Electronic invoices have become standard in business – they save time and costs. As they spread, however, the risk grows too: criminals intercept invoices and alter the payee or bank details. If a payment is made to the wrong account, the money is usually lost. To make sure this does not happen when working with us, we have introduced clear security standards.

How our invoices are secured

All invoices from MD LEGAL carry a qualified electronic signature or a qualified electronic seal under the eIDAS Regulation (EU) No. 910/2014. This signature guarantees two things: the authenticity of origin (the invoice provably comes from us) and the integrity of the content (any subsequent alteration invalidates the signature and is therefore detectable). Plain transport encryption of the e-mail is not sufficient for this purpose.

What you should check as the recipient

• Verify the signature before paying: In Adobe Acrobat Reader, a valid signature is shown by the note “Signature valid”; alternatively, you can use the EU validation service (DSS).
• Only the signed bank details are binding: The sole valid account details are those stated in the qualified, signed invoice.
• Beware of “corrections”: If you receive an allegedly changed bank account, please do not pay and contact us by phone first.
• Unsigned invoices are not binding: An invoice is deemed properly received only with a valid qualified signature.

Our promise to you

We will never notify you of a change to our bank details solely by plain e-mail. If you receive such a message, exercise the utmost caution – when in doubt, call us at [phone number] before initiating any payment.