The Cloud Signature Consortium: What It Is and Why Twala Is a Member

The Cloud Signature Consortium (CSC) is the global organization that develops the open standard for digital signatures made in the cloud. Twala has been a member since March 2023, and it is the consortium’s only member from the Philippines.

Signing moved to the cloud, and the keys had to follow

A digital signature is made with a private key. For years, the safe place for that key was a USB token or a smart card the signer carried around. It worked, but awkwardly. Lose the token and you couldn’t sign. Sign from a phone and there was nowhere to plug it in. Rolling out tokens to thousands of employees, or to customers, was a project of its own.

Remote signing changes where the key lives. It stays in protected hardware at a trust service provider, and the signer authorizes each use, usually with a second factor, from whatever device they have. The key never leaves the provider, and the signer never handles it.

That created a new problem. Every provider built its own interface. A signing application that wanted to work with ten providers had to build ten integrations, and a provider that wanted to work with many applications had to support each one separately. That is the problem the consortium was set up to solve.

What the consortium does

The CSC is a non-profit association of industry and academic organizations, founded in 2016 and registered in Brussels. Its members include solution providers, technology providers, and trust service providers from around the world.

Its main work is the CSC API, a common technical specification for remote signatures and seals. It defines how an application finds a signer’s credentials, asks the signer to authorize a signature, and gets the signature back, the same way with any provider that implements it. The specification is designed to support the European Union’s eIDAS Regulation (No. 910/2014) and works with established frameworks such as OAuth 2.0. Version 2.2 was released on November 6, 2025.

The consortium also brings its members together, at general assemblies and at summits such as “Trust Without Borders,” held in Bogotá, Colombia, in May 2026.

Why a Philippine platform joined

Twala joined in March 2023. At the time, CEO Engr. Jeffrey Reyes said: “We’re thrilled to be joining the Cloud Signature Consortium and working alongside some of the brightest minds in the digital signature space.”

That June, he attended the consortium’s general assembly in Utrecht, the Netherlands, on June 15 and 16, with more than 50 companies from the digital signature, digital identity, and trust industry. The discussions covered how emerging technologies, including quantum computing, blockchain, and decentralized identity, will affect trust services.

The reason to be in that room is simple. Philippine documents don’t stay in the Philippines. An overseas Filipino’s employer, a foreign counterparty, a parent company abroad, and an embassy all receive documents signed here. A signature that can only be understood locally is a weak signature. Membership puts a Philippine voice where the global rules for digital signatures are written, and it brings those rules back to Philippine products.

What it means for your documents

Standards are what let a Twala document be checked outside Twala. Every document completed on Twala is sealed with standard X.509 public key infrastructure, carries RFC 3161 timestamps and long-term validation evidence, and is stored as PDF/A-2b, the archival PDF format. Any PDF reader that checks digital signatures can confirm whether the file has changed since it was sealed. Its fingerprint is anchored on the Polygon blockchain, where anyone can check it with public tools.

None of that is proprietary, and that is the point. An enterprise choosing a signing platform is also choosing whether its records will be readable by others for the next twenty years. Open standards, and a seat where they are made, are how a platform keeps that promise.

One of several standards bodies Twala works with

Twala’s identity checks are aligned with the Bangko Sentral ng Pilipinas’ e-KYC and authentication guidelines and NIST’s Digital Identity Guidelines (SP 800-63-3). It is working toward ISO/IEC 27001 certification, with an internal information security management system already in place. And as a Supreme Court-accredited Electronic Notarization Facility, it meets the technical floor the Court sets under the Rules on Electronic Notarization.

More on the institutions Twala works with is in who stands behind Twala, and the full list of standards is on the HashOrigin technology page.

Twala is a Supreme Court-accredited Electronic Notarization Facility (ENF) and a member of the Cloud Signature Consortium.