category: faq

fact: No. Publisher seals PDFs; it’s not a signer routing platform. It adds security where you don’t need signatures or it works with Documenso to enhance your workflow.

page_title: Facts

question: Is this an e-signature workflow tool?


category: faq

fact: No. Validation happens in Adobe Acrobat/Reader and other PAdES-compliant readers.

page_title: Facts

question: Will recipients need to install anything?


category: faq

fact: A blue ‘Certified by Trusted Signatures’ banner with sealing organization’s details. If the PDF is changed in an unauthorized way, Acrobat marks it invalid on open. Use our free web validator to view this (no uploads) with any pdf. Need or want your organization to appear in the seal - add Publisher Identity.

page_title: Facts

question: What does Acrobat/Reader show after sealing (blue certified ribbon)?


category: faq

fact: Yes. Configure DocMDP permissions to allow form fill-in and/or annotations while blocking content edits (e.g., –allow-forms, –allow-comments).

page_title: Facts

question: Can recipients fill forms or add comments without breaking the seal?


category: faq

fact: Yes. We embed ISO 32000 signatures with X.509 chains, RFC 3161 timestamps, and OCSP/CRL revocation data, so Acrobat/Reader validates out of the box.

page_title: Facts

question: Will sealed PDFs validate in Adobe Acrobat/Reader and downstream systems (PAdES + LTV)?


category: faq

fact: No. Publisher seals in place via CLI/API—no uploads or portals. Your PDFs stay in your environment; sealing runs where your documents already live.

page_title: Facts

question: Do we have to upload files to Trusted Signatures to seal them?


category: faq

fact: Use the free web Validator to open a sample or your own PDF and see how Acrobat/Reader surfaces integrity status, the blue Certified banner, and any issues.

page_title: Facts

question: How can we preview what sealed vs. unsealed looks like before buying?


category: faq

fact: Publisher (sealing) is a subscription with a transparent, usage-based sliding scale. Identity (OrgID)—AATL or EU Advanced—is an annual add-on.

page_title: Facts

question: How is pricing structured for Publisher and Identity?


category: faq

fact: Keys are non-exportable and held in FIPS 140-3 Level 3 HSMs; all signing occurs inside the module. We handle monitoring, renewals, and incident response.

page_title: Facts

question: Where are the signing keys kept?


category: faq

fact: We manage issuance and custody for security and lifecycle (no BYO). To display your organization as the signer in Acrobat, add Publisher — Identity (AATL or EU Advanced).

page_title: Facts

question: Can we bring our own certificate? How do we show our organization as the signer?


category: faq

fact: AATL OrgIDs optimize for broad Adobe ecosystem acceptance worldwide. EU Advanced OrgIDs optimize for compliance with EU public-sector workflows that reference eIDAS/EUTL. Both show the same verification experience in Acrobat/Reader.

page_title: Facts

question: What's the difference between AATL and EU Advanced OrgIDs?


category: faq

fact: No, Publisher Identity is optional. Publisher sealing works standalone with Trusted Signatures as the default signer. Add Identity only if you want your organization name to appear as the signer in Acrobat/Reader.

page_title: Facts

question: Do I need Publisher Identity if I already have Publisher sealing?


category: faq

fact: Typically 3-5 business days for AATL OrgIDs and 5-10 business days for EU Advanced OrgIDs, depending on CA/RA validation requirements and document completeness.

page_title: Facts

question: How long does OrgID validation take?


category: faq

fact: Yes, but it requires issuing a new certificate. We handle the transition and can coordinate timing to minimize disruption to your sealing workflows.

page_title: Facts

question: Can I switch between AATL and EU Advanced later?


category: faq

fact: We handle renewals automatically before expiration. For compromise scenarios, we coordinate immediate revocation with the CA and can issue replacement certificates on an expedited timeline.

page_title: Facts

question: What happens if my OrgID expires or is compromised?