E-signatures in banking

Banking was an early adopter because the business runs on account opening documents, loan agreements and disclosures that previously required branch visits or postal delays. But banks operate under consumer protection rules and supervisory expectations that shape how electronic signatures may be used — particularly where the customer is a consumer rather than a business.

Comfortably electronic

• Deposit account agreements and signature cards
• Loan applications and most loan documentation
• Consumer disclosures delivered with consent
• Service agreements, treasury management and commercial contracts
• Internal approvals and officer authorisations
• Cardholder and merchant agreements

The consumer consent requirement is structural

For retail customers, ESIGN's consumer provisions apply in full. Before records may be delivered electronically the customer must receive a statement of the hardware and software requirements for access, and must consent in a manner that reasonably demonstrates they can access the records. The consent must also explain that they may withdraw it, and how.

See consent and disclosures for what that notice must contain. This is not a formality — it is the provision that consumer-facing institutions are most often found to have handled incompletely.

Signature validity is not identity verification

This distinction causes real problems in banking. A valid electronic signature establishes that a signature was applied to a document. It does not, on its own, establish that the person applying it is who they claim to be.

Account opening is separately governed by customer identification requirements, which oblige an institution to verify identity through prescribed methods. A signature platform with strong audit trails does not discharge that obligation. Where remote account opening is used, the identity verification step has to be designed and documented as its own control, and the evidence of it retained.

Documents that still fight back

Recordkeeping and retention

Banking records carry retention obligations that outlast most vendor relationships. Before adopting a platform, establish:

• Whether completed documents and audit trails can be exported in a durable, self-contained format.
• What happens to the records if the subscription lapses or the vendor is acquired — a bank's retention obligation does not end when a contract does.
• Whether the platform's own retention period is long enough for the record class.
• How the audit trail would be produced if a document's validity were challenged a decade later.

Where e-signature genuinely reduces risk

It is worth remembering what the alternative looked like. Wet-ink processes rely on branches, couriers and postal mail; documents get lost, pages get separated, and dates get reconstructed from memory. A well-run electronic process produces a timestamped, versioned, attributable record that is usually better evidence than the paper it replaced. The compliance work is in designing the consent, the identity step and the retention — not in defending the signature itself.