Trust Service Provider Concepts

Envelope Long term validation Sender Signature type Signer Trust Service Provider (TSP) Trust Service Provider API (TSP API) Cryptographic message syntax (CMS) Redirection URL

Envelope

An envelope is equivalent to a transaction and includes the following items:

• documents
• signers
• tags (signature placeholder on the documents)

The TSP API allows you to perform signatures for each recipient of an envelope provided at least one document contains one signature tag or one initials tag.

Long-term validation

Long–term validation (LTV) is a format that provides all the information required to verify that a signature was valid at the time it was issued. LTV relies on several profiles delivering distinct security levels. The TSP API supports the LT and LTA levels. For more information, see Long term validation of PDF signatures.

Sender

Senders assign signers to envelopes. They select the envelopes’ documents, document signers, and signature types for each signer.

Signature type

When creating an envelope, senders select the type of signature each recipient can apply to documents. Every TSP belongs to a signature type.

Signer

Senders assign documents to signers. Usually, signers receive an email from senders to review and sign documents. They do not need to be registered Docusign users.

Trust Service Provider (TSP)

A TSP is a third-party signature provider that stores the identity of its users and issues digital signatures under their identity.

Trust Service Provider API (TSP API)

The TSP API is a set of REST API methods that Trust Service Providers can use to sign documents managed in a Docusign workflow.

Cryptographic message syntax (CMS)

CMS is an encryption standard based on the PKCS #7 syntax. The TSP encapsulates each signed document in a CMS and sends them back to Docusign. The TSP partners who are not familiar with building a CMS can use the CMS service API to generate a CMS.

Redirection URL

A Redirection URL is an HTTP address that Docusign displays in an iframe after a signer requests the signature of a document. Usually, it redirects to the TSP login page. Once the signer logs in, the TSP starts the signature process.