eSignature and eNotarization Compliance: A Checklist for Philippine Enterprises

Before a bank, an insurer, or a listed company moves signing and notarization online, its compliance team asks two questions: which rules apply, and how does the platform meet them? This is the map of the first, with the questions to put to any platform for the second.

It is written for compliance officers, legal counsel, and the information security teams who sit beside them. It is not legal advice, and a regulated institution will have sector rules of its own to add.

1. The legal basis: the E-Commerce Act

The Electronic Commerce Act of 2000 (R.A. 8792) gives electronic documents and electronic signatures legal effect. Despite its name, it covers government and non-commercial transactions as well as commercial ones, and it is the reason most business documents in the Philippines can be signed electronically today without any further permission.

What to confirm: that your internal policies don’t still assume a wet signature where the law asks for none. As Atty. Third Bagro, Twala’s co-founder and General Counsel, has written, many paper-based practices survive “not because the law requires them, but because organizations have never revisited their assumptions about what the law allows.”

2. Evidence: the Rules on Electronic Evidence

The Supreme Court’s Rules on Electronic Evidence (A.M. No. 01-7-01-SC) decide how an electronic document holds up if it is ever challenged. Under Rule 6, an electronic signature may be authenticated by evidence that a method or process was used to establish a digital signature and verify it, by other means provided by law, or by other means satisfactory to the judge. Under Rule 9, matters of admissibility and evidentiary weight may be established by an affidavit from someone with personal knowledge of the facts or based on authentic records.

What to confirm: that the platform leaves the evidence behind. On Twala, every completed document carries the Twala Platform Seal, a digital signature over the finished PDF with an RFC 3161 timestamp; an audit trail of who signed, from where, and when; and a fingerprint anchored on the Polygon blockchain that anyone can check on Twala’s verify page or independently. Our guide to court-ready digital signatures goes further.

3. Notarized documents: the Rules on Electronic Notarization

When a document has to be notarized, the Rules on Electronic Notarization (A.M. No. 24-10-14-SC) apply. A commissioned Electronic Notary Public (ENP) performs the act through an Electronic Notarization Facility (ENF) accredited by the Supreme Court, in person or over live video. A document electronically notarized under the Court’s rules is a public document, proved as a notarial document under the Rules of Court.

Rule VII sets the floor every ENF must meet: e-KYC consistent with Bangko Sentral ng Pilipinas rules, multi-factor authentication, liveness detection, geolocation that detects VPNs, tamper-evident security, a way to verify eNotarized documents, real-time backup of notarial books, registration with the National Privacy Commission, a link to the Supreme Court’s Central Notarial Database, and 99.9% uptime.

What to confirm: that the facility is accredited, and that the offices you file with accept eNotarized documents. Twala is a Supreme Court-accredited ENF, one of the first three. On October 13, 2026, the Court signed joint memorandum circulars with the Land Registration Authority and the Securities and Exchange Commission on accepting eNotarized documents. For other agencies and counterparties, ask before the document is signed.

4. Personal data: the Data Privacy Act

Every signature and notarization carries personal data: names, email addresses, ID images, face scans, locations. The Data Privacy Act of 2012 (R.A. 10173) and its Implementing Rules and Regulations govern all of it.

What to confirm: that the platform has a Privacy Manual, a designated Data Protection Officer, documented procedures for data subject requests, and consent before identity verification. Twala has all four, and nothing is collected for identity verification until the person consents. Your contract with any platform should also settle each party’s role in processing personal data. For AI features, ask where the model runs and whether your data trains it. Lex, the AI inside Twala, runs privately under Twala’s own cloud account, and no user data is ever used to train the AI.

5. Identity: BSP e-KYC and international guidelines

For banks and other BSP-supervised institutions, how a signer is identified matters as much as the signature. The Rules on Electronic Notarization already tie an ENF’s identity checks to the BSP’s e-KYC rules.

What to confirm: how identity is checked and how long a check stays valid. On Twala, a person verifies once, with a Philippine National ID checked against the national registry or another government-issued ID, followed by a live face scan matched to the ID photo. The checks are aligned with the BSP’s e-KYC and authentication guidelines and with NIST SP 800-63-3, and a verification stays current until the ID expires or for three years. Senders can require recipients to verify before they sign.

6. Security governance

Regulators and auditors will ask about controls, not features. The usual reference point is ISO/IEC 27001, the international standard for information security management.

What to confirm: certification status or the program behind it, monitoring and incident response, and what you can see from your side. Twala is working toward ISO/IEC 27001 certification, with an internal information security management system already in place, continuous security monitoring, and documented incident response procedures. Its audit log is protected with HMAC-SHA256 integrity checks, so an edited entry would give itself away. Enterprise plans add SSO through SAML or OpenID Connect, advanced logging, and SIEM integration, so sign-ins and document events can flow into the tools your security team already watches.

7. Records and retention

A retention schedule doesn’t change because a document is electronic. What changes is where the original lives: for an electronically signed or notarized document, the PDF is the original, and a printout is a copy.

What to confirm: that the file format and signatures will still be readable and checkable when the retention period ends. Twala converts every completed document to PDF/A-2b, the archival standard, before sealing it, and embeds long-term validation evidence when every signature on the document has it, so signatures stay checkable after their certificates expire. For notarized documents, each act is entered in the ENP’s Electronic Notarial Book and uploaded to the Supreme Court’s Central Notarial Database as soon as it is sealed. More in our explainer on long-term validation.

The checklist

Two more items belong on any enterprise list: what happens when the platform fails, and what support you get when something goes wrong. Those are covered in disaster recovery, RTO, and RPO and in what enterprise support covers on Twala.

None of this replaces your own review. The trust center and the security page go into the controls in more detail, and our team can walk your reviewers through them: contact us.

Twala is a Supreme Court-accredited Electronic Notarization Facility (ENF). Twala is a technology provider and does not give legal advice. Notarial acts are performed by commissioned Electronic Notaries Public.