Verify a document signed with Tally Sign
Check that a signed PDF is the exact file Tally Sign produced when everyone signed, not a changed copy. The file isn't uploaded.
The file stays on your device. Your browser computes its SHA-256 fingerprint and sends only that.
How it works a fingerprint, not the file
A SHA-256 fingerprint is a 64-character code computed from every byte of a file. Two files have the same fingerprint only if they're identical.
Tally Sign records the signed PDF's fingerprint
When the last person signs, Tally Sign makes the signed PDF, emails it to everyone and records its SHA-256 fingerprint.
Your browser fingerprints your copy
Drop the PDF above. Your browser computes its SHA-256 on your device. The file itself isn't sent anywhere.
Tally Sign looks for that fingerprint
Only the 64-character fingerprint is sent. If it matches a signed PDF Tally Sign produced, you see which document it is.
Your file stays with you
The fingerprint is computed in your browser. Only those 64 characters are sent, so the document itself never leaves your device.
Exact, not similar
A fingerprint changes completely if a single byte changes. Two files match only if they're identical.
Only what's on the PDF
A match shows the title, the company that sent it, when it was completed, its document ID and who signed. All of that is already in the file.
Questions
How signatures are captured and recorded is on Security and legal validity.
What does “No match” mean?
Tally Sign has no signed PDF with exactly that content. The file may have been changed, it may be another copy (a scan, or a PDF printed or exported again from a viewer), or it may not come from Tally Sign. Ask the sender for the original signed PDF that Tally Sign emailed when everyone signed, and check that one.
Is my document uploaded?
No. Your browser reads the file and computes its SHA-256 fingerprint on your device. Only the fingerprint is sent to Tally Sign to look up. Nothing is stored about your check.
Where do I find a document's SHA-256?
The sender's export of signed documents lists each signed PDF's SHA-256, and the document's Activity shows how it starts. For any file, shasum -a 256 file.pdf on a Mac or certutil -hashfile file.pdf SHA256 on Windows prints it.
Can I check a document that's still out for signature?
No. Only the final signed PDF, made when the last person signs, is recorded. Previews and downloads before that won't match.
Does a match prove who signed?
It proves the file is the one Tally Sign produced. The Certificate of Completion at the end of it shows how each person signed: the email their link went to, their consent, the times, IP addresses and devices.
Step-by-step guides
Tally Sign Support walks through each part with screenshots of the real product.
- Getting startedSend a document and track itSend for signature in your customer's language, ask for an access code, see who opened and signed it, remind people, download the signed PDF and check a copy later.Read the guide
- AdminSecurity and your dataWhere your documents are stored, encryption, the audit trail, signer access codes, sign-in options and how long data is kept.Read the guide
- Getting startedWhat your customer sees when signingThe signing page from the signer's side: consent, fields, adopting a signature, finishing and their language.Read the guide