Field Manifest

The Field Manifest defines additional fields that appear in the signing portal alongside the primary signature. It is derived automatically from the PDF template's signature block definitions and is embedded in the signing session at creation time. All field values are stored in your Azure subscription with immutable audit records.

Field Types

Manifest Structure

{
  "version": "1.0",
  "signingMode": "sequential",
  "slots": [
    {
      "slotIndex": 0,
      "role": "vendor",
      "completionCondition": "required",
      "ttlMinutes": 4320,
      "otp": {
        "channel": "email",
        "required": true
      },
      "consent": {
        "reviewText": "I confirm I have read and understood this document.",
        "bindingText": "I acknowledge this electronic signature is legally binding."
      },
      "fields": [
        {
          "fieldId": "vendor-sig",
          "fieldType": "sign",
          "role": "vendor",
          "anchor": "sig-vendor-main",
          "label": "Vendor Signature",
          "required": true
        },
        {
          "fieldId": "vendor-initials",
          "fieldType": "initials",
          "role": "vendor",
          "anchor": "sig-vendor-initials",
          "label": "Initials",
          "required": false
        },
        {
          "fieldId": "vendor-date",
          "fieldType": "date",
          "role": "vendor",
          "anchor": "sig-vendor-date",
          "label": "Date Signed",
          "required": true
        },
        {
          "fieldId": "vendor-title",
          "fieldType": "text",
          "role": "vendor",
          "anchor": "sig-vendor-title",
          "label": "Title / Position",
          "required": false,
          "length": 100
        }
      ]
    }
  ]
}

Slot Properties

Field Properties

Stored Field Values

After signing, all field values are stored in ESignSlotEntity.fieldsJson as a key-value record in your Azure Table Storage:

{
  "vendor-sig":      "<base64-png>",
  "vendor-initials": "<base64-png>",
  "vendor-date":     "2026-05-29",
  "vendor-title":    "Director of Operations",
  "vendor-terms":    true
}

Storage Details:

• Primary signature PNG: Also stored directly in ESignSlotEntity.signaturePngBase64 for evidence certificate generation
• Initials PNG: Stored as base64-encoded PNG (same as signature)
• Date fields: Stored in ISO 8601 format (YYYY-MM-DD)
• Text fields: Stored as UTF-8 plaintext (up to length limit)
• Checkbox fields: Stored as boolean (true/false)
• Audit trail: All field values linked to evidence certificate via correlationId and groupId
• Encryption: All values at rest in Table Storage are encrypted with AES-256-GCM
• Data residency: All field data remains in your Azure subscription, in your chosen region

Field Value Examples

Signature Field (sign)

{
  "fieldId": "vendor-sig",
  "fieldType": "sign",
  "label": "Vendor Signature"
}

Stored as:

{
  "vendor-sig": "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNkYPhfDwAChwGA60e6kgAAAABJRU5ErkJggg=="
}

(Base64-encoded PNG, captured in portal, sealed in evidence certificate)

Initials Field (initials)

{
  "fieldId": "vendor-initials",
  "fieldType": "initials",
  "label": "Initials",
  "required": false
}

Stored as:

{
  "vendor-initials": "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNkYPhfDwAChwGA60e6kgAAAABJRU5ErkJggg=="
}

Date Field (date)

{
  "fieldId": "vendor-date",
  "fieldType": "date",
  "label": "Date Signed",
  "required": true
}

Stored as:

{
  "vendor-date": "2026-05-29"
}

(ISO 8601 format, captured from signer's selection in portal)

Text Field (text)

{
  "fieldId": "vendor-title",
  "fieldType": "text",
  "label": "Title / Position",
  "required": false,
  "length": 100
}

Stored as:

{
  "vendor-title": "Director of Operations"
}

(UTF-8 plaintext, up to 100 characters)

Checkbox Field (check)

{
  "fieldId": "vendor-terms",
  "fieldType": "check",
  "label": "I agree to the terms and conditions",
  "required": true
}

Stored as:

{
  "vendor-terms": true
}

(Boolean: true if checked, false if unchecked)

Compliance & Storage Security

Data Security

All field values are protected in transit and at rest:

In Transit:

• HTTPS/TLS 1.3 (AES-256) from portal to your Processor
• Encrypted payload in signing submission

At Rest:

• Stored in your Azure Table Storage (your subscription, your region)
• AES-256-GCM encryption applied
• Immutable audit records linked to evidence certificate
• Never transmitted outside your subscription

Audit & Evidence

Field values are incorporated into the evidence certificate:

• All field IDs and values: Captured in fieldsJson within evidence
• Timestamps: Field value submission time recorded per field
• Signer identity: Linked via evidence certificate
• Document hash: Proves document was not modified post-signing
• Consent text: Frozen at signing time, immutable proof of consent

HIPAA & GDPR Compliance

HIPAA (ePHI Protection):

• All field values remain in your Azure subscription
• No field data transmitted to Vault Shared Services
• Encrypted at rest, audit trail in your control
• Compliant without additional BAA

GDPR (Personal Data Protection):

• If text fields contain personal data (e.g., signer name, title), stored in your region
• Field values never processed by Vault Shared Services
• Complete data residency guaranteed
• Signer can request export/deletion from your records