Melento

How Melento Enabled Borderless Digital Signing for a Leading Global Bank

Case study · A leading private bank (NRI and residency banking)

THE PROBLEM

NRI customers had no signature route that was both usable from abroad and secure enough for the bank

THE PROBLEM

The bank's Senior Vice President, Asset Operations, runs its residency and NRI banking verticals. His customers live overseas, but their account, KYC, loan and investment documents are Indian, and these documents need a signature the bank can stand behind.

Both standard options failed. Aadhaar eSign depends on an OTP sent to an Indian mobile number, which most of the bank's overseas customers do not have. An electronic signature was not considered meeting the banking and compliance requirements for these documents. A conventional digital signature certificate meant a physical USB DSC token, with drivers and a device the customer has to carry, which is impractical for someone signing from another country.

The result was a gap: the customers the vertical exists to serve were the ones with no workable way to sign.

Instead of asking NRI customers to adapt to India-bound signing methods, the bank moved the signature to where they already are: a browser. Cloud DSC gives each customer a legally valid Digital Signature Certificate (DSC) issued in their own name. The private key is generated and held in a Hardware Security Module (HSM); it is non-exportable, and nothing is signed until the customer authenticates.

Each customer self-verifies their identity through KYC at DSC registration, so no third party is involved in the act of signing. The platform is security compliant, keeps a full audit trail, and every production deployment is approved by Melento's infosec team.

WHAT CHANGED

Moving the signing key off the customer's desk and into an HSM

WHAT CHANGED

How a customer signs with Cloud DSC

  1. Register once

    eMudhra KYC; certificate issued in your name

  2. Log in

    Credentials validated on the web portal

  3. Verify with OTP

    One-time password before each signature

  4. Affix signature

    HSM-held key signs; document carries your DSC

CHOOSING THE RIGHT WAY TO SIGN

Every signing method has its place

Melento offers six ways to sign on one platform, and each serves a different need. Banks match the method to the customer and the document; Cloud DSC adds a route for customers who sign from abroad.

One platform six ways to sign Melento
  • Aadhaar
    eSign
    UIDAI

    Fast, high-volume signing for residents with an Aadhaar-linked Indian mobile number.

  • Cloud SignCloud

    Scalable cloud signing for signers who already hold a certificate from a CA.

  • Electronic
    Signature
    OTP / email

    Quick OTP-verified signing for everyday agreements.

  • Cloud-based
    HSM
    Key in HSM

    HSM-grade key storage for signers who already hold a certificate from a CA.

  • DSCUSB token

    Proven token-based control for desk-based authorised signatories.

OUTCOME

Built within the Indian IT Act framework.
Cloud DSC was brought under the purview of IT Act governance and regulations, and designed with a strong user experience and sound technical foundations, so signing stays hassle-free.
Every customer got the method that suited them.
NRI customers are routed to Cloud DSC, while resident customers and office signatories carry on as before.
The certificate comes to the signer, not the other way round.
A ASP/DSC service provider issues an DSC in the customer's own name, so there is no separate CA purchase and no handover to a provider.
The key never moves.
It is generated inside a Hardware Security Module, it is non-exportable, and it is used only after the customer authenticates.
The OTP no longer depends on an Indian mobile number.
Each signature is confirmed with a one-time password on the Cloud DSC web portal.
Signing moved to a browser.
NRI customers sign Indian documents online from wherever they live, with no device, drivers or travel.

THE IMPACT

The bank no longer has to choose between reaching NRI customers and meeting its expectations, and the gap is now closed

The bank now has a signing route built for exactly the customers Aadhaar eSign leaves out. An NRI customer can sign Indian documents with a DSC in their own name, from anywhere, through an online digital signature portal, without an Indian mobile number, without couriering a USB token and without visiting India.

The risk the SVP was carrying, offering overseas customers either a route they could not use or one the bank would not trust, has been removed. Cloud DSC fits the rest of the NRI customer's paperwork in the same way: NRI account opening and KYC updates, home loan and personal loan agreements, property sale and lease agreements, and investment documentation, all signed remotely.

Have customers who sign from abroad?