In the modern world, digital transformation is an integral part of business development. Ukrainian enterprises are actively implementing electronic document management and migrating their critical data to cloud storage, striving for global accessibility and economic efficiency. However, along with these advantages, an urgent question arises: do electronic documents stored in the cloud have sufficient legal force to be used as evidence in Ukrainian courts? Neglecting this aspect can lead to serious legal consequences, including the loss of court cases.
Legal Basis for Electronic Documents in Ukraine
The foundation for the legal force of electronic documents in Ukraine is laid by the Law of Ukraine "On Electronic Documents and Electronic Document Management" (Law No. 851-IV) and the Law of Ukraine "On Electronic Identification and Electronic Trust Services" (Law No. 2155-VIII). These regulatory acts equate an electronic document to its paper counterpart, provided it has all the mandatory requisites, the main one being an electronic signature.
The qualified electronic signature (QES) plays a key role, which, by its legal status, is equivalent to a handwritten signature and has a presumption of its conformity. This means that a document signed with a QES is considered authentic and intact unless proven otherwise. It is important that each electronic copy of a document sent to multiple recipients or stored on multiple electronic media is considered an original.
Requirements for Electronic Evidence in Court Proceedings
Ukrainian procedural codes – the Civil Procedure Code (CPC), the Commercial Procedure Code (CPC), and the Code of Administrative Procedure (CASU) – clearly define the concept of electronic evidence and the requirements for its submission. Electronic evidence is any information in electronic (digital) form that contains data about circumstances relevant to the case. This can include electronic documents, websites, messenger messages, metadata, databases, etc.
Electronic evidence is submitted to the court in its original form or in an electronic copy certified by a QES. Paper copies of electronic evidence can also be submitted, but they are not considered written evidence, and their conformity to the original may be questioned by the court. In such cases, the court has the right to request the original electronic evidence. If the original is not submitted, and the court or a party to the case doubts the conformity of the copy, such evidence may not be accepted for consideration.
Special attention is paid to the integrity and authenticity of electronic evidence. Integrity is verified by confirming the electronic signature or seal. A qualified electronic seal, for example, has a presumption of integrity and authenticity of the origin of electronic data. Preserving metadata that allows establishing the origin, purpose, date, and time of creation or sending of a document is crucial for its evidentiary value.
Cloud Solutions: Opportunities and Risks for Legal Force
Cloud storage, particularly over the Internet, is recognized as a place for storing electronic evidence. However, using cloud solutions for storing legally significant documents carries both significant opportunities and potential risks. On the one hand, the cloud provides high availability, scalability, and cost-effectiveness. On the other hand, questions arise regarding compliance with the strict requirements of Ukrainian legislation.
The main risks are as follows:
- Integrity and Authenticity: Can a cloud provider guarantee the immutability of a document and its signature throughout the entire storage period? Are mechanisms for verifying integrity recognized by Ukrainian legislation provided?
- Availability and Recoverability: Will the document be available for use and restoration in its original format years later, considering possible technological changes or provider bankruptcy?
- Origin and Purpose: Is all necessary information (metadata, audit trails) preserved, allowing for the establishment of the author, date, and time of creation/sending of the document? Simple file storage often does not provide such capabilities.
- Data Storage Location: Although legislation does not always require data to be stored exclusively within Ukraine, for certain types of critical information or in cases of court requests, the location of servers may be important for the speed and possibility of accessing originals.
- Audit and Access Control: Does the cloud solution provide detailed audit logs of all document actions, allowing tracking of who performed what operations and when?
Strategic Choice of Cloud Architecture and Provider
To minimize the risks of inadmissibility of electronic documents in courts, Ukrainian companies need to approach the choice of a cloud solution strategically. The solution should provide a balance between the flexibility of cloud technologies and the strict requirements of national legislation.
When choosing an architecture and provider for cloud storage of electronic documents, the following aspects should be considered:
- Support for Qualified Electronic Signature (QES): The provider must ensure integration with Ukrainian qualified electronic trust service providers for the correct application and verification of QES/QES seals.
- Integrity Verification Mechanisms: Ensure that the solution uses reliable methods for preserving document integrity (e.g., hashing, versioning, blockchain technologies) that can be independently verified by expert examination.
- Access and Audit Policies: The system must provide detailed access control to documents and maintain immutable audit logs (logins, views, changes, signings), which are critical for court evidence.
- Data Storage Location: Although there are no direct prohibitions on storage in foreign data centers, for sensitive information or documents requiring quick access upon court request, preference should be given to providers with data centers located in Ukraine. This simplifies the procedures for requesting originals.
- Long-Term Storage and Recoverability: The solution must guarantee the ability to restore documents in their original format and with all metadata for the entire period established by law (even beyond 10 years).
- Backup and Disaster Recovery: A reliable provider must have clear backup policies and disaster recovery plans to prevent data loss.
- Contractual Relations: The contract with the cloud provider must clearly regulate issues of data ownership, responsibility for their preservation, procedures for providing access upon court requests, and guarantees of compliance with Ukrainian legislation.
Conclusion
The transition to cloud solutions for storing electronic documents is a strategic step for Ukrainian businesses. However, the success of this transition depends on a thorough analysis and selection of a solution that meets not only technical but, most importantly, legal requirements. Heads of document management departments, lawyers, CIOs/CTOs, and CISOs must work together to ensure that the chosen cloud architecture and provider guarantee the legal force and admissibility of electronic documents as evidence in the Ukrainian legal field. Only such an approach will allow for the full utilization of the benefits of cloud technologies while minimizing risks and protecting the company's interests in court.
