What an audit trail proves, and why it matters when a signature is questioned

Every signed DocuBunny document comes with a record of who signed, when, from where, and exactly which version. Here is what that evidence shows, how email verification strengthens it, and what it cannot prove.

By The DocuBunny Team · E-signatures

Most of the time, nobody questions a signed contract. The audit trail sits quietly in the background and nobody opens it. But on the rare occasion that someone says “I never signed that” or “that is not the version I agreed to”, it becomes the most important page in the file.

What an audit trail records

For every document signed in DocuBunny, the trail captures:

  • Who was asked to sign, and the email address the request went to.
  • When the document was sent, opened and signed, with timestamps.
  • Where from, meaning the IP address the signer used.
  • What, meaning a document hash, a kind of digital fingerprint of the exact file that was signed.
  • Verification, if you required it: whether the signer confirmed a one-time code sent to their email before signing.

You can also be notified the moment a recipient opens your document, not just when they sign, which means the story starts long before the final signature.

What it can prove

That a specific person was given the chance to read it. The record shows the signing link was sent to a particular address and opened at a particular time.

That the signer intended to sign. The signer took deliberate steps: opening the document, reviewing it, and completing the signing action.

That the document did not change afterwards. The document hash works like a seal. If even one character of the file changed after signing, its fingerprint would no longer match, which makes tampering visible.

The sequence of events. For multi-signer contracts, the trail shows who signed in what order, which can matter when roles or authority are in question.

How email verification strengthens it

Anyone with a link can open a link. For sensitive documents, you can require signers to enter a one-time code sent to their email address before they sign. That adds a second proof: not only was the link sent to this address, but the person signing could read mail at this address at that moment.

It is a small step for the signer and a significant addition to the evidence, particularly for contracts involving money, employment or confidential information.

What it cannot prove

It is important to be realistic about the limits.

  • It does not prove who was physically holding the keyboard. It shows that the person controlling that email address, at that IP address, completed the signing. For most agreements that is perfectly adequate. For very high-value or high-risk documents, you may want stronger identity checks or a qualified electronic signature, which DocuBunny does not currently provide.
  • It does not prove the contract is enforceable. An audit trail shows that something was signed, not that every term is lawful or fair. See what makes a contract enforceable.
  • It is evidence, not a verdict. A court or arbitrator decides what weight to give it.

Why this beats paper

A wet-ink signature on its own shows very little: someone has to later argue that the squiggle is genuine, that it was made on this version, and that the pages were not swapped. A well-kept electronic trail answers many of those questions without argument. We compare the two in e-signatures vs. wet ink.

Habits that make the trail useful

  1. Send to the right address. The trail is only as good as the email it points to. Check it before you send.
  2. Turn on email verification for sensitive contracts.
  3. Download and keep the signed document together with its audit trail.
  4. Do not edit after sending. Make changes in a new version and send that for signature.
  5. Act on the “opened” notification. If a signer opened it but has not signed, a quick message often resolves a question that would otherwise stall the deal.

In summary

The audit trail turns a signature from a claim into evidence. Most of the time you will never need it, and that is precisely the point: it is there for the day you do.

This article is general information, not legal advice. The weight given to electronic evidence depends on your jurisdiction.