Protect

After signing in DocuSign: proving the signed PDF was not altered

A signature records agreement. After the PDF leaves the envelope, the question changes: is this still the signed file? DocuSign can keep a certificate of completion and an audit trail, and the finished PDF can show a later edit. Opcilo adds a separate check anyone can do with no login: the file in their hands matches the sealed bytes.

Updated October 2, 2026 · 5 min read

What DocuSign already records

DocuSign answers who agreed. A completed envelope includes a certificate of completion and an audit trail of the signing events: who was asked, what they did, and when. The finished PDF can carry a digital signature so a reader that checks signatures can see a later edit. That is real tamper-evident and audit-trail output for the envelope and for that PDF.

The gap appears after the file travels. A later email can attach a different PDF under the same name. A reader who was not a party to the envelope may have the file and not the DocuSign account. They can still need a check that does not depend on logging in.

Seal the completed PDF

Sign first, then seal the completed PDF in Opcilo. The seal is a fingerprint of those exact bytes plus a verification link. Anyone who opens the link sees who sealed it. They can check the PDF they are holding. A match means this is the sealed file. A mismatch means it is not the sealed file — including a copy that kept the signed filename.

After the envelope closes
  1. 1

    Parties sign in DocuSign

    The envelope records agreement, with a certificate and an audit trail.

  2. 2

    Seal the completed PDF

    Safe path

    Opcilo fingerprints the signed file you are about to send on.

  3. 3

    The PDF travels

    Risk point

    Email or a shared drive can swap the attachment and keep the name.

  4. 4

    Anyone checks the file in hand

    Safe path

    No login. Match means those bytes were sealed. Mismatch means they were not.

DocuSign keeps the agreement record. The seal checks the file that left.

Use both records. They answer different questions.

TopicOpciloOther
QuestionIs this file the sealed one, and who sealed it?Who agreed, and what happened in the DocuSign envelope?
Where the record livesA public verification link for the sealed bytesThe envelope, the certificate of completion, and the audit trail
Who can checkAnyone with the link, with no accountPeople with access to the envelope or a reader that checks the PDF signature

When the check matters

  • A counterparty forwards the signed PDF to someone who was not in the envelope.
  • A finance or legal reviewer receives “the signed contract” months later and needs the same bytes.
  • An email thread accumulates lookalike attachments, and only one of them is the completed file.

The same distinction — signature tools and an independent file check — is the short version in what document sealing is, and the longer one in these tools answer different questions.

Frequently asked questions

Does Opcilo replace DocuSign?

No. DocuSign records who agreed. Opcilo checks that the file in hand is the one that was sealed. Sign the document, then seal the completed PDF if later readers need that check.

Can DocuSign already show that a signed PDF changed?

Yes. A completed envelope includes a certificate of completion and an audit trail, and the finished PDF can carry a digital signature that a reader can check. Opcilo’s difference is an independent check of the file in hand, with no login.

Do later readers need a DocuSign account or an Opcilo account?

The Opcilo verification link needs no account. Readers who only have the loose PDF can check it against the seal without joining the original envelope.

Ready to send documents no one can question?

Start free with 5 seals per month. Seal your first document and share a verification link today.