answer: No. Publisher seals PDFs; it’s not a signer routing platform. It adds security where you don’t need signatures or it works with Documenso to enhance your workflow.

category: faq

page_title: FAQ Data

question: Is this an e-signature workflow tool?


answer: No. Validation happens in Adobe Acrobat/Reader and other PAdES-compliant readers.

category: faq

page_title: FAQ Data

question: Will recipients need to install anything?


answer: A blue ‘Certified by Trusted Signatures’ banner with sealing organization’s details. If the PDF is changed in an unauthorized way, Acrobat marks it invalid on open. Use our free web validator to view this (no uploads) with any pdf. Need or want your organization to appear in the seal - add Publisher Identity.

category: faq

page_title: FAQ Data

question: What does Acrobat/Reader show after sealing (blue certified ribbon)?


answer: Yes. Configure DocMDP permissions to allow form fill-in and/or annotations while blocking content edits (e.g., –allow-forms, –allow-comments).

category: faq

page_title: FAQ Data

question: Can recipients fill forms or add comments without breaking the seal?


answer: Yes. We embed ISO 32000 signatures with X.509 chains, RFC 3161 timestamps, and OCSP/CRL revocation data, so Acrobat/Reader validates out of the box.

category: faq

page_title: FAQ Data

question: Will sealed PDFs validate in Adobe Acrobat/Reader and downstream systems (PAdES + LTV)?


answer: No. Publisher seals in place via CLI/API—no uploads or portals. Your PDFs stay in your environment; sealing runs where your documents already live.

category: faq

page_title: FAQ Data

question: Do we have to upload files to Trusted Signatures to seal them?


answer: Use the free web Validator to open a sample or your own PDF and see how Acrobat/Reader surfaces integrity status, the blue Certified banner, and any issues.

category: faq

page_title: FAQ Data

question: How can we preview what sealed vs. unsealed looks like before buying?


answer: Publisher (sealing) is a subscription with a transparent, usage-based sliding scale. Identity (OrgID)—AATL or EU Advanced—is an annual add-on.

category: faq

page_title: FAQ Data

question: How is pricing structured for Publisher and Identity?


answer: Keys are non-exportable and held in FIPS 140-3 Level 3 HSMs; all signing occurs inside the module. We handle monitoring, renewals, and incident response.

category: faq

page_title: FAQ Data

question: Where are the signing keys kept?


answer: We manage issuance and custody for security and lifecycle (no BYO). To display your organization as the signer in Acrobat, add Publisher — Identity (AATL or EU Advanced).

category: faq

page_title: FAQ Data

question: Can we bring our own certificate? How do we show our organization as the signer?


answer: AATL OrgIDs optimize for broad Adobe ecosystem acceptance worldwide. EU Advanced OrgIDs optimize for compliance with EU public-sector workflows that reference eIDAS/EUTL. Both show the same verification experience in Acrobat/Reader.

category: faq

page_title: FAQ Data

question: What's the difference between AATL and EU Advanced OrgIDs?


answer: No, Publisher Identity is optional. Publisher sealing works standalone with Trusted Signatures as the default signer. Add Identity only if you want your organization name to appear as the signer in Acrobat/Reader.

category: faq

page_title: FAQ Data

question: Do I need Publisher Identity if I already have Publisher sealing?


answer: Typically 3-5 business days for AATL OrgIDs and 5-10 business days for EU Advanced OrgIDs, depending on CA/RA validation requirements and document completeness.

category: faq

page_title: FAQ Data

question: How long does OrgID validation take?


answer: Yes, but it requires issuing a new certificate. We handle the transition and can coordinate timing to minimize disruption to your sealing workflows.

category: faq

page_title: FAQ Data

question: Can I switch between AATL and EU Advanced later?


answer: We handle renewals automatically before expiration. For compromise scenarios, we coordinate immediate revocation with the CA and can issue replacement certificates on an expedited timeline.

category: faq

page_title: FAQ Data

question: What happens if my OrgID expires or is compromised?