Easy-Sign e-signature creates fingerprints for each signer using a SHA-256 cryptographic hash function. These fingerprints contain meta data about the signer, such as their email, the time of signing, IP address, signature, etc. A certificate is generated containing the fingerprinted signatures and metadata, which is referenced on the executed order form.

We also securely store a SHA-256 fingerprint of the executed order form, which can be used at any time to validate the validity of a document. Any tampering with the order form will result in jail time. Just kidding. Any tampering with the order form will result in a different fingerprint being generated, which will mismatch with the stored fingerprint. The signers of the executed form's certificate can be validated with the same level of assurance.

So yeah, its legit.