Skip to main content

Document Validator

Document Validator is a signature verification service that lets you verify digitally signed documents without data transfer to third parties.
Submit a document hash and its associated base64-encoded PKCS7 signature to receive a detailed verification result, including certificate status, qualification level, and individual signer details.

The response indicates the signature level for each signer:

  • QES (Qualified Electronic Signature) — the top tier, requiring strong identity verification (e.g. video ID), and legally equivalent to a handwritten signature under both eIDAS and ZertES.
  • AES (Advanced Electronic Signature) — a signature tied to a verified signer identity with high probative value, but without automatic legal anchoring to statutory written-form requirements.
  • SES (Simple Electronic Signature) — the basic tier, used for documents with low liability risk that don't require statutory written form, with no strong identity verification behind it.

The service provides a signature extractor JavaScript library and a single API endpoint which accepts a JSON array of hash and signature pairs and returns a structured JSON response.

API Map​

Signature API
/v1/signature: Verify electronic signatures and electronic seals.

Typical End-To-End Flow​

  1. Subscribe to a product plan on Swisscom Digital Marketplace
  2. Obtain a CLIENT_ID and CLIENT_SECRET from the Digital Marketplace subscription
  3. Request an OAuth 2.0 access token using the client credentials grant
  4. Extract the hex-encoded document hash and the base64-encoded PKCS7 signature from the signed PDF
  5. Send a POST /v1/signature/verify request with a Bearer token and a JSON array containing the hash and signature
  6. Parse the response and check the signature validity.

Components Architecture​