Sign Once. Trust It Everywhere.
Cumulocrypt AATL Certificates put a digital signature on your PDFs that Adobe Acrobat trusts the moment it opens: no manual trust chain, no “unknown signer” warning, no chasing down a certificate from a CA nobody’s heard of.
Built for: contracts, invoices, filings, HR documents, and paperwork in regulated industries like finance, healthcare, and legal.
How it works
- Choose your term (1, 2, or 3 years) and complete identity verification through our AATL-listed partner CA
- Your certificate is issued and loaded onto your hardware token, or provisioned for cloud-based signing
- Sign PDFs (or soon, Word and PowerPoint documents) directly, with every signature carrying AATL trust and PAdES compliance
- Recipients open the document and see a verified, trusted signature immediately, with no extra steps on their end
The Problem & Our Solution
Why AATL matters
Most digital signature tools produce something that looks fine to the person signing and shows up as “unknown” or unverified to whoever opens it later. That gap turns into a real problem the moment a document gets audited, disputed, or forwarded outside your organization. A signature nobody can verify is barely better than no signature at all.
What Cumulocrypt does
Cumulocrypt AATL Certificates are issued through an Adobe Approved Trust List partner, so every signature you apply is automatically trusted in Acrobat and Reader. Nobody on the receiving end has to install anything or click through a warning. Sign with your PAdES-compliant certificate on a FIPS-validated hardware token you already own, like a YubiKey, or soon, straight from Word and PowerPoint with our cloud-based Software as a Service (SaaS) Office plugin.
Our Solution Offerings & Key Features
AATL trust, out of the box
Every certificate is issued through our Adobe Approved Trust List partner, so recipients see a verified, trusted signature the moment they open the document. No extra setup on their end, no warning dialogs to click through
PAdES-compliant signing
Built on the PAdES standard, with support for long-term validation (LTV) so a signature stays verifiable years after the certificate that created it has expired. Recognized across regulated and cross-border use cases.
Bring your own hardware token
Sign using a FIPS 140-2 validated USB token, including YubiKey and similar devices you may already own, or use the token we provision with your certificate.
Professional
(SAVE 12%)
Pricing
All terms include the same certificate: AATL-trusted, PAdES-compliant, and compatible with your own hardware token today, with cloud signing from Office coming soon. The only difference is how long it lasts.
INDIVIDUAL
Starting At
$170
1 – Year
- 1 AATL Certificate
- PAdES-compliant signing (B-B, B-T, B-LT)
- Hardware token compatible
- Standard identity verification
Professional
$300
2 – Year
- Everything in the 1-Year plan
- One verification cycle covers 2 years
- Fewer renewal touchpoints for your team
ENTERPRISE
BEST VALUE
$400
By Quote
- Everything in the 1-Year plan
- Longest coverage before re-verification
- Lowest effective cost per year
Need certificates for more than one signer? Volume and organizational pricing is available on request.
Technical Details
PAdES conformance
- Supports PAdES-B-B (basic), PAdES-B-T (timestamped), and PAdES-B-LT (long-term validation)
- Long-term validation (LTV) keeps a signature verifiable after the signing certificate itself has expired
Certificate and issuance
- X.509 document-signing certificate, issued through our AATL-listed partner CA
- Identity verification completed as part of certificate issuance, per AATL program requirements
Hardware token support
- FIPS 140-2 Level 2 or Level 3 validated USB tokens, including YubiKey and comparable devices
- PKCS #11 interface for signing operations
- Use a token you already own, or use the one provisioned with your certificate
Cloud signing
- Sign directly from Microsoft Word Cloud and Desktop applications through the Cumulocrypt Office plugin.
- Signing keys managed in the cloud rather than on a local device
Compatibility
- Verified automatically in Adobe Acrobat and Adobe Reader, with no additional trust configuration
- Compatible with other PAdES-aware validators
Ask before your legal or
compliance team asks you
Do recipients need special software to verify a signed PDF?
Any AATL-aware reader, including the free Adobe Reader, verifies it automatically.
Can I use a hardware token I already own?
Yes, as long as it’s FIPS 140-2 validated.
What happens when my certificate expires?
Signatures created while it was valid stay verifiable through long-term validation (LTV). You’ll renew before issuing new signatures.
Is the Office plugin available now?
Not yet. It’s coming soon.
Ready to sign with a certificate people already trust?