How to get your qualified digital signature in Panamá

Before you issue your first electronic invoice you need one prerequisite that does not depend on the software: a qualified digital signature. It is the digital equivalent of your handwritten signature and the only mechanism the DGI accepts to validate that a document was issued by the right taxpayer.

What is it and what does it do?

A qualified digital signature (also called an “advanced signature” or “qualified digital certificate”) is a certificate issued by a certification authority accredited by the Panama Public Registry. It contains your RUC, your verified identity and a private cryptographic key that lives only on the device you control.

When your PAC submits a document to the DGI, it signs it with your private key. That proves two things: that the issuer is who they say they are, and that the content was not altered after being signed.

Authorized certification authorities

The Electronic Signature Certification Entities (ECFE) approved in Panamá include the National Directorate of Electronic Signature (a unit of the Public Registry) and licensed private operators such as Quanti and Firma Electrónica Panamá. The official list is published by the Public Registry and may change over time, so verify it before paying.

Cost and validity

Approximate one-time cost: B/.50 (varies slightly across issuers).
Validity: 2 to 4 years depending on the provider.
Renewal: similar process to the initial issuance, with identity validation.

This is not a recurring monthly cost: you pay once and can issue throughout the certificate’s validity.

Typical documentation

For a legal entity you will need:

ID or passport of the legal representative.
Current Public Registry certificate of the company.
Articles of incorporation (in some cases).
RUC and Aviso de Operación.

For an individual taxpayer, a national ID and RUC are usually enough.

Process steps

Pick an authorized ECFE from the official list.
Request an appointment (in person or online depending on the issuer) for identity verification.
Submit the documentation and pay the fee.
Receive the certificate as a PKCS#12 (.p12) file or on a physical USB token, depending on your preference.
Provide the certificate or its password to your PAC/platform so it can sign the XML documents.

Security recommendations

Never share the full .p12 file with anyone who isn’t actively managing your signature. With that file and the password, whoever holds it can sign documents in your name.
Make a safe backup of the file — if you lose it, you must buy a new certificate.
Use strong passwords (12+ characters, mixed types).
Revoke the certificate immediately if you suspect it was compromised; the process is on the issuer’s website.

Can I reuse a signature obtained for other purposes?

Yes, as long as it is qualified and still valid. Many professionals already had certificates for procedures before the Social Security Office, Panama Pacífico or the MEF. If that’s the case, it will likely work for SFEP too — confirm with your PAC that the certificate is on the DGI’s accepted CA list.

How FacturaHQ integrates it

In FacturaHQ you upload your .p12 certificate once during configuration. The file is stored encrypted with KMS-grade standards on Azure, and is used only to sign each document transmitted through Alanube. Our team can also walk you through obtaining your signature over a video call if it’s your first time.

With the signature in hand, issuing a valid electronic invoice takes seconds. Without it, no software in the world can do it for you.