Digital signatures in Azerbaijan: ASAN İmza and SİMA for business

ASAN İmza

ASAN İmza ("easy signature") provides a mobile electronic identity: the user's SIM card carries the cryptographic credentials, and the user confirms operations with a PIN on the phone. It was introduced in cooperation between state bodies and mobile operators and is used to sign documents and access e-government services, including the State Tax Service's portal. Companies typically obtain ASAN İmza for their authorised persons — directors, accountants — to sign tax documents and invoices.

Source: ASAN İmza on Wikipedia.

SİMA İmza

SİMA İmza is a mobile app developed by AzInTelecom, part of AZCON Holding, and launched in 2022. It combines public key cryptography with face biometrics: users onboard by scanning an identity document and taking a selfie, then sign with the app. It is free for citizens and available on Android and iOS, and it has been integrated into other services, such as the Birbank app, according to reports by Trend and AZERTAC.

Source: Biometric Update — SİMA İmza.

How businesses use them

• Tax: signing electronic invoices (e-qaimə) and tax reports. See e-invoicing for software.
• Government services: registrations, applications and reports through e-government portals.
• Banking: some banks accept electronic signatures for account operations and documents.
• Contracts: signing agreements with partners electronically, where both parties and the document type allow it.

Using signatures in your own software

For a client portal, HR system or document workflow, two uses are possible:

• Authentication — confirming a user's identity when they sign in or perform a sensitive action.
• Signing — producing a legally meaningful signature on a document.

Whether and how your software can use ASAN İmza or SİMA for either purpose depends on the integration options the providers offer to businesses at the time, on agreements with them, and on the legal requirements for your documents. Start by contacting the providers about business integration, and involve your lawyer on the legal effect.

Where direct integration is not available or not needed, a common alternative is to generate the document in your system, have it signed through the official tools, and upload the signed file back.

Security and privacy

Signing workflows process identity data and create evidence of intent. They require:

• secure storage of signed documents and audit trails;
• clear roles for who may sign on behalf of the company;
• protection of personal data in line with Azerbaijan's law — see personal data law.