Frequently Asked Questions
Clarify the boundaries among VNeID, RS-HUB, Passkey, Agent, APIs and CA/RSSP.
Questions that change architecture decisions.
What is GoPaperless Digital Signing?
A unified digital-signing access and orchestration layer across mobile, desktop and API channels. Business applications do not need to own every signing route or provider UX directly.
Is a Passkey a digital signature?
No. A Passkey can support strong user authentication and transaction authorization. The digital signature is produced by the applicable CA/RSSP signing infrastructure with the associated signing credential.
How are VNeID/RS-HUB and Passkey different?
They are different trust routes. VNeID/RS-HUB is tied to the VNeID-linked journey and integrated signing services; Passkey focuses on passwordless authentication and authorization. GoPaperless can orchestrate routes according to implemented policy.
What does GoPaperless Agent do?
The Agent is a desktop connectivity layer that lets familiar document-signing applications use the GoPaperless signing ecosystem without replacing the entire user workflow.
Does the Agent store the private key?
The website does not present the Agent as private-key storage. Private-key location and protection must be described according to the confirmed CA/RSSP/HSM/QSCD architecture.
Can I sign PDFs from Adobe?
PDF signing through Agent depends on the supported application, operating system, certificate and service configuration. Review the PDF guide and compatibility matrix before deployment.
Is Microsoft Office supported?
The website presents Word, Excel and PowerPoint as Agent workflows; exact version support remains subject to compatibility QA. Exact version support is published only after testing.
When should I use Agent vs API?
Agent is for existing desktop applications. REST API is for business software, SaaS, DMS/ECM/ERP and applications that need to control the signing transaction programmatically.
Does an application integrate each CA separately?
The architecture goal is to abstract provider connectivity from the business application. Production multi-CA scope depends on supported providers and integration contracts.
Does API Explorer call production?
No. The API Explorer uses a local simulation and is labelled Reference API Model / Simulated API Explorer so it cannot be mistaken for a production contract.
Signing journey terminology
- Identity / identification
- The subject and the process of establishing that subject.
- Authentication
- Establish who is accessing or performing an action.
- Authorization
- Permit an action within a defined scope and context.
- Digital signature
- A cryptographic result bound to data and signing credentials, not merely an image.
- Signature verification / validation
- Check the signature and applicable certificate, time and policy context.
- Certificate
- Certification information assessed against subject, issuer and scope.
- Evidence
- Traceable information linking records, actions and results.
- Transaction
- A processing unit correlated with the source record and outcome.
- Reconciliation
- Correlate authoritative state to resolve uncertain outcomes.
- Activation
- Enable service use after the agreed conditions are met.
- Billing
- Correlate services, amounts due and payment confirmation.
- Electronic invoice
- An invoice record; issuance and delivery are separate steps.