Signature attribution is a bit tricky. Interestingly, many esign providers use email as the authorization mechanism: you must have access to X email if you only

Signature attribution is a bit tricky. Interestingly, many esign providers use email as the authorization mechanism: you must have access to X email if you only can receive the secure link from this email. That makes the attribution component functionally as secure as your customers' email client.