Digitrustec · Enterprise Digital Trust

Every signature.
Every provider.
One platform.

The Digital Signing Platform (DSP) delivers legally binding digital signatures, corporate digital identity, and strong authentication — natively integrated with the national trust ecosystems of Saudi Arabia, Kuwait, and Oman, and with the CAs, HSMs, and authenticators your customers already own.

Explore the platform Signing ecosystem
7Signing providers
5Certificate authorities
6HSM & cloud-key targets
5Strong authenticators
4Signature standards
4Database engines
On this page

Twelve minutes, five parts, everything DSP does

Part I

The product

Part II

How it signs

Part III

The trust foundation

Part IV

Market reach

Part V

Run it your way

Part I

The product

What DSP does, what it signs, and what your people actually open every day.

Platform capabilities

Everything a signing operation needs — in one product family

Each capability ships as part of DSP. Click any card for the full story: what it does, how it works for the customer, and why it wins deals.

What you sign

Not just PDF — the whole Office suite, and your data too

DSP's signing engine covers every major document and data format, each with the right international signature standard. The business application sends a file; the platform picks the standard.

Product portals

Four finished applications, live on day one

DSP is not a toolkit that needs a front end built around it. The platform ships with complete web applications for the signer, the administrator, the business user, and the auditor — and together with the Corporate Mobile ID app they all carry your logo, colours, and visual identity, set from the Admin Portal. Click any portal to see what it actually does.

Part II

How it signs

Every route to a signature — national schemes, the platform’s own remote signing, hardware on the desk, and organization seals.

Signing providers

One API in front of every signing authority

DSP's provider model routes each signature to the right authority — a national scheme, a commercial trust service, or the platform's own remote signing. Click a node or card for details.

Local signing — the Client Trust Agent

One agent. Three ways to sign.

The Client Trust Agent (CTA) connects web and desktop applications to whatever the signer holds: a USB eToken, a smart card — including the Kuwait Civil ID and Oman ID national cards — or nothing at all: in-app signing through Windows cryptography (CNG), with the key held in a remote HSM and every operation approved by the user.

eSealing & eStamping

The organization's own seal, applied automatically

Documents issued by systems — statements, certificates, official letters — carry the entity's electronic seal with no human signer in the loop.

Part III

The trust foundation

Who issues the certificates, who proves the signer is real, and where the private keys live.

Certificate authorities

Bring the CA you already trust

DSP's registration authority routes certificate issuance to the right authority per user and policy: commercial CAs, the enterprise PKI, trust platforms, or national schemes.

Strong authentication

The MFA your customer already trusts, bound to every signature

DSP's secure authentication service raises push, QR, and OTP challenges through pluggable providers — enterprise MFA and national identity schemes alike.

Key management & HSMs

Keys that never leave the hardware

Digitrustec's KMS generates and uses signing keys inside hardware security modules and cloud key services — six targets today, and any PKCS#11-compliant HSM tomorrow.

Part IV

Market reach

The countries DSP is native to, and the authorities that make a signature legal there.

Regional reach

Native to the Gulf's trust ecosystems

DSP speaks each market's signing language — the national apps, the accredited providers, the legal framework — while the platform stays the same.

SAUDI ARABIA

Kingdom of Saudi Arabia

Saudi ArabiaSiraremdhaNafath
  • Sirar & Sirar Bulk qualified signing (by stc)
  • emdha accredited eSign service
  • Nafath national authentication
  • Sirar eSeal & Ibram (NIC) government eStamping
KUWAIT

State of Kuwait

KuwaitKuwait Mobile IDPACI
  • Kuwait Mobile ID signing via PACI
  • Signer approval in the Hawiyati · هويتي app
  • Kuwait Mobile ID strong authentication
  • Kuwait Civil ID card signing via the CTA
OMAN

Sultanate of Oman

OmanTheqaMTCIT
  • Theqa (ثقة) app mobile-ID signing
  • Oman National PKI integration
  • Oman Mobile ID strong authentication
  • Oman ID card signing via the CTA

And everywhere else. Outside national schemes, DSP runs on your enterprise CA — Microsoft ADCS, DigiCert ONE, Keyfactor, or Ascertia ADSS — with Corporate Mobile ID providing signer identity and approval. New providers join through the same plug-in model, so a new market is an integration, never a rewrite.

Authorized trust services

Integrated with the authorities that make a signature legal

A digital signature carries weight because a recognized authority stands behind it. DSP connects directly to the accredited providers and national bodies of each market — click any entity for its role in the platform.

Part V

Run it your way

How the platform connects to the systems you already run, and where it can be deployed.

Built to connect

Integration measured in days, not months

Customers rarely want another portal — they want signing inside the systems they already run. DSP is built around that.

Connect your business systems

  • REST APIs for every operation — initiate, track, download, verify — behind a single integration gateway for line-of-business applications.
  • Hosted signing sessions — redirect a user from your application; DSP runs the whole signing ceremony and returns them signed.
  • Callbacks that notify your systems the moment a document is signed, rejected, or expired.
  • Ready portals and mobile apps for everything you don't want to build — onboarding, administration, signing history.
ERPHRCRM DMS / ECMBankingGovernment portals

Fit your security estate

  • API keys & mutual TLS between your systems and the platform.
  • Your directory — onboard signers from Active Directory, Azure AD / Entra, or local user stores.
  • Your MFA — Cisco Duo, Corporate Mobile ID, Nafath, or a national mobile ID, per policy and user group.
  • Your SIEM — structured, correlated logs and a signed audit trail feed existing monitoring.
Active Directory Entra ID Cisco Duo mTLS
Run it your way

Deploy on whatever the customer already owns

The same platform runs on a Windows server farm, a Linux estate, or a container cluster — on-premises, in a private cloud, or hosted. Seven documented deployment models cover everything from a lean single-provider install to the full platform with corporate identity.

Operating environments

  • Windows Server with IIS — the classic enterprise install, fully scripted deployment.
  • Linux — cost-efficient, cloud-native estates.
  • Docker & containers — the full stack ships as container images with compose definitions for repeatable rollouts.
  • On-prem, private cloud, or hosted — the platform runs wherever the customer's policy requires, including fully isolated private environments.
Windows / IIS Linux Docker

Database freedom

  • Microsoft SQL Server — the Microsoft-standard data center.
  • PostgreSQL — open-source and cloud-managed estates.
  • MariaDB / MySQL — where the MySQL family is the house standard.
  • SQLite — lightweight, single-box, and edge installations.
SQL Server PostgreSQL MariaDB SQLite