Online offer letter acceptance: e-signatures, Aadhaar eSign and an audit trail that holds

Most offer letters still travel as a PDF attached to an email. The candidate prints it, signs it, scans it on their phone and sends back a slightly crooked image, or replies "Accepted, thanks" and nothing else. When the joining date slips or a dispute comes up, HR has to find that email. Online offer letter acceptance replaces this with a link: the candidate reads the letter, signs, and the company gets a signed copy with a record of exactly what was accepted, by whom and when.

Is online offer letter acceptance legally valid?

For an ordinary employment offer, yes in general. Three parts of the Information Technology Act, 2000 matter:

• Contracts formed electronically are not unenforceable merely because they were made electronically (section 10A).
• Electronic signatures are legally recognised, and the Act lists reliable electronic signature techniques in its Second Schedule, which includes Aadhaar-based eSign.
• Excluded documents. The Act does not apply to a short list of documents such as wills, powers of attorney, trusts and contracts for the sale of immovable property. An offer letter is not on that list.

Proving an electronic record in a dispute is governed by the law of evidence, now the Bharatiya Sakshya Adhiniyam, 2023. In practice, what helps is a clear record of the document, the signer and the time. If your offer letters include unusual terms, such as a training bond, a large joining bonus with clawback or a non-compete, ask your lawyer whether a stronger signature is worth it.

Two ways to sign: typed signature or Aadhaar eSign

Most companies use typed or drawn signatures for the bulk of offers and Aadhaar eSign for the few where the extra assurance is worth the cost. Either way, the employer should not receive or store the candidate's Aadhaar number for signing.

The offer letter audit trail

A signature is only as good as the record around it. An offer letter audit trail should capture:

• the candidate's name and the email or phone the link was sent to;
• the exact version of the letter they saw, with a fingerprint (hash) of the document;
• the time the link was opened and the time it was signed;
• the IP address and device;
• the typed or drawn signature, or the eSign certificate.

Attach this as a certificate page to the signed copy and store both. If the letter is changed, for example a revised CTC, send a new link; the old one should stop working, so nobody accepts an outdated version.

Link expiry and offer acceptance reminders

An open-ended offer is a risk. Candidates hold offers while they negotiate elsewhere, and the hiring manager loses weeks.

A practical set of rules:

1. Link valid for 7 days, or until the offer's last date if sooner.
2. An offer acceptance reminder 2 days before the link lapses.
3. Questions on the link. Let the candidate ask a question without accepting or declining; answer it by email and keep it with the offer.
4. Decline with a reason. Ask why, in one line. Over a year, the reasons tell you more about your offers than any survey.
5. A fresh link when the candidate needs more time; the old link stops.

A worked example from a Noida hiring team

A product company in Noida hires a senior analyst at a yearly CTC of ₹14.4 lakh.

• Monday 10:00: offer approved by the hiring manager and HR; the letter goes out with a link valid until the following Monday.
• Wednesday: the candidate asks whether the joining bonus is paid with the first salary. HR answers by email; the question and answer sit on the offer.
• Saturday 10:00: reminder sent, two days before the link lapses.
• Saturday 21:40: the candidate opens the link on a phone, types their name and accepts. The signed copy with its certificate page goes to the candidate and to HR.
• Saturday 21:41: the joining form is sent automatically, so PAN, bank and education details start coming in before day one.

Because the letter included a joining bonus with a 12-month clawback, the company used Aadhaar eSign for this offer. For its campus offers, it uses typed signatures.

Offer, appointment and probation

An accepted offer is the start of the paperwork, not the end. On joining, the employee should receive an appointment letter; the OSH Code requires employers to issue one to every employee. The appointment letter sets out the probation period, and confirmation follows later. Our guide to the probation confirmation process covers that step.

Candidates' personal data is covered by the Digital Personal Data Protection Act from the first résumé. Send a short privacy notice when a candidate applies, collect only what you need for the offer, and delete data of candidates who were not hired after a set period. The DPDP Act for HR guide has the wider picture.

Common mistakes

• Sending a PDF and counting a "thanks" email as acceptance.
• Changing the CTC after acceptance without a new link and new acceptance.
• Leaving offer links open for weeks.
• Asking for Aadhaar copies at offer stage.
• Not keeping the version of the letter that was actually signed.

A short checklist

• One template per offer type, approved by HR and legal once.
• Approval before sending for offers above budget.
• A link valid for 7 days, with a reminder 2 days before.
• Typed or drawn signature by default; Aadhaar eSign where terms justify it.
• Certificate page with document fingerprint, time, IP and device.
• Joining form triggered by acceptance.

In Vatsin Recruit, offers go out with a secure link to accept with a typed or drawn signature, decline or ask a question; the signed copy carries a certificate page, the link lasts 7 days by default with a reminder, and Aadhaar eSign can be switched on with the company's own eSign provider account.