Electronic signatures in Ecuador
How electronic signatures work in Ecuador, the LCE legal framework, the 7 ECIs accredited by ARCOTEL, validity with the SRI/bank/notary, use cases, and where to sign for free.
In Ecuador, electronically signing a document carries the same legal validity as a handwritten signature, provided it is done with a digital certificate issued by a Certification Information Entity (ECI — Entidad de Certificación de Información) accredited by ARCOTEL (Agencia de Regulación y Control de las Telecomunicaciones). This guide summarises the legal framework, authorised entities, valid formats, and where you can sign for free without installing Java.
Legal framework: the LCE
The Ecuadorian E-Commerce, Electronic Signatures and Data Messages Law (LCE 2002-67) (published in Official Register No. 557, 17 April 2002) recognises that an electronically signed document has the same legal validity as a handwritten one (Art. 14), provided four conditions are met:
- The signature is linked exclusively to the signer.
- It identifies the signer.
- It was created using means under the signer’s exclusive control.
- Any subsequent alteration of the document is detectable.
These four requirements define an advanced electronic signature (FEA — firma electrónica avanzada). Signatures made with a certificate issued by an ARCOTEL-accredited Ecuadorian ECI are FEA by construction.
The LCE’s implementing regulation is Executive Decree 3496, which details ECI operations and ARCOTEL oversight.
Who can issue certificates? The 7 accredited ECIs
As of 2026, ARCOTEL maintains accreditation for the following Certification Information Entities:
| ECI | Type | Notes |
|---|---|---|
| Banco Central del Ecuador (BCE) | Public | Certificates for natural and legal persons, including RUC holders. Optional hardware token. |
| Security Data Seguridad en Datos y Firma Digital S.A. | Private | One of the most widely used in SRI, banking, and the private sector. |
| ANFAC (ANF AC Ecuador) | Private | Ecuadorian subsidiary of ANF Autoridad de Certificación. |
| Uanataca Ecuador | Private | Regional operation with international backing. |
| Lazzate | Private | Relatively recent accreditation. |
| Eclipse Soft (Soluciones Eclipse) | Private | Corporate focus. |
| Datil Media | Private | Known for integration with accounting systems and the SRI. |
Before obtaining a certificate, verify that the ECI is currently active in the ARCOTEL public registry.
What is an electronic signature used for?
- SRI (Servicio de Rentas Internas — Ecuadorian Tax Authority): tax filings, withholding certificates, electronic receipts (SRI invoicing XML files carry XAdES signatures).
- Banking: account opening, loan contracts, FATCA forms.
- Public sector: municipal, ministerial, INCOP (public procurement), and IESS (social security) procedures.
- Business: contracts, NDAs, labour addenda, minutes, audited financial statements.
- Personal: electronic notarial powers of attorney (in certain jurisdictions), sworn declarations, authorisations.
Valid formats
An electronic signature is not a single format; it depends on the document type:
- PAdES (
.pdf): the most common format for administrative documents, contracts, letters, PDF invoices. This is what firmar.ec produces. - XAdES (
.xml): mandatory for SRI electronic receipts (invoice, withholding certificate, credit note, settlement). - CAdES (
.p7sdetached): a detached signature accompanying the original file; common for B2B integrations.
Where can you sign for free?
- firmar.ec (this site) — web PWA, free, open-source, 100% in your browser. Perfect for PDFs (PAdES). No Java installation needed; works on mobile.
- FirmaEC by MINTEL — official desktop app, also free. Requires Java + token driver. Covers PAdES, XAdES and CAdES.
Any service that charges for signing a PDF is charging for convenience, not for legal validity: validity comes from your certificate, not from the software that uses it.
Validity with the SRI
The SRI validates XML files signed with XAdES-BES according to its own policy. firmar.ec does not produce XAdES in v1 (only PAdES); for electronic invoicing, use your accounting system or FirmaEC. However, administrative PDFs (RUC certificates, declarations, authorisations that the SRI requires in PDF format) signed with firmar.ec are fully valid.
Security recommendations
- Never share your
.p12file. It is the digital equivalent of your signature and national ID combined. - Use a strong password for your certificate (minimum 12 characters, mixing letters + numbers + symbols).
- Keep your certificate current. ECIs notify before expiry, but renewal involves a fee.
- If you are going to sign with your certificate on a website, verify it is purely client-side — the key should never leave your browser. firmar.ec is; many alternatives are not.
Frequently asked questions
Quick summary (full version at /en/faq):
- Does a firmar.ec signature have the same validity as FirmaEC desktop? Yes. Both produce PAdES B-B with your certificate.
- Does it work offline? For verification, yes (offline). For signing, being online is recommended to validate the CA chain.
- Can I lose my certificate? If you lose the
.p12file and the password, you must request a new one from your ECI; it is not recoverable.