Skip to content

Update history

Spring 25'

  • Add a new check on video identification:
  • identityHolderAgeControl which verifies that the age stated on the identity document matches the age of the person determined during the FaceMatch Video.

  • New related error code: 2533: Suspected age inconsistency.

  • When Sepamail control is in progress, the client file page automatically refreshes to display the result.

  • New documentation about reminder-type notifications

  • Add strict name control to define whether the lastname of the participants will be required for video identity verification.

  • New data on the Document Submission API:

    • remainingTries which indicates how many tries remain.

  • New behavior regarding LiveCheck controls to simplify integration with Trust And Sign:

    • liveCheckStatusAccepted and liveCheckWorkableElements data are now always present in the report.json file, except when the LiveCheck request could not be performed.

Winter 25'

  • Namirial QES signatures now take into account the user's workflow language (using SignBook).

  • Add a new control on video identification :

    • documentVideoNotTampered which checks a video injection attack.
    • New related error code : 2414 : The document video has been substitued or tampered.

  • Add a new control on video identification :

    • biometryVideoNotTampered which checks a video injection attack.
    • New related error code : 2413 : The biometry video has been substitued or tampered.

  • New notification event added to simplify the follow-up of the participant for resuming their workflow:

    • REMINDER_INCOMPLETE_FILE: this reminder replaces all existing reminders and will be triggered at each follow-up event.

  • Add a new control on the Document Submission API:

    • mrzGeometryValid which checks if the typography of the MRZ does conform to the model of the document.

  • New warning code for document submission :

    • 2532 : The typography of the MRZ does not conform to the model of the document.

  • Powens : added the redirect mode which allows to open the Powens flow in the same page of the user with the SignBook bankAccountMode parameter

    • bankAccountMode= redirect | popup
    • make sure to add the redirectURI in the Powens console whitelist

  • New data in IDENTITY notification web hooks:

    • livecheckRequest: DISABLED | SENT | NOT_SENT: LiveCheck request status
    • autoControls: OK | KO: control summary results

These are optional and are not included when Trust And Sign wasn't able to determine those values.

  • Add new variables in workflow configuration:

    • participantType.IDENTIFIER.email.all
    • participantType.IDENTIFIER.email.other
    • participantType.IDENTIFIER.mobilePhone.all
    • participantType.IDENTIFIER.mobilePhone.other

  • New error codes for the Powens service for bank documents :

    • 3123 : There is a technical issue between Powens banking service and the target bank.
    • 3124 : The connection limit set by the target bank has been reached.
    • 3125 : The website of the target banking institution is inaccessible.
    • 3126 : The specific authentication feature is not supported by the target bank.
    • 3127 : The data received by Powens banking service is incomplete.
    • 3128 : An unknown error was returned by the Powens banking service.

  • New notifications events added to improve the integration of Trust And Sign:

    • DOCUMENT_SUBMITTED_FOR_PARTICIPANT : Sent when a document has been submitted by participant.
    • ALL_MANDATORY_DOCUMENT_SUBMITTED_FOR_PARTICIPANT : Sent when all mandatory documents for participant have been submitted.
    • CLIENT_FILE_CLOSED : Sent when a client file is accepted or rejected.
    • LIVE_CHECK_STARTED : When a LiveCheck request has been successfully sent.

  • New behavior regarding the triggering of LiveCheck against unrecoverable controls alerts: list of unrecoverable errors that do not trigger LiveCheck in all cases (only if errors and always mode)

Trust And Sign Code Description
2096 The country of issue of the document is not allowed
2097 The document has expired
2112 The document is a specimen
2609 The back of the document was not found
2615 The front of the document was not found
2022 The document received does not match the expected one

Fall 24'

  • SEPAMAIL: Add the following error codes:
    • 2230: The IBAN is for a legal entity, whereas an IBAN for a person is required (or vice versa)
  • Removal of an obsolete implementation of the SEPAMAIL DIAMOND service.
  • Integration of the Powens service for bank documents:
    • You can submit your bank documents via Powens by using the Pretty attachments page in SignBook.
    • Two new events in the JSON report: POWENS_BANK_START and POWENS_BANK_DONE.
    • New error codes :
      • 3120: An internal error occurred with Powens banking service.
      • 3121: The waiting time for a response from Powens banking service has passed (15min).
      • 3122: An error occurred while retrieving the PDF document with the Powens banking service.
  • Document preview when submitting documents to SignBook :
    • Only PNG and JPEG files can be previewed.
    • This new feature is only available on the Pretty attachments page.
  • New notification: 'Rejection after identification automatically rejected' triggered if Video identity verification is configured with an automatic rejection action in the event of control errors. This notification can also be used by WebHook.
    • Notification identifier: FACE_MATCH_ERROR.
  • Archiving reference identifier added for workflows without signature in the timeline.
  • Enable the use of the fraud database for video identifications, so that documents captured during video verification can be declared as fraudulent.
  • libPhoneNumber 8.13.44 library updated for phone number validation.

  • Integration documentation update:

    • Added a troubleshooting page for customers experiencing integration problems via mobile webview.
    • Modification of the iframe attribute to correctly specify the allow=“camera ; microphone ” permissions following problems encountered with the Safari browser on Iphone.

  • Addition of information submitted in the Sepamail control error message (iban for errors relating to the iban, date of birth for consistency errors relating to this information and so on...).

  • Add a new control on the Document Submission API:
    • qesDataExtractionFromVizValid which checks if the data extracted from the visualization area do not contain any invalid characters (<>+=$()?;!,) nor any incorrect value (e.g. a birthdate > 150 years).
    • validityPeriodModelMatch which checks if the emission date, or expiration date and theoretical validity duration are consistent with the actual document model ( country and model-year ). It also checks that the emission date is not in the future.
  • Add the following error codes:
    • 2621 : Data extracted from the identification document supplied contains invalid characters or has an incorrect value.
    • 2622: Emission date, or expiration date and theoretical validity duration are not consistent with the actual document model ( country and model-year ). Emission date in the future also triggers this error.

Summer 24'

  • New Pretty signature page interface. We've developed a new signature page to offer participants a more modern and fluid navigation.
    • This new interface works only with our Namirial signature: simple, advanced and qualified level.
    • This feature is optional at extra cost.
  • To reduce the amount of personal data displayed in SignBook, it is now possible to hide the first digits of the cell phone number. By default, this new configuration is not activated, so as not to disrupt the integration of existing workflows. If you wish to activate it, please send us a request by creating a ticket on our Support Portal at the following address: https://support.netheos.com/
  • We've added the option of specifying the countries authorized for FAST identity verification, depending on the type of ID selected. As a reminder, the authorized countries filter function allows you to define the list of authorized countries by specifying the ISO 3166-2 country codes, separated by commas.
  • New option to set video archiving parameters for FAST identity checks.
  • The document type "Home insurance attestation" added to Proof of address category.
  • Add a new control, only in a qualified signature context, on the Document Submission API:
    • qesDataExtractionFromVizComplete which allows to check if the extraction of data from the visualization area is complete enough to allow the realization of a qualified electronic signature.
  • Add the following error codes:
    • 2620 : Missing mandatory data for qualified electronic signature.

Spring 24'

  • Add a new control on the Document Submission API:
    • issuerReferentialHolderValid which verify the validity of identity documents by using the holder's birth name and first name against the document repository API (DocVerif)
  • Add controls for video identification
    • originalDocument check if this is an original document (not a printed / photocopy, screen capture...)
    • pictureNotTampered check if the identity photo has not been substituted or tampered.
  • Add the following error codes:
    • 2109 : The birthName and/or firstName extracted from document are different from the actual values in issuer referential.
    • 2411 : The document comes from a photocopy or a remote screen.
    • 2412 : The holder's photo has been changed.

Winter 24'

  • Addition of new checks for IBANs taken from RIBs or defined in the legal entity's details
    • sepamailIbanValid to check whether the IBAN is valid
    • sepamailLegalEntityIdMatch checks whether the IBAN matches the legal entity identifier
    • sepamailLegalEntityOfficeIdMatch checks whether the IBAN corresponds to the legal entity's office identifier
    • sepamailBirthAndFirstNameMatch is used to check whether the IBAN is consistent with the birth name/first name of the declared identity
    • sepamailLastAndFirstNameMatch is used to check whether the IBAN is consistent with the user name/first name of the declared identity.
    • sepamailBirthDateMatch is used to check whether the IBAN is consistent with the date of birth of the declared identity.

  • Add the following error codes:

    • 2220 : IBAN unknown or unverifiable.
    • 2221 : IBAN cannot be checked by the bank holding the account.
    • 2222 : Account closed less than 14 months ago.
    • 2223 : IBAN is unknown.
    • 2224 : Account known but outside the diamond perimeter (e.g. savings account).
    • 2225 : IBAN is not consistent with the birth name/first name of the declared identity.
    • 2226 : IBAN is not consistent with the username/first name of the declared identity.
    • 2227 : IBAN is not consistent with the birthdate of the declared identity.
    • 2228 : IBAN is not consistent with the declared legal agent.
    • 2229 : IBAN is not consistent with the declared legal agent.

  • Addition of the possibility of declaring identity documents resulting from FAST or MAX video verification to be fraudulent

  • Allow possibility to enable desktop notifications for client files events to be validated in the Back Office Center interface.
  • The Back Office Center user account creation email notification is now translated into French and English

Fall 23'

  • Enabling LiveCheck mock mode now supports case-insensitive email sub-addresses.
  • Add fileId field in reportJson for every submitted files. Attachments files and identity verification files can be collected via the V6 api.
  • New controls have been added to tax notices following the shutdown of the tax notice online verification service. Some of these new controls are based on the presence, quality and content of the doc2D on the document.

Summer 23'

  • Removed deprecated checks namesInverted and firstLastNamesInverted on the Document Submission API.
  • after shutdown of tax notice online verification service, removed keys from report.json : taxNoticeConnectorRequested, taxNoticeConnectorFailed
  • disabled almost all controls on tax notice documents

Summer 22'.

  • Added the ability to redefine the link back to the wrapper page directly when integrating with NthSignbook using the callbackURL option

Spring 22'.

  • Add the following error codes:
    • 2112: The document is a specimen
    • 2113: The document is not properly framed
  • Added new checks on the Document Submission API
    • notSpecimen for identity documents
  • The new [pretty] display mode(../integration_signbook_v3#show-new-version-of-signbook-for-credentials) will be generalized in the Summer 22 update, so the old one will be deprecated.

Winter 22'.

  • API V6 :
  • Add the following error codes:
    • 2075: Error related to the verification of a payslip
  • Added new checks on the Document Submission API
    • legalEntityOfficeAlive
  • Add new keys to the report.json
    • companyOfficeAlive
  • report.json
    • Add fields events[].event[@type="CREATION"].groupUuid and events[].event[@type="CREATION"].groupName when creating a File client
    • Added a new event type (GROUP_TRANSFER) when reassigning a group to a clientFile

Fall 21'.

  • Added LiveCheck functionality
  • Added the following error codes:
    • 2109 / 2110 / 2111: Errors related to the verification of an identity document with an external repository
    • 3110 / 3111: MiTrust service access errors
    • 2928 / 2929 : Signature errors
    • 2130 / 2131: 2D-Doc errors
    • 3200: Document verification error via LiveCheck
  • Added new checks on the Document Submission API
    • Added issuerReferentialRequested, issuerReferentialConnectorSuccess, issuerReferentialKnownDocument and issuerReferentialValid which are controls with the document repository (DocVerif)
  • Added participantUuid parameter to the [document recheck] request(../integration_api_v6#re-submission-dun-document)
  • Adding new rejection causes :
    • ACTIVATION_EXPIRED, OTP_EXPIRED_AND_NO_RENEWAL_LEFT and MAX_NUMBER_OF_RENEWAL_REACHED when signing
  • Adding new keys to the report.json
    • signDocuments/id in SIGNATURE events indicating which contracts have been signed

Summer 21'.

  • report.json
    • Removed faceMatches[] field
    • Added clientFile.participants[].identityChecks[] field for participant identity verification
  • Reopening: Reopening a document for signing reopens the signature of all participants
  • Keywords
    • Add location key to indicate the position of a keyword
  • API v6
    • Added namesNotInverted and firstLastNamesNotInverted controls to the document submission API. And deprecation of namesInverted and firstLastNamesInverted controls.
  • Added the following error codes:
    • 3100 / 3101 / 3102: Participant identity errors with Post Office digital identity

Spring 21'.

  • API V6
    • Added amount field for creating and updating a folder
    • Added API for re-submission of documents
  • report.json
    • Added clientFile.amount field
    • Added DOCUMENT_REPROCESSING event to event types
    • Added REVIEW_CANCELED, LEGAL_ENTITY_REVIEWED, LEGAL_AGENT_REVIEWED events
  • Added the following error codes:
    • 2922 / 2923 / 2924: Inconsistency between participant information and identification document
    • 2925 / 2926 / 2927 : Error in retrieving the LRE
    • 2104 / 2105 / 2106 / 2107 : Problem comparing document and personal numbers for Italian service cards
  • Added rejection causes of a folder: LEGAL_ENTITY_INVALID and LEGAL_AGENT_INVALID.
  • Add the following endpoints:
  • Rejecting a file, the cause parameter becomes optional
  • Modification of the folder creation API
    • the signatures parameter is deprecated
    • the documentsToSign and documentsToVisualize parameters replace the previously deprecated parameter
  • report.json: Added REVIEW_CANCELED event
  • Added new rejection cause
    • The IDENTIFICATION_ERROR cause has been added and appears when the identification before signing comes up with an anomaly
    • The LEGAL_ENTITY_INVALID and LEGAL_AGENT_INVALID causes have been added in case of a legal entity verification error
  • Added new document type ITA_TS_CNS representing the Italian service card

Winter 21'.

  • Operator Management
    • Added UPDATE_CLIENT_FILES permission
  • Changed keyword search:
    • Added the following error codes:
      • 2520 : keywordsParticipantAlert
      • 2521: keywordsOperatorAlert
    • suppression of info keywords
    • control keywordsWhitelist and keywordsBlacklist deprecated
    • report.json
    • API V6
  • Added the following new error codes:
    • 1082: proof file not yet available
    • 2613: error reading the date of issue of an identity document
    • 2614: error reading the expiry date of an identity document
    • 2900 to 2921: error codes with AR24 identification
  • Add fields to report.json
    • Add event DEFRAUDED_DOCUMENT_REGISTRATION when a document is marked as fraudulent
  • report.json
  • Added APIs for facematch path (E-IDENTITY)
  • Added optional stamps parameter to the client file creation API

Fall 20'.

  • Adding fields to report.json
    • Added anonymized field on submitted documents
    • Added EXTERNAL_ACTION event type
    • Added birthNameMatch control for identity documents
    • New IDENTIFICATION event for electronic registered letter identification
  • Operator Management API
    • Added externalId field for operators
  • V6 API
    • Added externalId field for participants
    • Added postalAddressMatch control in document submission API (only for tax notices)
  • New documents
    • Added home insurance certificates (INSURANCE_ATTESTATION)
  • Anonymisation of Facematch selfies
    • In order to comply with the CNIL and the RGPD, we have added in the configuration of the product, a retention period for the FaceMatch images in the Trust and Sign folder. This delay is taken into account for all rejected or accepted files and is limited to one day maximum. So for any rejected or accepted file, the selfies will be deleted one day after its final status.

Summer 20'.

  • Submission of a file by a participant

    • Added message parameter
    • Added new fields in the salary slip submission API (annualNetTaxableIncome, monthlyNetTaxableIncome, legalEntityAddress)
    • Added details of tax notice amounts ("incomesDetails" key)

  • Operator Management

    • Added reportTypes parameter
    • Deprecated reporting parameter

  • New documents

    • Addition of CAF certificates (FAMILY_ALLOWANCE)
    • Addition of retirement pensions (RETIREMENT_PENSION)

  • Document visibility modification

    • Adding the API

  • Adding fields to the report.json

    • Added channels on events and tasks
    • Added data extracted from tax notices
    • Added extracted information for pay slips

  • report.json and report.json v5

    • Change of document names in the archive

Spring 20'.

  • One Click Contract
    • API validate: Added the participant.civility key
  • Added the following new error codes:
    • 2406: Insufficient number of reference images
    • 2407: No face detected
    • 2408 : Insufficient number of faces detected
    • 2409: Proof of life not detected
    • 2410: Reference images do not appear consistent
    • 2045: Mobile phone number not found
  • Recovering a file
    • Add archiving status ARCHIVING_IS_SCHEDULED [report.json
  • report.json
    • Add archive status ARCHIVING_IS_SCHEDULED to the file
    • Deleted clientFile.recordId key

Winter 20'.

  • Adding Flows to be allowed
  • Added group key to Folder Retrieval
  • Added securityElements control
  • report.json
    • Added key documents.areControlsObsolete.
    • Add key clientFile.group
  • report.json v5
    • Added key documents.areControlsObsolete.
  • Added the following new error codes:
    • 2612: Security elements are invalid

Fall 19'.

  • Added One Click Contract API
  • Updated the file creation API to include One Click Contract
  • Added the following new error codes:
    • 1062: Request for proof of identity for a participant is missing (in case of advanced signature)
    • 1069: The validation of the 1 Click Contract WBS failed
    • 1070: The participant data does not match the participant in the reference 1 Click Contract file

Summer 19'.

  • Added the following new error codes:
    • 1021 : An operator already exists with this email
    • 2611 : The issue and validity dates are not consistent with the MRZ
    • 2609: The back of the document was not found
    • 2610 : Issue and expiry dates are not consistent
  • Added operator management API
  • report.json v5 and v6 :
    • Added ZIP_REPORT_DOWNLOAD event: when an operator downloads the contents of a folder

Spring 19'.

  • Added the following new error codes:
    • 2400: Too many facial identifications in error
    • 2401: Internal facial recognition system did not respond
    • 2402: Photo could not be extracted from ID document: facial recognition cannot be performed
    • 2404: Internal error: unable to process face from ID document
    • 2405: Unable to find a single face in the selfie photo
    • 2403: The person in the photo extracted from the ID document does not match the person in the selfie
    • 2530 : The photo on the document is similar to the one in another file
  • Addition of the keys report, downloadDocumentsBeforeSignature and downloadSignedDocuments in the api of Recovering a folder
  • Added Reopening a file for signature
  • Add Participant Status
  • Rejection causes : added key : FACE_MATCH_ERROR
  • report.json v6 :
    • Add participantUuid key in the list of supporting documents
    • Added faceMatches key to the [facial recognition] list(../report_json_v6#list-of-face-matches-facial-recognitions)
  • Signbook v3 :
    • Adding browser permissions and compatibility for facial recognition Sigbook V3
  • Removal of AriadNext

Winter 19'.

  • Added web hooks notifications.
  • Added variables "clientfile.missingDocuments" and "clientfile.missingDocumentsList
  • The variables "missing.documents" and "missing.documents.list" are marked deprecated and will be permanently removed in a future release
  • Fixed variables "missing.documents" and "missing.documents.list" which no longer returned the list of missing documents for all participants

Fall 18'.

  • Signbook: added delegateeToken to track submission of credentials by a delegated participant.
  • report.json: deprecated the following keys in documents.controls: modelValid, documentValid, mrzOcrConsistent

Summer 18'.

Spring 18'.

  • The "postalLocality" fields are marked deprecated and will be permanently removed in a future release
  • Added an API for updating v5 signature documents
  • Signing documents are optional when creating v5 folders
  • Added keywords to the v5 Document Submission API and to the v5 report.json report.json v5
  • Added new "faithfulFont" control in report.json v5 to indicate that the font looks conform on French ID cards
  • Added an API for updating documents to be signed v5
  • Added the following new error codes:
    • 1060: when creating folders if a document to be signed is too large
    • 1061: when creating folders if a document to be signed is corrupted
    • 2608 : for non compliant fonts for French ID cards
  • Addition of the "faithfulFont" field in the return of the ID document submission API v5

Winter 18'.

  • Added the following new error codes:
    • 1056: when a requested functionality during a call is not active
    • 1057: when the proof file of the trusted third party is no longer available (purged)
    • 2519: when a modified PDF file is detected
    • 2607: when the place of birth extracted from a French NIC does not match the place of birth in the file
  • Adding the archiving state in the report.json v5 file (key "archivingState")
  • Add archiving state in the calls to retrieve information from a v5 file (key "archivingState")
  • Added "delayed" archiving trigger API v5
  • Added API to cancel "delayed" archiving v5
  • Added "documentId" parameter in document submission call v5
  • Added BIC code in the return of the document submission call v5 (only for RIB)
  • Added "id" and "category" fields in report.json v5 (in all documents)
  • Add "documentId" and "documentCategory" fields in report.json v5 (in AUTHENTICATION, DOCUMENT_SUBMISSION and DOCUMENT_REVIEWED events)
  • Added new v5 file finalisation call
  • Added new ARCHIVING_CANCELLATION event in v5 report.json
  • Added "containsTamperingSign" control to v5 report.json
  • Added "birthPlaceMatch" field in report.json v5
  • Added "birthPlace" field in the return of the document submission call v5 and in the report.json
  • Added "bicCodeFound" field in the return of the RIB v5 submission call

Fall 17' (2017-10-18)

  • Adding contract templates (see new folder creation parameter documentTemplateFields-{id})
  • Folder archives can be downloaded at any time
  • Added new check on PDF documents with annotations with new error code 2518
  • Added new APIs for retrieving documents from old folders (Smartlink):
    • Smartlink v5 status retrieval
    • Sending Smartlink v5 SMS

Summer 17' (2017-06-05)

  • Addition of the following new error codes:
    • 2550 to 2555 concerning the management of the social security number present on the payslips
    • 2600 to 2603 concerning the consistency between MRZ lines and the face of identity documents
  • Addition of the new error code 2514

Spring 17' (2017-03-03)

  • Added new document submission API
  • Improved support for legal entities
  • Added IBAN when creating files
  • New error codes 2005, 2006, 2007, 2008, 2009, 2011 and 2012

V1.12 (2016-10-17)

  • Addition of error code 2101

V1.11 (2016-09-05)

  • Added REST calls to retrieve information from a customer file
  • Added external ID to folder creation and report.json
  • Removed description of secret key authentication
  • Removed documentation for the folder update call
  • Added new error code 1047
  • Mobile phone number is optional when creating records
  • Added new document types: tax receipt and property tax

V1.9 (2016-06-07)

  • Complete redesign of the signbook events so that the encompassing page has all the details.

V1.8 (2016-03-31): multi-contract support

  • URL API integration modified: v4 v5

  • Profiles are associated with a signatory and not with the file (in api v5, json array "profiles" in the "sign" and "coSign" objects, instead of the method used in api v4 "coSign" objects, instead of the method used in api v4: concatenation of profiles separated by commas in a separate "profiles" part separate "profiles" part). Activate the profile on both signers for equivalent functionality to api v4; the post-signature post-signature supporting documents remain common to both signatories. In api v5, the profiles also allow you to modulate the contracts to be signed by each signatory.

  • Change of name of http "shares" in file creation: in api v4, a single share named "document" defining the contract to be in api v5, one share per contract to be signed, with the name "documentToSign-{id}" where id is the identifier of the document defined in Workflow. in Workflow. At the time of migration, workflows that only one contract (without identifier) now use the default identifier default identifier: if this identifier is not modified manually, for If this identifier is not modified manually, to have a single contract signed in api v5, the part containing this contract must be named pdf "documentToSign-default".

  • Rationalization: some http request paths and parameters have changed in api changed in api v5 (/accept instead of /validate to accept a file, "state" in multiple occurrences on the request /v5/integration/clientfiles (instead of "states" listing comma-separated states) separated by commas), dates in ISO-8601 yyyy-mm-dd or yyyy-mm-ddThh:mm:ss (instead of the yyyy/mm/dd format used in api v4 for the date of birth), etc.).

  • The format of the report.json file has been modified in api v5: dates ISO-8601 dates instead of timestamp, profiles by signatory instead of signed contracts under the "signedDocuments" key, with its identifier and for each one its identifier and the consent clauses "consentClauses" by signatory (and no longer by file: this possibility possibility exists only in the report.json file); the signatory identifier appears in each consent clause. consent clause.