PAdES Studio for Mac

PAdES Studio is a macOS utility for applying and checking standards-based digital signatures in PDF documents.

Open a PDF, select a signing identity from your macOS Keychain, optionally choose a visible signature area, and save a newly signed copy. The app writes a real PDF signature field with a detached CMS/CAdES signature and preserves the original document bytes through an incremental PDF update.

Features:

• Sign PDF documents using identities available in macOS Keychain, including supported CryptoTokenKit smart cards and hardware tokens.
• Check whether a certificate can be used for signing from the toolbar before opening or signing a PDF.
• Add an optional visible signature appearance.
• Add reason, location, and contact metadata to the signature dictionary.
• Request RFC 3161 timestamp tokens from a timestamp server you configure.
• Create PAdES-oriented B-B, B-T, B-LT, and B-LTA outputs when the required material is available.
• Embed long-term validation material such as certificates, OCSP responses, and CRLs when available.
• Add archive document timestamps for PAdES-B-LTA workflows.
• Inspect PDF signatures, certificate chains, timestamps, validation material, VRI mapping keys, and detected/validated PAdES profiles.
• Configure verification trust policy and manage root certificates trusted only inside PAdES Studio.
• Optionally enable EU Trusted List support with one setting that caches the European Commission EU LOTL XML, referenced national trusted-list XML files and parsed national trust-service metadata, verifies supported trusted-list XML signatures and freshness, and uses fresh verified granted CA/QC certificate-chain matches as a technical trust source.
• Does not use Adobe AATL, EUTL, or other legal trust-list data to claim qualified-signature status.
• View basic PDF metadata, file details, page information, and security information.

PAdES Studio processes documents locally on your Mac. It does not upload your PDF files to the developer's servers. Network requests are made only for timestamping and validation data, such as to the timestamp, OCSP, or CRL endpoints required by your selected certificate and settings.