ESIGN is the US federal statute giving electronic signatures and records the same legal effect as their paper equivalents, and UETA is the uniform state law adopted in almost every state that does the same at state level. Together they are why an agreement executed through an API is enforceable in the United States.
ESIGN and UETA
Statute United States
ESIGN and UETA removed the question of whether an electronic signature counts. What they did not do is specify a format: unlike eIDAS in Europe, the American approach is technology-neutral, requiring intent, consent, attribution and a retainable record rather than a particular cryptographic construction.
- Legal effect, not format - A signature may not be denied effect for being electronic; how it is made is left open.
- Consumer consent - ESIGN requires disclosure and affirmative consent before electronic records replace paper for consumers.
- Attribution and intent - The evidentiary questions move to who signed and whether they meant to — which is what audit trails exist to answer.
- Record retention - The record must be capable of accurate reproduction, which shapes retention design.
- Carve-outs - Wills, certain family law and some notices remain outside, which is why some workflows stay on paper.
The contrast with Europe is instructive and it shows up in the scores. eIDAS attaches legal consequence to a machine-verifiable artifact; ESIGN and UETA attach it to intent and process. Both produced a functioning e-signature market, and The State of Legal & Compliance APIs finds that market leading its sector on published contracts at 55.0% — well ahead of the contract-management segment next door at 18.2%. Where a legal requirement lands on the artifact, the artifact gets published.
Referenced in API Evangelist papers
This regulation shows up in my published research. These reports read the machine-readable evidence provider by provider — and put this regulation in the context of a real sector.
The State of Legal & Compliance APIs
Why an agreement executed through an API is enforceable in the US — technology-neutral where eIDAS is verifiable, and both underpin the market's strongest segment.
Implemented by these standards
A regulation is the law; a standard is the machine-readable contract that makes it real. These are the technical standards that implement this regulation, catalogued at standards.apievangelist.com.
AdES
The European approach specifies the cryptographic construction; ESIGN and UETA deliberately do not.
