You sign a contract with a Malaysian vendor on WhatsApp, store the PDF in Google Drive, and move on. Six months later, during a dispute, your legal team tells you the signature may not hold up. The vendor claims they never agreed to the amendment you made. You have no audit trail. No proof of delivery. No timestamp. E-signatures are legal across Indonesia, Malaysia, and Singapore—but 'legal' does not mean 'safe'. Each country has different rules about what makes a signature valid in court, what happens to stamp duty, and how you must handle data to comply with privacy law. Most contract platforms and messaging services don't meet those rules. This is a country-by-country checklist. It tells you what each jurisdiction requires, which platforms actually comply, and where the gaps are. Indonesia: No stamp duty, but you need a real audit trail Indonesia has no formal stamp duty on contracts. That makes signing easier than Malaysia or Singapore. But the Law on Electronic Information and Transactions (ITE Law) requires that electronic signatures meet three hard tests: Accuracy. The signature must reliably identify the signer and show their intent. Integrity. The document must not be altered after signing. Non-repudiation. The signer cannot later claim they didn't sign. In practice, this means you need a platform that generates a tamper-proof timestamp, logs who signed what and when, and stores the signed document in a way that proves it hasn't been changed. A PDF you email back and forth, or a screenshot of a WhatsApp signature, does not meet this bar. A court will not accept it as proof in a dispute. Many Indonesian businesses use WhatsApp to sign contracts. WhatsApp does not create an audit trail. There is no timestamp. There is no proof of who read the message or when. If you later argue the other party never saw it, WhatsApp's logs (which are not in your control) are inadmissible in Indonesian courts. You lose. The rule: Indonesian law does not require a specific platform. It requires proof. Use a platform that timestamps signatures, logs access, and keeps a tamper-proof record. Omit the audit trail and you have a nice PDF, not a valid contract. Malaysia: Stamp duty applies, e-signature is valid under the Companies Act Malaysia's Digital Signature Act (DSA) and the Companies Act both allow electronic signatures. The signature itself is legally valid. But Malaysia has stamp duty on many contracts—and e-signatures do not exempt you from it. Stamp duty rates depend on the contract type. A service agreement or license agreement might attract RM10–RM100 (US$2–20) of duty. A loan agreement attracts 0.5% of the loan amount. A property transfer attracts 3–4%. If you sign electronically and skip the stamp, the contract is still valid between the parties, but the Inland Revenue Board (IRB) can fine you up to 10 times the unpaid duty. And if the contract is later challenged in court, the court may refuse to admit it as evidence. The trap: Many platforms that are compliant in the US or EU do not meet Malaysia's audit trail or data residency rules. If you sign on a platform hosted outside Malaysia, and the IRB audits you, the platform may not be able to produce records in a form the IRB accepts. You then have to prove the audit trail another way—difficult, expensive, and often unsuccessful. Malaysia's Personal Data Protection Act (PDPA) also requires that personal data collected during contract signing (name, email, phone) is processed and stored in a way that meets PDPA rules. If you use a platform that sends audit logs to servers outside Malaysia, or that shares logs with third parties, you may be in breach. The rule: Pay stamp duty. Use a platform with a clear audit trail that meets PDPA data residency rules. If you sign electronically and later dispute the contract, the IRB or a court will ask for proof that the signature is real and the document is intact. A platform that cannot produce that proof in Malaysia will cost you more than the stamp duty you tried to save. Singapore: Probation clauses, platform liability, and evidence rules Singapore's Electronic Transactions Act (ETA) allows e-signatures and gives them the same legal weight as handwritten ones. But Singapore courts have added a practical rule: e-signatures must meet a higher evidentiary standard than pen-on-paper. The court must be satisfied that the technology is reliable, that the signer had intent, and that the document was not altered after signing. Many e-signature platforms insert a probation clause in their terms of service. The clause says the platform is not liable if a signature is forged, or if the audit trail is incorrect, or if the document is altered without detection. In a Singapore court, this clause does not protect the platform—it protects the party that used the platform. If you sign a contract on a platform with a weak probation clause, and later a court finds the signature was forged, you may not be able to recover from the platform. Y