Frequently Asked Questions

A digital signature is a certificate-based method of authenticating an electronic document. It connects the verified identity of the signer to the document and uses cryptographic technology to show whether the document has been changed after it was signed.

A professional digital credential is a digital certificate issued to a verified and authorized professional. Through CPCS and the association, the credential can be connected to the professional’s identity, designation, association authorization and used in compatible signing applications.

No. An electronic signature is a broad category that can include many forms of electronic approval. A digital signature is a specific certificate-based method that adds cryptographic signer and document-integrity evidence.

No. The image may reproduce the appearance of a seal, but the underlying digital credential creates the authentication evidence. A copied image can look official without providing that evidence.

CPCS stands for Canadian Professional Credential Service, a Carillon Information Security service designed to help professional associations issue and manage professional digital credentials.

Recipients can use compatible software to review the digital signature, signer identity, credential status, authentication time and whether the document has been modified.

Compatible software will normally indicate that the protected document has changed. Depending on the application and nature of the change, the signature may be shown as altered or invalid.

A direct electronic copy of the complete signed file should retain its signature evidence. Printing and rescanning, screenshots, page extraction or rebuilding the PDF can remove or weaken that evidence.

The paper can display the visible seal and signature appearance, but it cannot contain the interactive cryptographic verification evidence embedded in the electronic file.

A visual image can be copied, but copying the image does not copy the valid digital credential or create a valid digital signature.

CPCS primarily provides and manages professional credentials. The credential is intended to work with compatible third-party document and PDF signing applications.

Potential compatible applications include Adobe Acrobat, Bluebeam, Foxit, PDF-XChange, Microsoft Office and other applications that support standards-based digital certificates. Compatibility should be validated for each program.

Yes. Each professional should apply their own digital signature using their own credential. No one should sign on behalf of another professional or share a credential.

Many compatible applications support predefined signature fields or templates. This is generally a function of the signing application rather than the CPCS credential.

No. A professional digital credential is personal to the individual to whom it was issued and should remain under that person’s sole control.

A digital signature normally authenticates the PDF as a whole, even if the visible signature appearance is placed on one page.

Eligibility is normally determined by the participating professional association and may depend on current licensing status, designation, identity verification and other program requirements.

The exact process is established for each association program and may include association records, government-issued identification, electronic or biometric verification, or additional approval steps.

The credential is intended for the sole use of the authorized professional. The association controls eligibility and status, while the professional controls day-to-day use of the credential.

The professional should follow the program’s security process. Depending on the circumstances, the credential may need to be revoked, reissued or installed on a replacement device after verification.

A personal professional credential can not be controlled by the employer or accessible where another person can use it.

Yes. Authorized association administrators can suspend or revoke a credential in accordance with the program rules when eligibility, security or professional status changes.

Suspension is generally temporary. Revocation permanently ends the validity of that specific credential and may require a new credential if eligibility is later restored.

Previously signed documents may retain evidence of the credential status and signing time. Their treatment depends on the program, validation information and applicable professional requirements.

No. CPCS provides the credential infrastructure and lifecycle capabilities. The association remains responsible for professional rules, eligibility, permitted uses and regulatory interpretation.

In a digital workflow, the official original is generally the complete electronic file containing the valid digital signature and verification evidence.

A revision should normally be treated as a new authentication event. Retain the previously issued version, prepare and review the revision, authenticate the revised file and identify the prior version as superseded where appropriate.

Combining, extracting or reorganizing signed PDFs is possible, but can affect validation. The organization should use a controlled packaging method that preserves each digitally signed document intact.

No technology prevents every possible misuse. CPCS strengthens identity, integrity, verification and lifecycle controls so unauthorized reuse or alteration is easier to detect.

A phased approach is recommended: requirements review, workflow mapping, controlled testing, pilot, feedback, training, broader launch and ongoing program review.

Training should cover credential security, the difference between seal images and digital authentication, verification, authorized use, revisions, record retention and support procedures.

The support model is defined for each association program and may address account access, identity verification, issuance, activation, renewal, reissuance and compatible application configuration.

Pricing may vary by association program, credential duration, verification requirements, support model and optional services. Applicable pricing will be communicated before service is launched.

A new credential is valid for three years and established as part of the association program. A credential can still be suspended or revoked before expiry when required.