Digital Signature Certificate (DSC) Services in India

Digital Signature Certificate (DSC) Services in Mumbai

Almost nothing gets filed on paper any more. Company annual returns, GST registration, income tax audit reports, e-tenders, trademark applications and import-export documentation all require a digital signature certificate, and a filing deadline missed because a DSC expired last week is an entirely avoidable problem that we see constantly.

N D Savla & Associates arranges Class 3 digital signature certificates for individuals, directors, partners and organisations, handles video verification and token delivery, and manages renewals before they lapse. Because we also handle the filings the certificate is used for — from MCA annual returns to GST and income tax — the DSC is registered and tested on the relevant portal rather than simply handed over.

This page explains what a digital signature certificate is, which class and type you need for a given purpose, the documents required, how issue and renewal work, and what changes across different user categories. If you are unsure whether you need an individual or organisation certificate, the comparison below settles it.

What Is a Digital Signature Certificate?

A digital signature certificate is an electronic credential that establishes the identity of the signer and confirms that a document has not been altered after signing. It is issued by a licensed Certifying Authority and carries legal recognition under the Information Technology Act, 2000, which gives a validly affixed digital signature the same standing as a handwritten one.

Technically it relies on a pair of cryptographic keys. The private key, held on a secure USB token, creates the signature; the public key in the certificate allows anyone to verify it. Because the private key never leaves the token, possession of the physical device is what controls the ability to sign.

The practical implication is one that many companies overlook: handing your DSC token to an accountant or consultant means handing over the ability to sign statutory filings in your name. The certificate belongs to the individual named on it, and control of the token should stay with that person.

Which Type of DSC Do You Need?

Class 3 is now the only class issued for general use, but the type and usage still vary by purpose.

Note: Class 2 certificates were discontinued from January 2021 following the controller directive, and Class 3 is now issued for purposes that previously used Class 2. Older guidance still circulating online refers to Class 2 for MCA and income tax filings and is out of date.

Who Needs a Digital Signature Certificate?

Four categories account for the overwhelming majority of certificates issued.

Company Directors and Designated Partners

Every director signing MCA filings needs a DSC registered against their Director Identification Number, and every designated partner of an LLP the same. It is required from the moment of incorporation, so private limited company and LLP formation both begin with obtaining certificates for the proposed directors or partners.

Businesses Filing GST and Income Tax Returns

Companies and LLPs must sign GST returns with a DSC — the electronic verification code alternative is not available to them. Income tax returns for companies and for taxpayers subject to audit require digital signature as well, as do TDS filings. Anyone completing GST registration as a company will need the certificate in place before the application can be submitted.

Contractors and E-Tender Participants

Government and public sector procurement portals require a Class 3 certificate with both signing and encryption capability. Encryption matters here because bids must remain sealed until the opening date, and a signing-only certificate will not allow a bid to be submitted. Contractors who buy the wrong type discover this at the tender deadline.

Importers, Exporters and Professionals

Foreign trade filings on the DGFT portal require an organisation certificate mapped to the entity, needed for Import Export Code work and licence applications. Chartered accountants, company secretaries and cost accountants require certificates to certify filings in their professional capacity.

How Has Digital Signing Evolved in India?

India moved from wholly paper-based statutory filing to almost entirely digital submission in about two decades, and the legal framework was built ahead of the practice rather than after it.

Before 2000: Paper, Seals and Physical Submission

Every statutory filing was made on paper, signed in ink and submitted physically to the Registrar of Companies, the tax office or the relevant authority. Verification rested on wet signatures and company seals. There was no legal mechanism to authenticate an electronic document, so electronic filing was impossible regardless of the technology available.

2000 to 2006: The Legal Foundation and MCA21

The Information Technology Act, 2000 gave digital signatures legal recognition and created the office of the Controller of Certifying Authorities to license the entities issuing them. The MCA21 programme, rolled out from 2006, moved company filings onto an electronic platform and made the digital signature certificate a practical necessity for every company director in India rather than a specialist tool.

2006 to 2017: Expansion Across Departments

Income tax e-filing became mandatory for companies and audited taxpayers, government procurement moved to e-tender platforms, and the DGFT shifted foreign trade filings online. The Information Technology (Amendment) Act, 2008 broadened the framework to cover electronic signatures more generally. Through this period a director might hold several certificates for different portals before consolidation reduced the need.

Where Things Stand Now

GST from July 2017 extended digital signing to indirect tax compliance across the country. Class 2 certificates were discontinued from January 2021, leaving Class 3 as the standard. Video-based verification replaced physical document attestation for most applicants, cutting issue time from days to hours, and certificates are now issued almost exclusively on hardware tokens following the requirement that private keys be stored in a secure device.

How Do We Obtain a Digital Signature Certificate?

Our process runs in eight steps. A straightforward individual certificate is usually issued within one to two working days once documents are in order.

1. Purpose and Type Identification — We establish what the certificate will be used for and select the correct type — individual or organisation, signing only or signing with encryption, and whether a DGFT certificate is needed. Buying the wrong type is the most common and most avoidable error.
2. Applicant and Document Collection — For an individual certificate we need PAN, Aadhaar, a photograph, address proof, and an email address and mobile number that will be used for verification. Organisation certificates additionally require the entity registration documents and an authorisation letter for the named signatory.
3. Verification of Details for Consistency — The name on the certificate must match the PAN record exactly, since the portals it will be used on validate against PAN. A difference as small as an expanded middle name causes registration on the MCA or income tax portal to fail after the certificate has been issued and paid for.
4. Application Submission to the Certifying Authority — The application is filed with a licensed Certifying Authority with the supporting documents attached in the prescribed format.
5. Video Verification and eKYC — The applicant completes a short video verification recording and mobile and email verification. This must be done by the person named on the certificate, in their own name — a point where attempts to delegate cause outright rejection.
6. Token Issue and Certificate Download — The certificate is downloaded onto a secure USB cryptographic token. For a first-time applicant the token is supplied; for a renewal the existing token can usually be reused if it is a compatible device with capacity.
7. Portal Registration and Testing — We register the certificate on the portals where it will be used — MCA, income tax, GST, DGFT or the tender platform — and test a signature. A certificate that has never been tested tends to fail at the moment it is first genuinely needed.
8. Validity Tracking and Renewal Reminder — Expiry is recorded and the renewal initiated before the certificate lapses, so filings are never held up waiting for a replacement.

The certificate is typically needed alongside other compliance work — DIN eKYC and reactivation for directors and TDS return filing for businesses — and we sequence these so the certificate is in hand before the deadline that requires it.

Warning: a DSC token gives whoever holds it the ability to sign statutory filings in the name of the certificate holder. Directors should keep their own tokens rather than leaving them with a consultant or accounts department, and should never share the token password.

How Do DSC Requirements Differ by User?

The certificate is the same technology throughout. What differs is the type required and how it is registered.

Companies and LLPs

Every director or designated partner who signs filings needs their own certificate registered against their DIN or DPIN on the MCA portal. Where a company has several signing directors, staggering the renewal dates is worth doing deliberately so the whole board does not expire in the same week ahead of the annual filing season.

Proprietors and Partnership Firms

An individual Class 3 certificate in the proprietor own name is generally sufficient, since the proprietorship has no separate legal identity. Partnership firms use certificates in the name of the signing partner. The requirement usually arises first from GST or income tax audit obligations rather than from company law.

Contractors Bidding on Government Tenders

Both signing and encryption capability are required, and the certificate must be registered on each procurement portal separately — registration on one does not carry to another. Because tender timelines are unforgiving, the certificate should be obtained and tested on the specific portal well before a bid deadline rather than in the final week.

Foreign Directors and Non-Resident Applicants

Applicants without an Indian PAN or Aadhaar follow a different verification route, typically requiring apostilled or consularised identity documents and passport-based verification. The process takes materially longer, so foreign directors of Indian subsidiaries should begin well ahead of any incorporation or filing deadline that depends on their signature.

Why Choose N D Savla & Associates for Your DSC?

These are the five reasons clients come to us rather than to a token vendor.

• The right type selected for the actual purpose. Signing versus encryption, individual versus organisation, DGFT versus general use — we establish this before purchase, because the wrong certificate cannot be exchanged.
• Name and PAN consistency checked upfront. Portal registration fails on name mismatches, and catching that before issue avoids paying twice for the same certificate.
• Registered and tested on your portals. We complete registration on MCA, income tax, GST or the tender platform and test a signature, so the certificate is known to work before you need it.
• Renewals tracked, not remembered. Expiry dates are monitored and renewal begins before the lapse, which matters most in the annual filing season when a delay of days has real consequences.
• The same firm does the filings. Because we handle the MCA, GST and income tax work the certificate is used for, problems get resolved rather than passed between a vendor and a consultant.

Where the certificate is used for company filings, DIN registration or ROC submissions, we work directly from the requirements published by the Ministry of Corporate Affairs at mca.gov.in, so registration and signing work correctly the first time.

Frequently Asked Questions About Digital Signature Certificates