that means your signature is tied to your phone, which is worth keeping in mind for security reasons.
What Activation Requires
Diia.Signature isn't available to everyone. The requirement is a biometric ID document, because that's exactly what the app uses to confirm the key is going to the person it actually belongs to.
- An ID card or a biometric international passport. The old paper passport booklet without a chip won't work — it has no biometric data for the app to match against your face.
- The Diia app with your identity already verified on your device.
- A phone with a camera for a facial verification check — the app asks you to perform a simple action in front of the camera to tell a live person apart from a photograph.
Activation happens right inside the app: find Diia.Signature in the menu, verify your identity through the camera, and set a signing code. You'll enter this code every time you sign something, so pick one that's different from your app login code and isn't obvious. Once activated, the key is ready, and every signature after that takes seconds.
How to Sign a Document: Three Scenarios
In practice, signing comes up in three kinds of situations, and each one follows its own path.
Scenario 1. Sign Your Own File in the App
- Prepare the document as a PDF — the most convenient format for contracts and certificates, since it preserves the page layout exactly.
- In the Diia app, open Diia.Signature and choose to sign a document. Upload the file from your phone's storage or from the cloud.
- Double-check that it's the correct document and the correct version — once it's signed, changes are impossible without a brand-new signature.
- Verify your identity through the camera and enter your signing code.
- Save the signed file and send it to the other party through whatever channel is convenient.
Scenario 2. Sign on a Website via QR Code
Many government and commercial services offer signing through Diia: a QR code appears on screen, you scan it with the app, see exactly what you're signing, and confirm with your code. This is the fastest scenario, since you don't need to upload a file anywhere — the service receives the signed document directly. This is how services on the Diia portal work, along with a number of banks and electronic document-management platforms.
Scenario 3. Sign a Document Sent to You by Another Party
If a contract has already been signed by the other party, you'll typically receive a file with their signature already on it. Add your own signature the same way as in Scenario 1 — the document will then carry two signatures, each with its own timestamp. Once that's done, the exchange is complete: both sides have an original bearing both signatures. Make sure you're signing the exact file you received, not a re-saved copy of it — otherwise the other party's signature can 'drop off.'
How to Verify a Signature, and What Happens to the File Format
A signed document isn't just a PDF with a picture of a signature on it. It's a container holding the file itself plus a cryptographic signature carrying data about the signer and the time. Depending on the service, it may end up with a different file extension, or it may stay a PDF with the signature embedded inside it. Don't be alarmed by an unfamiliar file extension — that's normal.
You can verify any qualified signature on the official verification service run by Ukraine's Central Certification Authority: upload the file and see who signed it, when, and whether the document has been altered since signing. It's worth doing this for every document you receive from a counterparty, especially early in a working relationship. The check takes a minute and settles the 'did they actually sign this' question for good.
Paper or Diia.Signature: An Honest Comparison
Skepticism deserves an answer built on facts; reassurance alone won't cut it. Here's a comparison based on the criteria that actually matter to an entrepreneur.
| Criterion | Paper signature | Diia.Signature |
|---|---|---|
| Legal weight | Full | Full — a qualified signature is legally equivalent to a handwritten one |
| Time to sign from another city | Days: printing, signing, scanning, or mail | Minutes |
| Proof it was actually signed by that person | Handwriting analysis if there's a dispute | Cryptographic verification, biometrics at creation, a timestamp |
| Protection against changes after signing | Weak: a page can be swapped out | Any change invalidates the signature |
| Storage | A folder, risk of loss, physical space | A file in the cloud, copies, searchable |
| Risk | A forged signature, a lost original | A lost phone that wasn't locked down, a weak code |
| Acceptance | Everywhere | Everywhere that accepts a qualified signature; worth checking with specific systems |
The one row where paper still looks simpler is acceptance: everyone takes it without question. But even that's changing — more and more government services and companies are moving to electronic exchange, and refusing a qualified signature is against the law in most cases. When in doubt, just ask the other party in advance.
Security: Your Phone, Your Code, and What to Do If You Lose Them
Since the signature lives on your phone, the security of your phone is the security of your signature. Here are a few rules I recommend following from day one.
- The signing code is separate from your Diia login code and from your phone's unlock code. It's never written down anywhere.
- Biometric unlock is turned on for the device; the phone is never left unlocked and unattended.
- If the phone is lost or stolen, immediately lock the device through the manufacturer's service and sign out of all Diia sessions from another device or through support. Then activate Diia.Signature fresh on the new phone — the key on the old one becomes invalid.
- Never sign a document you haven't read, even if it came from a counterparty you know well — a signature means agreement with every line in it.
- Keep signed documents in a dedicated folder, labeled with the date and the other party's name — in a dispute, how fast you can find the original matters.
Where Diia.Signature Changes Business the Most
The most noticeable effect shows up in relationships with clients and contractors who aren't nearby. A contract, a certificate of completion, an addendum all get signed the same day, instead of 'whenever you're in town.' That speeds up payment: certificate signed, invoice closed. It speeds up the start of work: contract signed, work begins. And it removes an entire category of conflict — 'I never signed that version' — because a signed file has exactly one version, and it can't be quietly changed.
For an online business, this pairs naturally with a public offer agreement on the website: most customer agreements get closed through the offer plus payment, and Diia.Signature is reserved for the documents that genuinely need a signature — individual contracts, certificates, agreements with contractors. On the NEO platform, legal documents live in their own section with a current version and an archive of past ones — this is exactly the case where a website offer and a phone signature together handle a small business's entire document workflow without a single sheet of paper; you can see how it's set up in the description of the NEO platform.
In Short
- Diia.Signature is a qualified electronic signature with the same legal weight as a handwritten one; a document signed with it is an original, not a copy.
- It requires a biometric document: an ID card or an international passport. The old passport booklet won't work.
- Three scenarios: sign your own file in the app, sign on a website via QR code, add your signature to a document from another party.
- Verify other people's signatures on the official verification service run by the Central Certification Authority.
- Compared to paper: the same legal weight, minutes instead of days, protection against changes, and simpler storage.
- Security comes down to a separate code, a protected phone, and fast lockdown if it's lost.
- The biggest impact is on contracts and certificates with people who aren't nearby: a faster start, faster payment, and no arguments about versions.
Frequently Asked Questions
Does the tax authority accept documents signed with Diia.Signature?
Diia.Signature is a qualified signature, and by law it has to be accepted anywhere qualified signatures are accepted. In practice, individual online portals sometimes have their own technical requirements, so before your first submission, check within the service itself whether it supports signing through Diia — this is usually stated right on the login page.
What if the other party is abroad and doesn't have Diia?
They can sign with their own qualified signature if their country has an equivalent system, or you can pick an electronic document-management platform that accepts both types of signatures. The legal weight of a foreign signature in Ukraine depends on international agreements, so for important contracts, it's worth consulting a lawyer.
Can I sign a document on behalf of a company?
Diia.Signature is an individual's signature. If you're a director or an FOP — Ukraine's sole-proprietor status — your signature on a document on behalf of the business carries the weight of an authorized representative's signature. For legal entities that use a company seal or require multiple signatories, check your internal requirements and the other party's requirements as well.
Do I need to renew anything?
The Diia.Signature key has a limited validity period, after which the app will prompt you to create a new one — just as fast as the original activation. Keep an eye on the app's notifications, so you don't discover an expired key exactly when you urgently need to sign something.
