DIGITAL TRUST & EVIDENCE

Sign. Protect. Prove.

Sign contracts, fix files and digital works in time, and carry verifiable evidence with you: SHA-256 hashes, audit trail, timestamps, Evidence Certificate and verification QR. For businesses, professionals and creators.

Electronic SignSHA-256 EvidenceUniversal TimestampQR Verify
FIRMATO EVIDENCE CERTIFICATE

You do not just receive a signed PDF. You receive verifiable evidence.

Firmato keeps the signed document untouched and builds a separate technical dossier with Evidence ID, SHA-256 fingerprints, audit trail, any timestamp and a verification QR.

01

Sign

The document follows the configured signing workflow.

02

Fingerprint

Firmato records SHA-256 hashes and technical artifact references.

03

Evidence Certificate

A readable report explains what actually happened.

04

QR Verify

Public verification confirms the evidence without publishing the document.

✓ VERIFIEDFIR-EV-2026-00001872SHA-256 · Audit trail · QR Verify · Evidence manifest
DIGITAL EVIDENCE PACKAGE

The full technical history of your file, in one dossier.

Source file, signed document, audit, timestamps, validations, Evidence Certificate and SHA-256 manifest can be grouped into one portable ZIP. Originals remain untouched.

One dossier to deliver, retain and verify
✓ Source + signed✓ Audit & validations✓ Timestamp✓ Evidence Certificate✓ SHA-256 manifest
PORTABLE TRUST CONTAINER

From evidence dossier to a verifiable ASiC-E container.

When RFC 3161 timestamping is available, Firmato can build a .asice export with ASiCManifest, SHA-256 and a time assertion. Originals stay separate and unchanged.

✓ ETSI EN 319 162-1 structure✓ ASiCManifest SHA-256✓ RFC 3161 time assertion✓ Local integrity checks✓ Independent validation ready
PLATFORM

More than a signature: evidence you can verify

Relevant steps can be linked to hashes, audit trails, evidence and controls. The signed document remains untouched while Firmato builds a readable, verifiable technical dossier around it.

Electronic Signature

Configurable signing, identity, evidence and audit-trail workflows with external providers enabled only when required.

Identity & KYC

Identity and KYC checks orchestrated in controlled workflows while keeping provider integrations separated from the application.

Contract Room

Prepare, send, sign and govern contracts with states, roles, deadlines and end-to-end traceability.

Evidence & Verification

Evidence Certificate, SHA-256 hashes, verification QR, manifest and audit trail to make outcomes readable and checkable.

FOR YOUR WORK

One platform. Three practical ways to protect your work.

Contracts, engagements, photos, music, videos and digital deliveries have different needs. Firmato brings signature, time and evidence into one experience.

01

Businesses

Contracts, HR, procurement, sales and governance: sign, track and reconstruct relevant steps.

From document to evidence, with controlled processes.Learn more →
02

Professionals

Engagements, quotes, consulting and delivered files: reduce friction and keep evidence organised.

More trust in professional relationships.Learn more →
03

Creators & Individuals

Photographers, musicians, filmmakers, designers and artists: fix works and files in time with hashes and timestamps.

Your file stays yours. Its fingerprint becomes verifiable.Learn more →
UNIVERSAL TIMESTAMP

Any file can have a verifiable time history

Images, audio, video, ZIPs, documents and creative files can be timestamped. A timestamp proves the binding between those data and a point in time; it does not by itself certify authorship, location or truthfulness.

JPGRAWWAVMP3MP4MOVZIPPDFCAD
Learn more
SECURITY & TRUST

Security by design, trust by evidence.

The public website, authenticated workspace and Signature Engine are maintained as separate logical surfaces. Provider secrets remain server-side and public services do not expose sensitive data.

Learn more
Least privilegeMinimal roles and permissions
CSPRestrictive policy and nonce
AuditabilityTraceable events and configuration
Secure defaultsOptional features disabled by default
MIMIT

UESE ITALIA S.p.A. · MIMIT-enabled supplier

Firmato is proprietary UESE software. UESE ITALIA S.p.A. is listed as a MIMIT-enabled supplier under code VCCFA2600000148.

VCCFA2600000148
Learn more
RAG-READY KNOWLEDGE

Frequently asked questions

What is Firmato?

Firmato is a European Digital Trust platform for electronic-signature, identity, KYC, timestamp, contract and digital-evidence workflows.

Can I timestamp photos, audio and video?

Yes. A timestamp can be applied to the fingerprint of any permitted file, including images, audio, video, archives and creative files. It proves the binding between those data and a point in time; by itself it does not prove authorship, creation location or truthfulness of the content.

Is Firmato itself a qualified trust service provider?

Firmato is a software platform. Where qualified services are required, it can orchestrate enabled external providers according to the active configuration.

Where is evidence managed?

Evidence is correlated within the workflow and can be retained in the Evidence Vault according to configured policies, roles and retention periods.

Is an API available?

Yes. Firmato supports enterprise API integrations with authentication, authorization, logging and environment segregation.

Is geolocation mandatory?

No. Geographic personalization is optional, country-level and configurable, and it is not used to force SEO redirects based on IP.

What is the legal validity of an electronic signature?

Under Article 25 of Regulation (EU) No 910/2014 (eIDAS), as amended by Regulation (EU) 2024/1183, an electronic signature may not be denied legal effect or admissibility as evidence solely because it is electronic; a qualified electronic signature has the equivalent legal effect of a handwritten signature. For documents governed by Italian law, Legislative Decree 82/2005 (Digital Administration Code), in particular Articles 20 and 21, also governs written-form requirements, evidential value and cases requiring advanced, qualified or digital signatures. The applicable result depends on the signature level, the act and any mandatory form requirements.