When electronic signatures is enabled during proof creation, reviewers are required to electronically sign their decisions. Upon submitting a decision, each reviewer must authenticate their choice using the same method they use to access their Ziflow account, either by entering their Ziflow credentials (email and password) or confirming a token sent via email when authenticating through SSO or Google Sign-In.

Available on: Enterprise

You can enable the Electronic signatures option when creating or editing a proof. This setting is available under Security settings and applies only to proofs with reviewers who are Ziflow Users.

If guest reviewers (contacts) are included in the workflow, Ziflow displays an error message prompting you to remove them or disable the electronic signature requirement.

Users authenticating with email and password

Reviewers who sign in directly to Ziflow with an email and password must re-enter their credentials to electronically sign their decision.

Users authenticating with SSO or Google sign-In

Reviewers who access Ziflow using SSO or Google Sign-In will receive a token via email. They must use this token to confirm their decision and complete the electronic signature process.

How signed proofs appear

After a proof is signed electronically, Ziflow displays a signature icon next to the reviewer’s name in the proof details and notifications.

The activity log records when a proof decision was signed electronically.

If you export comments to PDF from an electronically signed proof, you'll see a special icon near each reviewer's decision.

Set single credential expiry period

Administrators can configure how long a reviewer’s authentication remains valid for signing additional proofs. This is managed through the Electronic signatures: single credential expiry period setting. For more information, see Configure default proof settings.

This setting helps balance security requirements with reviewer convenience by allowing trusted users to sign multiple proofs within a defined timeframe without re-authentication.