Topic starter
10/07/2026 9:17 pm
TL;DR: Spain’s RD 88/2026 shifts digital contracting from convenience to evidential proof, requiring organisations to verify identity, capture exact acceptance, timestamp the agreement, and preserve audit-ready records, according to Vintegris. The governance challenge is no longer whether a contract is signed digitally, but whether the process can withstand legal challenge, audit, and dispute review.
Editorial analysis by NHI Mgmt Group, based on content published by Vintegris: “RD 88/2026: La nueva obligación en contratación digital”.
Key questions
Q: What fails when digital contracting relies on OTP and generic click-through consent?
A: The failure is evidential, not just technical.
Q: When should organisations move from basic verification to qualified identity and signature controls?
A: They should move when a contract has meaningful legal, financial, or regulatory consequence and must survive challenge.
Q: What signs show that a digital contract process is not audit ready?
A: Common signs include inconsistent identity evidence, unclear acceptance wording, missing timestamps, fragmented record storage, and no documented chain of custody.
Practitioner guidance
- Map each contracting flow to its evidential risk level Classify contracts by dispute sensitivity, regulatory exposure, and required proof strength, then assign identity and evidence controls accordingly.
- Replace convenience-only verification on high-risk flows Use stronger identity proofing and certificate-backed signing where the organisation must defend the transaction in audit or court.
- Define custody for contract evidence end to end Document where acceptance records, timestamps, identity proof, and signature evidence are stored, who can access them, and how integrity is preserved.
Bottom line: RD 88/2026 raises the bar from digital completion to legal defensibility, which makes evidence quality part of the control design.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
10/07/2026 9:39 pm
RD 88/2026 turns digital contracting into an identity assurance problem, not just a workflow problem. The article makes clear that organisations now have to prove who signed, what was accepted, and when the acceptance occurred. That pushes contracting governance closer to identity verification and evidence integrity than to simple e-signature convenience. Practitioners should treat the signing journey as a controlled identity event, not a UI step.
A question worth separating out:
Q: Who should own evidence custody for digitally signed contracts?
A: Ownership should sit across identity, legal, compliance, and operations, with clear accountability for the evidence lifecycle. The signing tool alone should not define custody. Organisations need a governance model that covers identity assurance, storage integrity, retention rules, and access to evidence when a challenge or audit occurs.
👉 Read our full editorial: RD 88/2026 makes digital contracting auditable by design