Electronic signature in Colombia — Law 527 and legal validity
Colombian legal framework for electronic signatures: functional equivalence under Law 527, regulation by Decree 2364, jurisprudence from the Supreme Court and the Council of State, and application in regulated sectors (financial, healthcare, government). Validocus implements a reinforced electronic signature meeting all these standards.
What does Law 527 of 1999 say?
Law 527 of 1999, known as the E-Commerce Law, is the foundational framework of digital law in Colombia. It recognizes the legal validity of data messages, electronic signatures, and certification services. Three structural principles are particularly relevant to electronic signatures:
Functional equivalence (art. 5 to 7)
A data message shall not be denied legal effect solely because it is electronic. When a rule requires writing, a signature, or an original, those requirements are satisfied by reliable electronic equivalents.
Evidentiary admissibility (art. 10 and 11)
Data messages are admissible as documentary evidence in judicial and administrative proceedings. Evidentiary weight considers the reliability of the method used to preserve and transmit the message.
Method reliability (art. 7 par.)
The signature must identify the signer and link them to the approved content. Reliability is assessed by purpose and circumstances — Validocus adds video, blockchain, and timestamp to maximize that reliability.
Decree 2364 of 2012: electronic signature vs. digital signature
Decree 2364 of 2012 regulates Article 7 of Law 527 and clarifies the operational distinction between two categories:
Electronic signature (decree, art. 1 and 3): a code, password, biometric data point, private cryptographic key, or any other mechanism that allows a person to be identified in relation to a data message. Validocus implements a reinforced electronic signature: handwritten on-screen stroke + video evidence + blockchain hash + timestamp + IP + device. The reliability of this combination far exceeds the decree's minimum requirements.
Digital signature: a specific subtype of electronic signature that uses asymmetric cryptography certified by an ONAC-accredited Digital Certification Authority (DCA). Digital signature is required only in specific procedures before DIAN, certain electronic judicial proceedings, and some endorsements of dematerialized negotiable instruments — for the vast majority of commercial, labor, and real estate operations, a reinforced electronic signature is sufficient.
Jurisprudence: when electronic signatures have won disputes
Colombia's high courts have consolidated the evidentiary admissibility of electronic signatures. The Supreme Court of Justice (Civil Cassation Chamber and Labor Chamber) has held in multiple rulings that contracts signed electronically in accordance with Law 527 are valid documentary evidence under the General Procedure Code.
The Council of State has applied the same criterion in administrative proceedings, particularly in electronic public procurement via SECOP II. The Constitutional Court has recognized the right to electronic administration as part of due process.
The key in all these cases is the evidence chain: the more robust the technical traceability, the easier the admission. Validocus builds that chain by default in every contract — SHA-256 hash, Avalanche blockchain, video evidence, timestamp, IP, device — minimizing the risk of counterparty objections during the evidentiary phase.
Regulated sectors (financial, healthcare, government)
In sectors subject to special oversight, the Validocus reinforced electronic signature applies with additional benefits. In the financial sector, the Basic Legal Circular of the Financial Superintendence accepts electronic signatures for account opening, credit, and authorizations; for SARLAFT compliance, video evidence is robust evidence of source-of-funds declaration before the UIAF. In the healthcare sector, EPS and IPS can handle treatment authorizations, informed consent, and sensitive-data authorizations under Law 1581 of 2012 and Decree 1377 of 2013, with evidentiary backing in case of medical malpractice claims. In government and public administration, Law 1437 of 2011 (CPACA) expressly recognizes the use of electronic means in administrative actions, including notifications, signatures, and archiving.
Use cases
Financial sector and SARLAFT
Account openings, credit contracts, salary advances, electronic promissory notes, source-of-funds declarations. Video evidence + blockchain shield the due-diligence process during UIAF and Financial Superintendence reviews.
Healthcare sector and EPS
Medical treatment authorizations, informed consent, sensitive data processing authorizations under Law 1581 and Decree 1377. Useful evidentiary support against medical malpractice claims.
Government and state entities
Service contracts with the State, data authorizations in SECOP II procedures, and administrative filings. Law 527 applies to public administration under Law 1437 of 2011.
B2B real economy
Medium and large companies in industry, retail, agriculture, energy, and construction. Commercial contracts, NDAs, MSAs, policies, internal authorizations — anything that doesn't require a notarized public instrument.
How does it work?
- 1
Upload the PDF you need to sign and add the signers (email + basic data).
- 2
Each signer receives an email with a unique link and signs from a phone or desktop.
- 3
The signer reviews the document, draws their signature on screen, and records video evidence (essential for SARLAFT and disputes).
- 4
Validocus generates the SHA-256 hash and registers the contract on the Avalanche blockchain with an immutable timestamp.
- 5
Download the signed PDF + the evidence certificate with everything needed for an audit or judicial proceeding under Law 527.
Frequently asked questions
What exactly does Law 527 say about electronic signatures?
Article 7 of Law 527 of 1999 establishes the principle of functional equivalence: when any rule requires the presence of a signature or sets consequences for its absence, that requirement is satisfied if a method is used that (a) identifies the originator of a data message and (b) indicates that the content has their approval, provided the method is reliable and appropriate for the purpose for which the data message was generated or communicated. Validocus meets both requirements with blockchain backing and video evidence.
What is the difference between an electronic signature and a digital signature in Colombia?
Decree 2364 of 2012 regulates Article 7 of Law 527 and clarifies the distinction. An electronic signature is the broader category: any electronic data attached to a message that fulfills the function of identification and approval. A digital signature is a subtype: it uses asymmetric cryptography with a certificate issued by a Digital Certification Authority (Andes SCD, GSE, Certicámara). For most B2B, labor, and real estate operations, a reinforced electronic signature is sufficient — a digital signature is required only in specific cases such as filings before DIAN or certain formal judicial proceedings.
Has the Supreme Court accepted electronic signatures as evidence?
Yes. The Supreme Court of Justice has reiterated in multiple rulings that electronic documents signed under Law 527 have the same evidentiary value as physical documents. The Council of State has held the same position in administrative proceedings. What matters for admissibility is that the signing method identifies the signer and preserves integrity — exactly what Validocus does with SHA-256 hashes, the Avalanche blockchain, video evidence, IP, and timestamp.
Does it work for filings before the Financial Superintendence?
For most contracts in the financial sector, yes: account openings, credit contracts, debit authorizations, electronic promissory notes. The Basic Legal Circular of the Financial Superintendence accepts a reinforced electronic signature with robust evidentiary support, including customer video and immutable registration. For some very specific procedures (such as certain endorsements of dematerialized notes before the DCV) a digital signature with a certificate from an accredited authority may be required — but 95% of the operational flow fits within reinforced electronic signature.
And for SARLAFT and financial compliance?
Validocus is particularly useful for SARLAFT (the Anti-Money Laundering and Terrorism Financing Risk Management System). The video evidence records the customer declaring source of funds, which constitutes robust evidence for due-diligence processes and UIAF audits. The blockchain hash guarantees the declaration was not altered afterward. For high-risk customers, video is practically indispensable.
When does an electronic signature not work in Colombia?
In three specific cases the Colombian legislator requires a notarized public instrument (public deed), which calls for in-person appearance before a notary or, in some electronic cases, a certified digital signature: (1) transfer of ownership of real estate, (2) incorporation of certain corporate types under the Commercial Code, (3) wills. For everything else — employment contracts, commercial contracts, leases, NDAs, authorizations, insurance policies, certifications — an electronic signature is fully valid.
Sign with full validity under Law 527
30-day free trial. No credit card required.
Create free account