CERTIFIED ELECTRONIC SIGNATURES FOR HEALTHCARE
Electronic Signatures for Hospitals: Legally Valid, Integrated with Your HIS
Digitize informed consent, electronic medical records, and e-prescriptions with certified electronic signatures issued by a government-recognized Certification Authority (PSrE). Every document carries legal force under Indonesia's Electronic Information and Transactions Law (UU ITE) and Government Regulation 71/2019—without disrupting the clinical workflows already running in your hospital information system.
Electronic signatures for hospitals are no longer merely an efficiency play; they are the foundation of document validity in the era of electronic medical records. Since Ministry of Health Regulation No. 24 of 2022 required all healthcare facilities in Indonesia to maintain medical records electronically, every consent form, progress note, and prescription produced by your systems must be accountable: who signed it, when, and whether the document changed afterward.
This is where many hospitals face a gap. Electronic documents bearing only a scanned signature image, or a simple approval click in an internal application, are difficult to authenticate if a medicolegal dispute arises. Article 11 of UU ITE recognizes that electronic signatures carry legal force, but Government Regulation 71/2019 distinguishes certified electronic signatures—created using an electronic certificate from a certified CA—from uncertified ones, and that distinction determines their evidentiary strength.
The certified electronic signature solution from DTI with Tilaka, a government-recognized certified CA, lets hospitals sign informed consent forms, discharge summaries, diagnostic results, and electronic prescriptions in a legally valid, cryptographically sealed, and fully audit-trailed way—directly from within your hospital information system via API integration. The identities of physicians and health workers are verified against national civil registry data before certificates are issued, so every signature is bound to a clearly identified individual.
Why Wet-Ink and Scanned Signatures Are the Weak Point of Your EMR
Clinical document validity is easily challenged
A signature image pasted into a PDF, or an approval click without an electronic certificate, makes it hard to prove signer identity and document integrity in a medicolegal dispute.
Hybrid paper-digital workflows slow down care
Printing documents for signing and scanning them back into the EMR adds patient waiting time, paper costs, and the risk of documents being lost or mixed up.
Remote informed consent is impractical
Telemedicine and consent from family members in other cities stall because approvals still demand physical presence for a wet-ink signature.
Audit trails fall short for accreditation and audits
Without timestamps and cryptographic seals, hospitals struggle to demonstrate when a document was signed and whether its contents changed—issues frequently raised during accreditation and internal audits.
Certified E-Signatures Designed for Hospital Workflows
Legally valid digital informed consent
Patients or their families sign treatment consent electronically with a certificate from a certified CA, so documents meet the electronic signature requirements of UU ITE and Government Regulation 71/2019.
Signing for electronic medical records
Physicians authorize medical resumes, operative notes, and diagnostic results directly from the hospital information system; documents are cryptographically sealed so any post-signing change is detectable.
Verifiable electronic prescriptions
Prescriptions are electronically signed by the physician and can be verified for authenticity and signer identity by the pharmacy, reducing the risk of forged or illegible prescriptions.
API integration with your HIS and internal apps
REST APIs and SDKs embed signing into the screens clinicians already use, with no application switching and no changes to clinical workflows.
Identity verification and complete audit trails
Signer identity is verified against national civil registry data at certificate issuance, and every signing event is recorded with a timestamp for audit, accreditation, and legal evidentiary needs.
This solution is trusted by institutions across Indonesia's regulated sectors, including healthcare and financial services, with electronic certificates issued by a government-recognized certified CA.
How It Works: From Registration to a Sealed Document
Registration and identity verification
Physicians, health workers, or hospital officials register once through electronic identity verification (e-KYC) against national civil registry data, after which the certified CA issues an electronic certificate in that individual's name.
Integration with your hospital information system
The DTI team helps integrate the signing API into your HIS or EMR application—covering informed consent, medical resumes, and e-prescription modules—with sandbox testing before production.
Signing within the workflow
When a document is ready, the signer authorizes the signature from their own device; the system applies the certified electronic signature with a trusted timestamp, without the document ever leaving the hospital's environment.
Verification and storage
Signed documents can be verified at any time—signer identity, signing time, and content integrity—then stored in the EMR as electronic records that stand up to scrutiny.
Frequently Asked Questions
Is electronically signed informed consent legally valid in Indonesia?
Yes. Article 11 of UU ITE recognizes that electronic signatures have legal force and effect provided certain requirements are met, including that the signature creation data is linked to and controlled solely by the signer, and that any post-signing alteration is detectable. Certified electronic signatures from a certified CA are designed to meet these requirements, giving them stronger evidentiary standing.
How does a certified electronic signature differ from an ordinary signature image?
Government Regulation 71/2019 distinguishes certified electronic signatures—created using an electronic certificate from an Indonesian certified CA—from uncertified ones. A scanned signature image proves neither the signer's identity nor the document's integrity, whereas a certified signature is cryptographically bound to a verified identity and to the document's contents.
Does Ministry of Health Regulation 24/2022 require hospitals to use electronic signatures?
Regulation 24/2022 requires healthcare facilities to maintain electronic medical records, including safeguarding their security and integrity. It does not mandate one specific signing method, but certified electronic signatures are a reliable way to ensure EMR documents are legally accountable.
How does integration work with the hospital information system we already use?
Integration is done through REST APIs and SDKs, so signing is embedded directly in your existing HIS modules—informed consent, medical resumes, or e-prescriptions. The DTI team supports you from workflow design and sandbox testing through go-live, with no need to replace your HIS.
How is patient data protected during the signing process?
Clinical documents do not need to leave your hospital's systems; signing can operate on the document's hash value. Personal data handling in the service follows the principles of the Personal Data Protection Law 27/2022, with identity verification and certificate issuance performed by a certified CA under government supervision.
How do physicians and health workers obtain their electronic certificates?
Registration is completed once, online, through electronic identity verification (e-KYC) that matches data against the national civil registry, including facial biometric verification. Once verified, an electronic certificate is issued in the individual's name and can immediately be used to sign from a computer or mobile device.
CERTIFIED ELECTRONIC SIGNATURES FOR HEALTHCARE
Digitize Your Clinical Documents with Full Legal Validity
Talk to our team about your hospital's informed consent, EMR, and e-prescription workflows. We will help map your HIS integration, compliance requirements, and a no-commitment trial in a sandbox environment.
