Yes, in many situations. The ICT Act 2006 recognises electronic records and gives digital signatures created through the licensed certification framework clear legal standing. Contracts can also be formed electronically, for example through online acceptance, provided the usual elements of agreement are present. The practical question is how strong the evidence will be if the other party denies signing. A certificate-based digital signature from a licensed certifying authority offers more certainty than a typed name or scanned image. We help clients match each electronic signature method to the value and risk of the transaction and the likelihood of a challenge.

Some categories still require traditional formalities. Documents that must be registered, such as many deeds relating to land, need execution and registration through the sub-registry process. Instruments that require stamping, certain powers of attorney and filings with particular authorities may also have specific requirements, and some statutes carry their own form rules. Practice can differ between offices. We review each document type against the relevant legislation and current practice, and recommend whether to sign electronically, on paper, or using a hybrid approach where electronic execution is followed by physical formalities. Checking early avoids rejected filings.

An electronic signature is any electronic means of showing assent, such as a typed name, clicked button, one-time password or drawn signature. A digital signature, in the sense used in the ICT Act 2006, relies on cryptographic certificates issued by a licensed certifying authority, linking the signature to the signer and detecting later changes to the document. The two can be combined at different stages of one process. Digital signatures offer stronger evidence and statutory recognition, while simpler methods are often adequate for routine, low-value transactions where the evidence trail is otherwise good. Risk should drive the choice.

In many cases, yes. Bangladesh Bank and the BFIU have issued guidance allowing electronic know-your-customer processes for banks and mobile financial services providers, often using NID verification and risk-based customer tiers. Requirements differ by product, customer category and risk, and higher-risk customers may need additional checks. Institutions must also meet record-keeping and data protection obligations. We review onboarding journeys against current guidance, help draft internal policies and vendor contracts, and advise on how electronic signature and consent steps should be captured within the flow. Our electronic signature advice covers loan applications and account terms too.

Not automatically. Recognition depends on the law of the country where the document is relied on, the type of signature and the purpose. Some countries accept a wide range of electronic signature methods for commercial contracts but require qualified certificates or notarisation for certain filings. Foreign authorities may not recognise certificates issued by Bangladeshi certifying authorities without additional steps. For important cross-border documents, we coordinate with counsel abroad to confirm the receiving country's requirements, and where needed recommend dual execution or notarised and legalised copies. Planning this at term-sheet stage saves time and avoids re-signing later.

Foreign-signed contracts are commonly relied on in Bangladesh, and electronic acceptance can create a binding agreement. Certificate-based recognition is more complex: the ICT Act 2006 contemplates recognition of foreign certifying authorities, but that requires specific regulatory steps, and relying on a foreign certificate does not automatically give the same statutory standing as a Bangladeshi digital signature. Where documents must be filed with Bangladeshi authorities or banks, those bodies may want wet-ink or notarised originals. We advise on the safest execution route for the document's intended use in Bangladesh. Early checks with the receiving bank help.

Keep enough to show who signed, what they signed, when, and that the document has not changed. That means identity verification records, authentication events, IP or device information, timestamps, the final document with its hash or certificate data, and evidence that the signer received and accepted the document. Retention should reflect limitation periods and regulatory requirements, and storage should be secure. Personal data in these records must comply with the Personal Data Protection Act 2026. We help clients design electronic signature evidence policies that work in court. Audit logs should be protected against alteration and access limited to named staff.

Identity checks often involve NID numbers, photographs, biometrics and location data, which are sensitive and attractive to fraudsters. Under the Personal Data Protection Act 2026, organisations need a lawful basis, clear notices, security measures, retention limits and controls on vendors and cross-border transfers. Collecting more than is necessary increases risk without improving assurance. We advise on privacy-conscious identity design, review vendor contracts and transfer arrangements, and help integrate electronic signature and identity steps so that customers understand what is collected and why. Retention schedules for identity data should be reviewed so unneeded information is deleted securely.