SIGNificant e-Signing for the iPad and Android

Paperless Contracting for Mobile Devices

SIGNificant Signature Capture allows any document to be completed and signed electronically with your handwritten signature. The signature captured is forensically identifiable and can be authenticated based on the recorded parameters against a preenrolled signature profile. Clients, partners, coworkers, or employees can instantly sign a document electronically with a tablet or smartphone no matter where they are, just as they are used to doing with their handwritten signature on paper. Field agents can also get documents signed in person, in real time, by presenting a document to a client on a tablet.

Visibility and control over your e-sign process

SIGNificant offers much more than e-signing of documents. Enterprises can control and govern all steps in the completion and signing process of contracts, including positioning signature fields, filling out forms, adding annotations, accessing the camera for scanning attachments, and much more.

Ensure the highest levels of enforceability and signer authentication

When a signature is captured locally on the device, it is safely embedded using an asynchronous public key encryption into and uniquely bound to the target PDF document. Copy/paste attacks can thus be easily detected. Furthermore, a digital signature is applied, which turns the document into a sealed PDF, making undetectable changes of document content impossible. Moreover, if online connection is available, you even can authenticate signers in real-time against their pre-enrolled biometrical signature profile through dynamic signature verification thus ensuring that only authorized users can sign certain documents.

Customer Benefits
As simple as signing on paper Documents cannot get lost during delivery Signatures or attachments cannot be forgotten Socially accepted handwritten e-signatures require no changes in user habits Reduced fraud through bullet-proof security and authentication even in real-time Seamless and fast integration in existing application and document flows Accelerates POS processes, freeing up time for up-selling & cross-selling activities

Functions
Control and govern all steps in the completion and signing process of contracts Supports pressure sensitive pens for Android and iPad for the most natural signing experience, palm protection and high-quality signature recording Based on open PDF standards, with no proprietary e-signature technology Leading biometrical signature verification in realtime, with self-learning reference profiles Highly scalable, robust server platform with straightforward server-side integration Complete and sign documents fully offline

www.xyzmo.com

Page I 1

SIGNificant Architecture Overview

Sign on the Dotted Screen

Signing a document with your handwritten signature is socially well accepted around the world. Bringing it into the digital world has the big advantage of avoiding costly media breaches while conforming to already well-established user habits and business processes.

Natural signing experience like pen on paper

Signing with pressure-sensitive "digital pen" in particular provides a writing experience like signing on paper, as pen input is differentiated from touch operations. This greatly enhances the user experience compared to a passive stylus or signing with your finger. Some pressure-sensitive "digital pen" also deliver native palm resistance, which further improves the signing experience and the quality of the captured signature.

More than just the image 5D biometrical paramaters

A signature captured with SIGNificant is much more than just an electronic image of a digitized signature. We record forensically identifiably the handwritten signature of a person using all available parameters, such as acceleration, speed, and rhythm. These parameters are unique to every individual and cannot be reproduced by a forger. A pressure-sensitive "digital pen" also registers, in addition to a very high recording accuracy, the writing pressure, which allows for the best possible signature verification.

Real-time authentication for highest process security

In addition to a deep manual signature verification that a forensic expert can do anytime afterwards using the SIGNificant PenAnalyst software, xyzmo also provides a signature verification that authenticates a signature against a pre-enrolled signature profile database in real-time. As the system can use all recorded biometric data for its signature

www.xyzmo.com

Page I 2

verification, the false acceptence/rejection rates it achieves are in the low one-digit percentage range. Its selflearning algorithm enabels the system to stay up to date with changing signing habits over time. In addition, it has the advantage of lacking the invasive nature of other biometrical authentication methods such as fingerprint, face, or retina scan, all of which do not allow the simple switch to a different biometric signature in case the data is stolen.

Bullet Proof Through High Security

xyzmo provides highest level of security to avoid biometrically signed documents can be faked in any way.

Biometric encryption
The biometrical signature data is encrypted asymmetrically using a public key directly while recording. Reading the signature for verification purposes is only possible through decrypting it with the corresponding private key, which can either be stored offline, e.g. at a notary, or when required online in e.g. a High-Security Module (HSM).

Document binding
The biometric signature is always securely bound to a unique document. Its fingerprint (hash) is encrypted together with the biometrical signature data making copy/paste attacks impossible.

Integrity protection
Once a handwritten signature is captured, a digital signature is also applied, which turns the document into a sealed PDF, making undetectable changes of the document content impossible.

Standard Compliancy and Compatibility

Full-conformance PDF and PDF/A e-signature standard
Signed documents can be viewed by any standard PDF viewer. Documents are sealed with a digital signature compliant to the ISO standards for PDF. Thus, the validity of the digital signature can easily be validated with Adobe Reader and many other PDF viewers. Moreover, the digital signature can show the GPS coordinates of the location where the signature was provided.

ISO/IEC 19794-7:2007 standard for biometric signature exchange

Biometric signatures can be exported according to the ISO/IEC 19794-7:2007 standard for biometric signature exchange, providing full vendor independence of the signed documents.

Compatible with major signature capturing devices

SIGNificant is compatible with signature capturing devices from all major vendors, including dedicated signature pads.

Straightforward Integration
Front-end App
Either use the standard SIGNificant App or integrate the apps functionality and UI views into your own app through the SIGNificant SDK. Moreover, you can easily adapt the default color schema of the app to your corporate design.

www.xyzmo.com

Page I 3

Back-end SIGNificant Server

The integration into the document workflow is done comfortably on the server side. The user simply receives a link to access the PDF on the server, which is cached locally for offline access, and only image previews are transferred to the app. Thus, the signed original document is, for security reasons, only available on the server and not automatically copied and duplicated to the mobile device. All PDF manipulations are always performed in the secure data center environment, giving you full control over the access and distribution of the signed original document.

On-premises or cloud based

SIGNificant Server is available as an on-premises installation or provided as a cloud-based solution.

Enhance Your Productivity

Offline processing
Mobile use cases often involve situations where online connectivity simply is not possible. This is why SIGNificant allows you to work with your documents and form templates fully offline, enabling you to complete the data capture and signing process with customers without any server connectivity. You even can manage multiple documents and form templates offline. Necessary server synchronization (e.g. to seal the document and to put it back into the document archive) automatically occur in the background when Internet connectivity is available, without a user interaction needed.

Work with documents like on paper

Browse and review multipage documents before you edit and sign them. Edit documents directly or zoom in with guestures whenever necessary.

Govern all activities

Define all steps in the signing process, including the ability to position signature fields, and define the necessary attachments and group form fields into areas, which makes it easier to guide the signer through the document in the right order. Specify compulsory or optional tasks, and define policies to enable or forbid certain actions on or with the document, such as making annotations or saving, e-mailing, and printing documents.

Add annotations and attachments

Enter text or add attachments such as photos from the built-in camera of your device to the document.

Fill out and sign PDF forms

Fill in your form fields directly from within the SIGNificant application and allow automated forms data extraction of signed documents. Form data to be edited can also be prefilled from external applications.

Support for cloud storage

Open a document from other applications that also work with documents including your inbox, Dropbox, Evernote, Box(.net) and others and sign them via SIGNificant on the go. When you are finished, you can store and share documents via your cloud storage, including Dropbox, Evernote, Google Docs (Drive) and Box.net.

Trusted by the Worlds Most Respected Brands

www.xyzmo.com

Page I 4

xyzmo Software GmbH | www.xyzmo.com | T +1-201-205-291-8| Revision 20130830