ESIGN vs UETA vs eIDAS, explained
Short answer: ESIGN and UETA are the two U.S. laws that make electronic signatures legally binding, and eIDAS is the EU regulation that does the same across Europe. They overlap, they complement each other, and once you see what each one actually covers, the alphabet soup stops being confusing.
If you've read are electronic signatures legally binding, you've met all three of these laws in passing. This article slows down and takes them one at a time.
ESIGN: the U.S. federal law (2000)
The Electronic Signatures in Global and National Commerce Act, signed into law in 2000, is the federal backbone of e-signing in the United States. Its core rule is simple: a contract or signature can't be denied legal effect just because it's electronic. An electronic signature is as valid as a wet-ink one for most commercial and consumer transactions.
Because ESIGN is federal, it applies across all 50 states and reaches interstate and foreign commerce. It also added a consumer-protection layer: before a business delivers required disclosures electronically, the consumer has to affirmatively consent to receiving them that way. That's why you'll see an "I agree to do business electronically" step in well-built signing flows.
ESIGN sets four practical expectations for a signature to hold up:
- Intent to sign — the signer meant to sign, not just click around.
- Consent to do business electronically — captured and recorded.
- Association — the signature is tied to the specific record it applies to.
- Record retention — the signed document can be retained and reproduced accurately.
UETA: the U.S. state law, adopted by 49 states
The Uniform Electronic Transactions Act came first, in 1999. It's a model law — a template that individual states adopt into their own statutes. To date, 49 states plus the District of Columbia have adopted some version of it. (New York hasn't adopted UETA but has its own equivalent electronic-signature statute, so e-signatures are recognized there too.)
UETA and ESIGN are deliberately consistent with each other. The way they fit together is straightforward: ESIGN explicitly steps back and lets a state's own UETA-based law govern transactions within that state, as long as the state adopted UETA in its standard form. So in practice, UETA is usually the law doing the day-to-day work for in-state transactions, with ESIGN as the federal floor underneath it.
Like ESIGN, UETA establishes that a signature or record isn't invalid merely because it's electronic, and it leans on the same idea of intent, attribution, and a retainable record.
eIDAS: the EU regulation (SES, AES, QES)
Across the Atlantic, the relevant law is eIDAS — the regulation on electronic identification and trust services for electronic transactions in the EU. Unlike ESIGN and UETA, eIDAS is a single regulation that applies directly across all EU member states, so the rules are harmonized rather than state-by-state.
eIDAS recognizes electronic signatures as admissible and defines three tiers, each with a higher bar for identity assurance:
- SES — Simple Electronic Signature. The everyday tier: data in electronic form used to sign. Admissible and used for the vast majority of ordinary business agreements.
- AES — Advanced Electronic Signature. Uniquely linked to the signer, capable of identifying them, and tied to the document so any later change is detectable.
- QES — Qualified Electronic Signature. An AES created with a qualified signature-creation device and backed by a qualified certificate from a trust service provider. In the EU, a QES carries the same legal effect as a handwritten signature.
How they compare
| Law | Region | What it covers | Signature types |
|---|---|---|---|
| ESIGN | United States (federal) | Federal validity of e-signatures and e-records in interstate and foreign commerce; consumer e-consent | One general standard for a valid electronic signature |
| UETA | United States (state; 49 states + DC) | State-level validity of e-signatures and records; governs in-state transactions and complements ESIGN | One general standard for a valid electronic signature |
| eIDAS | European Union | EU-wide recognition of electronic signatures and trust services, harmonized across member states | SES, AES, QES |
Where GSD fits
GSD signatures are intended to be legally binding under the U.S. ESIGN Act and UETA. Under the EU's eIDAS Regulation, signatures collected through the standard GSD flow are recognized as simple electronic signatures (SES) — the tier used for most everyday agreements. If you need Advanced (AES) or Qualified (QES) signatures, those are available via add-ons rather than the standard flow.
What ties all three laws together is evidence. Each one cares about intent, attribution, and a record you can trust. GSD captures that automatically: every view and signature is timestamped and logged with the signer's IP address and a SHA-256 hash of the document, and a Certificate of Completion travels with the finished file so the record is tamper-evident and verifiable. That's the part that actually matters if a signature is ever questioned.
Quick takeaways
- ESIGN is the U.S. federal law; UETA is the U.S. state law adopted by 49 states — together they make e-signatures binding nationwide.
- eIDAS governs the EU and defines three tiers: SES, AES, and QES.
- Most business agreements only need SES-level signing — which is exactly what GSD produces out of the box.
Want to see a compliant signing flow in action? Start free — send up to 5 documents a month with the full audit trail, no credit card required. The FAQ covers the legal and security details, and pricing lays out the paid plans when you outgrow the free tier.
This article is general information, not legal advice. Whether electronic signing is appropriate for a specific document, transaction, or jurisdiction is your responsibility to confirm — ideally with qualified counsel. GSD does not provide legal advice.