Scanned signature is a dubious practice

Date :

On March 13, 2024 (Commercial Chamber, 22-16.487), the Court of Cassation issued a very interesting ruling on the limits of using scanned signatures to attest to the identity and consent of their author.

The process of scanning signatures is valid, but it cannot be considered as a presumed reliable electronic signature within the meaning of Art. 1367 Al.2 of the Civil Code (i.e. a qualified electronic signature within the meaning of the eIDAS Regulation).

In this case, the Court of Cassation considers that in order to grant value to the scanned signature affixed to the contested promise of sale, the signatory would still have had to have previously consented to it, which he had not done.

Our advice is to avoid using scanned signatures as the sole proof of a party's commitment to high‑stakes acts. The Court of Cassation rightly notes that qualified electronic signatures should be used to legally secure the signing of an electronic document.

Also read

Date :
The NIS2 directive soon to be transposed in France, the CRA regulation on cybersecurity, and the DORA regulation on the cyber resilience of the financial sector are either already in force or in the process of being in force. They organize a cybersecurity ecosystem that almost all SaaS publishers must comply with, at the cost of a fairly considerable compliance effort: complex texts to decode, notification obligations in all directions, documentation, operational implementation, etc. To begin with, we give you what you need to know about their applicability to your service
Date :
The Data Act has been applicable since September 12, 2025, and it does not only apply to connected data from the IoT. It also targets all European added service providers in SaaS mode, for example in the field of EDM, accounting, invoicing, archiving, etc. which will now have to allow their customers to terminate for convenience at any time and a reversibility whose scope is difficult to apprehend. It is not just a tool for digital sovereignty. It is also a text with dangerous side effects for national European suppliers, sometimes fragile, whose customers are offered on a platter the possibility of switching to competition, why not American...
The Data Act does not apply to ongoing contracts, which some companies, and even their lawyers, seem to be unaware of, as they see this text as a free and perfect opportunity to terminate a contract or to require the provision of information not provided for in the contract. They must moderate themselves, because the Data Act only applies to contracts concluded after September 12, 2025, which must now include clauses that make it possible to best adjust the provisions of the text.