Electronic signature framework with enhanced security

A computer program product encoded with instructions that, when executed by one or more processors, cause a document workflow process to be carried out, the process comprising:

• generating a hash of an electronically signed document that is received by an electronic signature server in the course of an electronic signature workflow;
• storing the hash of the electronically signed document in a long-term storage resource managed by the electronic signature server;
• removing any copies of the electronically signed document that are stored in storage resources managed by the electronic signature server;
• receiving, by the electronic signature server, a document verification inquiry from an authorized inquiring party, wherein the document verification inquiry includes a document of unknown authenticity;
• generating a hash of the document of unknown authenticity;
• matching the hash of the document of unknown authenticity with the hash of the electronically signed document that is stored in the long-term storage resources managed by the electronic signature server;
• and
• sending, to the authorized inquiring party, document audit data characterizing an electronic signature that was applied to the electronically signed document.

A computer-implemented electronic signature acquisition method comprising:

• generating a hash of an electronically signed document that is received by an electronic signature server in the course of an electronic signature workflow;
• storing the hash of the electronically signed document in a long-term storage resource managed by the electronic signature server;
• removing any copies of the electronically signed document that are stored in storage resources managed by the electronic signature server;
• receiving, by the electronic signature server, a document verification inquiry from an authorized inquiring party, wherein the document verification inquiry includes a document of unknown authenticity;
• generating a hash of the document of unknown authenticity;
• matching the hash of the document of unknown authenticity with the hash of the electronically signed document that is stored in the long-term storage resources managed by the electronic signature server;
• and
• sending, to the authorized inquiring party, document audit data characterizing an electronic signature that was applied to the electronically signed document.