IT Act Compliance

The Information Technology Act, 2000 (as amended in 2008) provides the legal framework for digital signatures in India. Falcon Sign facilitates the creation of digital signatures as defined under Section 3 (asymmetric crypto system) and electronic signatures under Section 3A (Aadhaar eSign).

Falcon Sign creates PKCS#7/CMS digital signatures using X.509 certificates issued by Certifying Authorities licensed under Section 24 of the IT Act. These signatures are legally equivalent to handwritten signatures under Section 5.

Through our Aadhaar eSign integration (via licensed eSign Service Providers), Falcon Sign supports electronic signatures as notified under the IT Act. These are valid for most purposes except those excluded under Schedule 1 (wills, negotiable instruments, etc.).

Falcon Sign works with certificates issued by CAs licensed by the Controller of Certifying Authorities (CCA), Government of India. Our verification engine validates the full certificate chain up to the CCA root.

We comply with Section 72A regarding disclosure of information in breach of lawful contract. Personal data is handled per the IT (Reasonable Security Practices) Rules, 2011.

As an intermediary under Section 2(1)(w), we comply with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, including due diligence requirements.

We are preparing for compliance with the Digital Personal Data Protection Act, 2023. Our data practices already align with the Act's principles of purpose limitation, data minimization, and storage limitation.

While primarily designed for Indian compliance, Falcon Sign signatures are also compatible with: eIDAS (EU) for advanced electronic signatures, ESIGN Act (US) for electronic signatures, and UNCITRAL Model Law on Electronic Signatures.