Introduction

Iraq has officially launched the use of electronic signatures for government entities, the private sector and citizens. The first two official e-signatures were executed by the Prime Minister and the Minister of Communications, marking a pivotal milestone in the country's digital-government agenda. The rollout is grounded in the Electronic Signature and Electronic Transactions Law No. (78) of 2012 and the 2025 implementing instructions.

Twokeyok — the national platform for e-signatures

Twokeyok is Iraq's national digital trust platform, owned by the Iraqi Telecommunications and Post Company (ITPC), developed and marketed by Technology Source, and operating under the regulatory supervision of the Ministry of Communications. The platform empowers institutions to adopt trusted digital identities, electronic signatures and organizational seals in line with recognized international practices, strengthening digital sovereignty and reducing paper-based processes.

Legal and regulatory basis

• Law No. (78) of 2012 grants full evidentiary value to electronic signatures in civil, commercial and administrative transactions when specific safeguards are met (signer-only linkage, signer's sole control over the signing device, tamper-evidence, and procedures set by the Ministry).
• The state entity (SCIS/ITPC under the Ministry of Communications) oversees licensing of Certification Authorities, technical standards and market supervision.
• In May 2025, the Official Gazette (Issue 4826) published Instruction No. (1) of 2025 to facilitate implementation of the e-signature law, setting technical and compliance requirements.

Twokeyok's trusted services

Twokeyok provides six core trust services, supported by the Twokeyok Platform that streamlines digital signing and validation across institutional workflows.

1) Electronic Signature
Verifies the signer's identity on digital documents, ensuring secure transactions and preventing tampering.

2) Electronic Seal (E-Seal)
An organization's official digital signature that asserts institutional identity and strengthens the credibility of outgoing documents.

3) S-MIME Secure Email
Adds encryption and sender authentication to enterprise email for confidentiality and protected communications.

4) TLS/SSL Website Certificates
Enable encrypted HTTPS connections and domain/service authentication to safeguard user data and build website trust.

5) VPN Certificates
Provide secure, authenticated connectivity between networks and devices—ideal for sectors with stringent protection needs.

6) Code Signing Certificates
Ensure the integrity and publisher authenticity of software, installers and updates.

Twokeyok Platform (Transactions Orchestration)
A comprehensive platform that facilitates digital signatures and validations on documents, enabling secure administrative workflows and identity assurance across counterparties.

National and economic impact

• Legal certainty and trust: Clear recognition of qualified digital records.
• Operational efficiency: Faster processes and reduced costs across printing, archiving and in-person handling.
• Security and risk reduction: Strong identity and integrity across channels, data and software.
• Digital sovereignty: A national trust backbone governed within Iraq under competent public oversight.

Phased roadmap

Adoption will progress through controlled phases focused on stability, priority integrations and sectoral expansion. Official updates on capabilities and timelines will be communicated through Twokeyok's channels.

Conclusion

The e-signature launch lays the foundation for a secure, standards-based digital trust ecosystem in Iraq. Twokeyok's platform and services support government entities and businesses in delivering reliable, legally recognized digital transactions.