# Oktul SignPlus for Confluence > Sign a Confluence page with a qualified electronic signature through Dokobit, and see later whether the page still matches what was signed. > > Documentation for Oktul SignPlus for Confluence, for Confluence Cloud, by Oktul: https://oktul.com/docs/plugins/signplus/ Oktul SignPlus for Confluence signs a page where it is: 1. SignPlus renders the page to PDF inside Atlassian. 2. [Dokobit](https://www.dokobit.com) collects qualified electronic signatures. 3. The signed document is attached to the same page. Afterwards, the byline says whether the page still matches what was signed. SignPlus stores a SHA-256 of the page's space, id and version, and every edit moves the version. ## A qualified signature, through Dokobit Signers sign at [Dokobit](https://www.dokobit.com) with their own eID: Smart-ID, ID card, Mobile-ID or [another supported method](https://www.dokobit.com/eids). - **Equal to a handwritten signature.** An eID with a qualified certificate gives a qualified electronic signature (QES), which has that legal effect across the EU under Article 25(2) of [eIDAS](https://eur-lex.europa.eu/eli/reg/2014/910/oj). Dokobit's eID list says which methods give a QES and which an advanced signature (AdES). - **Dokobit is a qualified trust service provider**, supervised by Lithuania's [Communications Regulatory Authority](https://www.rrt.lt/) and on the [EU Trusted List](https://eidas.ec.europa.eu/efda/tl-browser/#/screen/tl/LT). See its [practice statement](https://www.dokobit.com/signature-validation-service-practice-statement-and-policy). - **Data stays in the EU/EEA**, per Dokobit: two locations, TLS in transit, AES-256 at rest, [ISO/IEC 27001](https://www.dokobit.com/docs/compliance/Dokobit-iso27001-certificate.pdf) and [27018](https://www.dokobit.com/docs/compliance/Dokobit-iso27018-certificate.pdf), audited yearly by DNV. See [Dokobit's compliance page](https://www.dokobit.com/compliance). - **The PIN never reaches SignPlus or Oktul.** It is entered on the signer's own device. The signed file carries each signing certificate, and an Estonian one includes the personal code, so anyone who opens the attachment can read it. - **Anyone can verify the result** with DigiDoc4, [Dokobit's validation](https://dokobit.support.signicat.com/hc/en-us/articles/19932798495004-How-to-validate-signed-documents) or any eIDAS tool. The file is an ASiC-E container or a signed PDF. Dokobit's trust status and data location are Dokobit's statements, not Oktul's commitments. ## What it does - **Signs from the page.** Pick colleagues by name, partners by email, or a whole group. - **Up to 25,000 signers.** It runs in the background, so closing the page does not stop it. - **Attaches the signed file** when the last person signs. - **Reports edits after signing** in the byline, the panel, the REST API and a webhook. - **Locks the page while it is out**: editing to SignPlus, viewing to participants, if you choose. - **Prints the page as Confluence shows it**, including Jira and Assets tables, in your company's font, logo, header and footer. - **Starts from outside Confluence**: Jira automation, a Confluence rule or the REST API. ## What it does not do - **It cannot sign for anyone.** Each signer uses their own eID. - **It cannot make a page unchangeable.** A space administrator can always remove a restriction. SignPlus guarantees a change is detected. - **It does not say what changed.** It links to Confluence's comparison of the two versions. - **Test mode is not signing.** New installations start there: watermarked, not binding. - **Real signing needs your own Dokobit account.** Oktul does not sell signing; your agreement with Dokobit sets volume and price. - **Cloud only.** No Data Center or Server version. ## Common questions **Is a SignPlus signature legally binding?** A signature made with an eID that carries a qualified certificate is a qualified electronic signature (QES). Under Article 25(2) of eIDAS it has the legal effect of a handwritten signature in every EU member state. A signing in **Test** mode has no legal effect. **Which eIDs can sign with SignPlus?** Smart-ID, Mobile-ID, an ID card and the other methods on Dokobit's list of supported eIDs. The signer uses their own eID on Dokobit's page. **What data leaves Atlassian when a page is signed?** Dokobit receives the PDF and each signer's name and email address. Nothing else leaves Atlassian, and no Oktul server is involved. See [privacy and data handling](./privacy/). **What happens when someone edits a signed page?** The byline says the page was modified after signing and links to Confluence's comparison of the signed and current versions. The REST API and an optional webhook report it too. **Do I need my own Dokobit account?** For real signing, yes. A new installation starts in Dokobit's test environment, which Oktul provides, where documents come back watermarked. **Does SignPlus work on Confluence Data Center?** No. SignPlus runs on Atlassian Forge, in Confluence Cloud only. ## Where to start | If you are | Start with | |---|---| | The administrator installing it | [Install the app](./install/), then [configure SignPlus](./configure/) | | Sending a page for signing | [Sign a page](./sign-a-page/) | | Asked to sign | [What a signer sees](./for-signers/) | | Checking a signed page | [After signing](./after-signing/) | | Making the document look like your company's | [Style the exported document](./export-styling/) | | Building a flow or an integration | [Automation and webhooks](./automation/) and the [REST API](./rest-api/) | | Reviewing it for security or procurement | [Privacy and data handling](./privacy/) | --- A problem or a question? Write to [support@oktul.com](mailto:support@oktul.com) or open a request in the [Help Center](https://oktul.atlassian.net/servicedesk/customer/portals). Both open a request with a reference and an SLA.