Hi,
Our client who is an energy company in France has asked us to implement a timestamping functionality where all our PDFs created by our internal PDF builder in PHP are timestamped as to mark that there was no further modification. This is for a new compliance regulation that is to be implemented this summer.
A written or digital signature of one's name by an individual, either user or customer, is not needed, just that the PDF be timestamped. We were told that we would like this completed in Adobe Sign - Adobe Sign is the API specifically requested by the client.
When I was using the v6 API as a test, I did not come across something involving timestamping functionality, even though UploadTransientDocument and CreateAgreement do involve timestamping files, I'm sure, since they are API calls. But it seems this doesn't have anything specifically to do with timestamping.
In my mind, the whole process of what needs to be implemented is - we generate the PDF using HTML to PDF libraries, then we upload the document via UploadTransientDocument, then we create some kind of agreement that makes a record of what the content of the document was at a given time, without any signatures or recipients, and then we use the API to download the document.
In my research, I discovered that timestamping a document involves following RFC3161, which involves using a timestamping authority to construct a timestamp. I am wondering if Adobe Sign makes use of this when recording the validity of a document uploaded at a point in time. I know that Setasign has something like this. RFC 3161 has not been mentioned by my client.
Is this workflow possible? Or is Adobe Sign completely the wrong solution and do. is it likely that we need something else? Also, if it is a suitable solution, what would the API calls look like? I do need a copy of the PDF after it is accepted by Adobe Sign, and it should not have to actually be signed by somebody - just that we are using Adobe Sign to validate timestamping, which my client's understanding is that it is a side effect of Adobe Sign.
Currently I am still brainstorming, as I am just a developer and I don't have access to the client themselves and requirements are just passed to me.
Thank you!
1
Reply
AdChoices