In the digital world, you come across various terms - the most common ones are briefly explained here.
2
2FA
2FA (Two-Factor Authentication) is a security process in which a user signs in using two different methods of identity verification. It is a combination of something you know (a password) and something you have (a phone, an app, an SMS code) or something you are (a fingerprint, facial recognition). In e-signing, 2FA ensures that only intended recipient can sign a document by requiring a password and a code sent to their phone.
A
AES
An Advanced Electronic Signature (AES) provides a higher level of security. The signature is linked to the signer in a way that uniquely identifies them, and it is created using technology that prevents unnoticed changes. This type of signature is legally binding and is often used by companies in business processes.
Audit Trail
An audit trail is a detailed record of all actions that occur with a specific document or process — who opened it, when, on which device, who signed it, and in what order. In e-signing, the audit trail ensures transparency and evidentiary value by allowing you to review the complete history of a document at any time.
Authentication
Authentication is the process of verifying identity before granting access to a system, application, or document. The most common forms of authentication are: something you know (password, PIN), something you have (phone, smart card, USB token), and something you are (biometrics: fingerprint, facial recognition).
Authenticator
An authenticator is a hardware or software tool that generates and verifies one-time passwords (OTP) or other security codes for user identity verification. It is used as part of 2FA or MFA processes. There are two main types of authenticators: a hardware authenticator (a dedicated device or USB token that generates security codes) and a software authenticator (mobile apps such as Google Authenticator, Microsoft Authenticator, and Authy, which generate time-limited codes (TOTP) on your phone).
B
BetrSign
BetrSign is the #1 electronic signing service in the region. It enables users to sign documents quickly, securely, and legally—without printing, scanning, or mailing. It supports various types of electronic signatures in accordance with the eIDAS Regulation, is easy to use on a computer or phone, includes an audit trail and timestamp, and is ideal for companies of all sizes looking to speed up business processes and reduce costs. BetrSign helps companies with digital transformation, saves employees time, and provides customers with a modern, user-friendly signing experience.
Biometrics
Biometrics is a way of recognizing and verifying identity based on a person’s unique physical or behavioural characteristics, such as fingerprints, facial recognition, iris or voice recognition, typing patterns, etc.
Bulk Sending
Bulk sending is the process of sending a single document or message to a large number of recipients at once. Instead of sending each document individually, the system allows the same form, contract, or notice to be distributed to many customers or employees in a single step. In e-signing, a company can quickly send documents to multiple people at once, with each recipient receiving their own copy to sign.
C
CRM
CRM (Customer Relationship Management) is a system for managing customer relationships. It helps companies track customer data, communication history, sales opportunities, and support. It enables better insight into customer needs, more effective sales, and more personalized communication.
D
Digital Delivery
Digital delivery is a secure way to send documents, with the system recording who sent the message, who received it, and when it happened. It works like “registered mail” in the digital world — with proof of sending and receipt.
Digital Document Workflow
A document workflow is the path a document takes from creation to final storage, including who prepares it, reviews it, signs it, approves it, and where it is stored. There are two types. The first is an analog (paper) workflow, where the document is printed, signed by hand, physically moved between departments, or sent by mail; each change requires reprinting, and it is stored in folders and archives. This involves many risks: loss, slowness, higher costs, and limited traceability. The second is digital: the document is created and circulated electronically, signed with an electronic signature (SES, AES, or QES), sent via secure digital channels, and stored in electronic archives (e.g., PDF/A + timestamp). The advantages are speed, lower costs, easier tracking, and greater security.
Digital Identity Wallet
A digital identity wallet (EU Digital Identity Wallet) is a new European Union initiative that will enable every citizen to securely store their digital identity on a phone or other device and use it across the EU: personal documents (e.g., ID card, driver’s license), digital certificates for e-signing, health data, bank cards, tickets, ID cards, etc. With a digital identity wallet, users will be able to access public e-services across the EU, securely sign documents (including qualified electronic signatures, QES), and prove their identity online or in physical environments (e.g., renting a car, checking into a hotel).
Digital Transaction
A digital transaction is any exchange of value, information, or agreement that takes place electronically — without paper and without the need for physical presence. It can be an online purchase, a payment via a mobile app, remote signing, or sending an electronic invoice. The key characteristics of a digital transaction are speed, traceability, and security. It often includes an e-signature, which ensures both parties agreed to the terms and that the document has not been altered.
Digital Transformation
Digital transformation means that an organization adapts its processes, services, and business models to digital technologies. This is not just about introducing new tools, but about a comprehensive shift in how work is done, where digital solutions become the foundation for efficiency, innovation, and a better user experience. Examples of digital transformation include introducing e-signature instead of paper signing, automating business processes (e.g., ERP, CRM), using data analytics for decision-making, and using digital channels for customer communication. The main goal of digital transformation is greater efficiency, agility, and competitiveness in the digital age.
E
E-signing
E-signing (electronic signing) is signing in digital form on a computer, smart mobile device, or signing pad (fast, secure, and paperless). The signature confirms the signer’s identity and ensures the document content remains unchanged.
E-Potpis FINA
E-Potpis is a qualified electronic signing service (QES) offered in Croatia by the state financial agency FINA. It enables users (individuals and companies) to sign documents digitally, with a signature equivalent to a handwritten one. Users obtain a digital certificate that can be stored on a smart card, a USB token, or a mobile app (e.g., a mobile e-signature). The services comply with eIDAS, so signatures created via FINA E-Potpis are valid across the EU.
eIDAS
The eIDAS Regulation (Electronic Identification, Authentication and Trust Services) is the European legal framework that sets uniform rules for electronic identification, electronic signatures, and other trust services (e.g., electronic seals, timestamps, digital delivery). It was adopted to ensure the same legal validity and trust in digital processes across all EU member states as with paper documents and handwritten signatures. Companies and users can do cross-border business securely, and eIDAS-compliant electronic signatures are legally valid throughout the EU.
eIDAS 2.0
eIDAS 2.0 is an update to the EU regulation on electronic identification and trust services, adopted in 2024. Its main novelty is the introduction of the EU Digital Identity Wallet, which will be available to all EU citizens. Every citizen will be able to obtain a digital wallet on their phone, store personal documents, digital certificates, payment data, and other identities, use it for secure login to public and private services across the EU, create qualified electronic signatures (QES) directly from the mobile wallet, and strengthen cross-border trust and interoperability between member states. The goal of eIDAS 2.0 is to create a single European framework for digital identity and e-signature that is equally valid across the EU—for both citizens and businesses.
ECC
ECC (Elliptic Curve Cryptography) is a modern form of asymmetric cryptography based on the mathematical properties of elliptic curves. Like RSA, it uses a key pair (public and private), but for the same level of security, it requires much shorter keys. Because of shorter keys, ECC is faster, uses fewer computing resources, and is more suitable for mobile devices and smart cards.
Electronic ID Card (Slovenia)
eOI (electronic ID card) is the new Slovenian ID card with an embedded chip, which, in addition to standard identification, also enables digital use. The chip stores digital certificates that can be used to log in to government online services and to sign documents electronically. To use the eOI digitally, you need a card reader and software, or a mobile app if using the mobile identity feature.
Electronic Seal
An electronic seal is a digital “stamp” of an organization (such as a company or public authority) that confirms the origin and integrity of an electronic document. Similar to a stamp on paper, it proves that a specific organization issued the document and has not been altered.
ERP
ERP (Enterprise Resource Planning) is an integrated information system that helps companies connect and manage key business processes — from finance, sales, procurement, and warehousing to manufacturing and HR. It provides better visibility into operations and faster decision-making. When ERP is connected to solutions such as e-signing, processes (e.g., approving purchase orders, signing contracts, issuing invoices) become even quicker and more transparent.
ESIGN Act
The ESIGN Act (Electronic Signatures in Global and National Commerce Act) is a U.S. law enacted in 2000 that recognizes the legal validity of electronic signatures and records. Its key message is simple: an electronic signature has the same legal effect as a paper signature. The law enabled businesses and consumers in the U.S. to enter into contracts and other legal agreements digitally, without printing or physically signing.
ETSI Standard
ETSI (European Telecommunications Standards Institute) is a European standards body that develops technical standards for telecommunications, information security, and electronic signatures. For e-signing and trust services (under eIDAS), it prepares detailed technical specifications that define how service providers (QTSPs) must ensure security, interoperability, and compliance. Examples of ETSI standards in the eIDAS area include: ETSI EN 319 401 (general requirements for trust services), ETSI EN 319 411 (requirements for certificate authorities), ETSI EN 319 421 (requirements for timestamps), ETSI EN 319 521 (requirements for electronic delivery services).
F
FINA
FINA (Financial Agency) is a Croatian state agency that, among other things, provides electronic identification and electronic signing services. It is one of Croatia’s qualified trust service providers (QTSP) under eIDAS. Through FINA, users obtain digital certificates for individuals and businesses, access to state and public administration e-services, and the ability to create qualified electronic signatures (QES). FINA plays a key role in digital business in Croatia and enables secure, legally valid electronic communication between the state, companies, and citizens.
FTP
FTP (File Transfer Protocol) is a protocol for transferring files between computers over the Internet. It is used to transfer files between a server and a computer, and vice versa. Although FTP is one of the oldest internet technologies, it is still used, but it has certain security limitations. Data (including passwords) is transmitted unencrypted, so today it is often replaced by more secure versions: FTPS (FTP Secure—uses SSL/TLS encryption) and SFTP (SSH File Transfer Protocol—based on SSH, i.e., Secure Shell, and even more secure).
G
GDPR
GDPR (General Data Protection Regulation) is an EU regulation that sets rules for protecting personal data and the privacy of individuals in the EU. It applies to all companies and organizations that process personal data of EU residents — regardless of where they are based. It gives people greater control over their data (e.g., the right to access, correct, or delete it). It imposes obligations on companies for the secure collection, storage, and use of that data.
H
Halcom One
Halcom One is a secure electronic signing and login solution offered by Halcom in Slovenia. It functions as a QSCD (Qualified Signature Creation Device) in the cloud: for a qualified electronic signature, the user does not need a smart card, USB token, or a reader. Signing is done via a mobile app; the user identifies themselves in the app, receives a confirmation prompt, and confirms the signature with a password or biometrics (fingerprint, facial recognition). The solution enables simple, mobile, and secure qualified electronic signing (QES) anywhere, in compliance with eIDAS.
Hash / Cryptographic Hash Value
A hash, or cryptographic hash value, is a shorter string of characters created when an algorithm processes data (e.g., a document). Every document has its own unique hash value — even the slightest change (a single letter or space) produces an entirely different result.
HSM
HSM (Hardware Security Module) is a specialized hardware device for securely storing and using cryptographic keys. It works like a highly protected “vault” that stores private keys for encryption, authentication, and electronic signing. In the context of e-signing, an HSM is used as a QSCD (Qualified Signature Creation Device) to ensure that private keys never leave the secure environment. This enables organizations to create qualified electronic signatures at scale (e.g., bulk signing of invoices, contracts, or notices).
HTML
HTML (HyperText Markup Language) is the basic language used to build web pages. It defines the structure of content — headings, paragraphs, lists, links, images, forms, etc. HTML defines what is on a page, but not how it looks (that is CSS) or how it behaves (that is JavaScript). Every web page, regardless of the technology behind it, is based on HTML.
HTML5
HTML5 is the fifth version of HTML (HyperText Markup Language) used for building and displaying web pages. It brings many improvements that make web applications more powerful, faster, and more user-friendly — without the need for additional plug-ins. HTML5 supports video and audio without external players, new tags for better structure, the canvas element for graphics and animation, improved support for mobile devices, and local storage in the browser. In e-signing, HTML5 is used as the foundation for web apps that allow users to sign documents directly in the browser, without special software.
K
KYC
KYC (Know Your Customer) is a process by which companies (banks, insurers, and providers of financial or digital services) verify their customers' identities. The purpose of KYC is to prevent abuse such as money laundering, terrorist financing, or fraud. The process typically includes collecting personal data (name, address, date of birth), verifying documents (ID card, passport), and, in some cases, additional steps such as video identification or address verification.
M
MFA
MFA (Multi-Factor Authentication) is a security process that uses multiple factors to log in or confirm access. While 2FA uses two, MFA can combine two or more (password, mobile app, SMS code, fingerprint, facial recognition, security key, etc.). If one security element (e.g., a password) falls into the wrong hands, the document still cannot be accessed without additional verification steps. In e-signing, this means a very high level of protection, as only a person who has successfully passed all checks can sign.
O
One-Time Password (OTP)
OTP (One-Time Password) is a security code valid only for a single login or process. It is generated dynamically and expires after a few seconds or minutes, making it almost impossible to misuse. OTP is typically used as an added layer of protection when logging in or signing documents. The user receives it via SMS, a mobile app, or a dedicated device (token). In e-signing, OTP often serves as the second authentication factor (2FA) and, together with a password, ensures that the right person signs the document.
P
Personal Digital Certificate
A personal digital certificate is an electronic document that confirms an individual’s identity in the digital environment. It is issued by trusted providers (QTSPs) and includes data such as first and last name and the signer’s public key. It is used to create a qualified electronic signature (QES), ensuring the signature is truly linked to the right person.
PDF
PDF (Portable Document Format) is a universal file format developed by Adobe for the transfer and display of documents regardless of operating system, device, or software. A PDF looks the same on all screens and when printed, making it ideal for contracts, invoices, and official forms. It supports embedded electronic signatures, timestamps, and an audit trail.
PDF/A
PDF/A is a special version of PDF intended for long-term archiving of electronic documents. It is used for legal, financial, and official documents where permanent validity and readability must be ensured, together with the e-signature and timestamp.
PIPEDA
PIPEDA (Personal Information Protection and Electronic Documents Act) is a Canadian law that regulates how companies collect, use, and protect personal data in the course of doing business. At the same time, it also recognizes the legal validity of electronic documents and signatures. The purpose of the law is to protect individuals’ privacy and increase trust in digital business.
PKI
PKI (Public Key Infrastructure) is a system of technologies, policies, and procedures that enables the secure use of public/private cryptographic keys. With PKI, we ensure safe and trusted electronic communications, signatures, and identification.
Q
QES
A qualified electronic signature (QES) is the highest and legally strongest form of e-signature. It is equivalent to a handwritten signature on paper in all EU member states. It is created using a qualified digital certificate issued by a trusted provider (QTSP) and stored on a secure device (e.g., a smart card or secure app). QES provides the highest level of trust and is used for legally sensitive documents (e.g., contracts, public procurement).
QSCD
QSCD (Qualified Signature Creation Device) means a qualified device for creating an electronic signature. It is a secure device or software solution that stores a user’s private key and uses it to make a qualified electronic signature (QES). The private key remains securely stored and is used only within the QSCD. This ensures the highest level of security and compliance with eIDAS. QSCD devices include smart cards with digital certificates, secure USB tokens, mobile apps that provide a secure environment, and server-side HSM (Hardware Security Module) solutions.
R
RSA
RSA je ena najbolj znanih in razširjenih kriptografskih metod za šifriranje in digitalno podpisovanje (avtorji Rivest, Shamir in Adleman). Gre za asimetrično kriptografijo, uporabo dveh ključev: javni ključ, s katerim podatke šifriramo ali preverjamo podpis, in zasebni ključ, s katerim podatke dešifriramo ali ustvarimo podpis. Pri e-podpisovanju RSA zagotavlja, da lahko veljaven podpis ustvari le imetnik zasebnega ključa, vsak pa lahko s pomočjo javnega ključa preveri njegovo pristnost.
S
SES
A Simple Electronic Signature (SES) is the most basic form of an electronic signature. It includes, for example, signing with a stylus on a tablet, typing a first and last name into a document, or clicking an “I agree” button. It is easy to use but less secure, as the signer’s identity is not always reliably verified.
SETCCE eID
SETCCE eID is solution for electronic identity and electronic signing created by SETCCE. It enables secure user authentication and qualified electronic document signing in compliance with the eIDAS Regulation. With SETCCE eID, individuals can access online services with a secure digital identity, while organizations can offer customers a reliable, straightforward document-signing experience. The solution operates across web and mobile channels and is widely used in banking, telecommunications, public administration, and other sectors that rely on trusted identification and electronic signing.
SFTP
SFTP (SSH File Transfer Protocol, also known as Secure File Transfer Protocol) is a secure protocol for transferring files over a network. It uses SSH (Secure Shell), meaning all transfers (including passwords) are encrypted. This prevents interception and unauthorized access. In practice, SFTP is used in business and government environments for the secure transfer of sensitive documents, system integration (e.g., ERP, CRM), and the exchange of signed or archived documents. Unlike older FTP, the protocol was designed with security in mind and is now a standard for confidential data.
SI-PASS
SI-PASS is Slovenia’s national system for single sign-on and electronic signing for online public administration services. It allows users to sign in with a single account across multiple portals (e.g., eUprava, eDavki, eZPIZ) and securely access their personal data or submit applications. It supports several login methods: a digital certificate (e.g., SIGEN-CA), SMS PASS (password + SMS code), and mobile identity SMS PASS (mobile app).
SLA
SLA (Service Level Agreement) is a contract between a service provider and a customer that defines the quality, availability, and responsiveness the customer can expect. It includes measurable indicators such as support response time, availability (e.g., 99.9% uptime), time to resolve issues, and similar metrics.
smsPASS
smsPASS is one of the login methods within SI-PASS used by eUprava and other Slovenian public services. It works by having the user enter a username and password, and then receive a one-time code via SMS to their mobile phone. This is a form of two-factor authentication (2FA), because it requires a password (something you know) and a code on a phone (something you have). smsPASS is therefore more secure than a password alone and is often used to access official e-services in Slovenia.
SSO
Single Sign-On (SSO) is an authentication method that allows users to sign in to multiple apps and websites with a single set of credentials. Because it eliminates the need to enter and remember various usernames and passwords for each service, it simplifies access and enhances the user experience.
T
Timestamp
A timestamp is a digital marker that adds the exact date and time to a document. It is used to prove when a document was created or signed, and to ensure that its content has not been changed after that moment.
Trust Services in the Cloud
Cloud trust services are digital services provided by trusted providers (QTSPs) online and compliant with eIDAS. They enable users to securely use electronic signatures, electronic seals, timestamps, digital delivery, and document storage without special physical devices (such as smart cards or USB tokens). Everything takes place in a certified cloud environment (e.g., an HSM in a data center), with access enabled through a secure authentication process (e.g., a password, 2FA, a mobile app).
U
UECA
UECA (Uniform Electronic Commerce Act) is a model law adopted by Canadian provinces and territories (except Quebec, which has its own rules). The act provides that electronic contracts, documents, and signatures must not be rejected solely because they are in digital form. UECA provides uniform rules for electronic commerce, making interprovincial business easier.
UETA
UETA (Uniform Electronic Transactions Act) is a model law adopted by almost all U.S. states (with a few exceptions). Its purpose is to standardize rules for electronic signatures and electronic transactions within individual states. UETA states that an electronic signature or record cannot be denied legal effect solely because it is in digital form. In practice, UETA complements the ESIGN Act—together providing the legal framework under which e-signatures are recognized at the state level and across the U.S.
UI
UI (User Interface) is the “face” of an application or system — what the user sees and interacts with directly: buttons, menus, colors, icons, typography, and the layout of elements on the screen. Good UI is straightforward, visually pleasant, and logically designed so users can quickly find what they need. While UX describes the overall experience, UI is the specific visual and functional design that enables that experience.
UK eIDAS
UK eIDAS is the UK version of the European eIDAS, adapted by the United Kingdom after leaving the European Union.
USB Token
A USB token is a device shaped like a USB drive with a chip for securely storing digital certificates and private keys. A USB token does not require an external reader — you simply plug it into the computer where it is used, along with the appropriate software. The private key remains on the token, ensuring security and compliance with eIDAS. It is used for qualified electronic signing of documents, secure login to information systems, and authentication when accessing sensitive data.
UX
UX (User Experience) describes how a user feels when using a product or service — from the first touchpoint to the final step. It is not only about whether something “works,” but also whether it is easy, pleasant, and intuitive to use. In e-signing, good UX means the user can access a document quickly, sign it easily (on a phone or computer), and trust that the process is secure and legally compliant.
Z
ZVDAGA
ZVDAGA (the Act on the Protection of Documentary and Archival Material and Archives) is a Slovenian law that establishes rules for the handling of documentary and archival material. It applies to both traditional (paper) and electronic documents. It regulates how records are created, stored, and protected, how authenticity and integrity are ensured, and how long-term archiving is handled. For electronic business and e-signing, ZVDAGA is important because it defines the conditions under which digital documents remain valid in the long term and can serve as legally reliable evidence.
