Electronic document management basics

How an electronic document differs from a scan, how a digital signature works, keeping your key safe, templates, versions, approvals and archiving.

Applications, contracts, invoices, orders, certificates: not long ago all of these were prepared on paper, signed by hand, stamped and sent by courier or post. Today a growing share of them is created, signed and stored electronically. But an “electronic document” is not simply a Word file or a photo taken on a phone. In this guide we cover the basics of electronic document management: how an electronic document differs from a scanned copy, what an electronic digital signature (EDS) is and how it works, how to store your signature key safely, which systems you are likely to meet in Uzbekistan, and how to keep documents in order inside an organisation: templates, file naming, versions, approval chains, comments and tracked changes, PDF and how to protect it. We then look at archiving, security and common mistakes, and finish with a practice exercise and a checklist.

Electronic document versus scanned copy: what is the difference

Many people scan a paper document or photograph it on their phone and consider the result an “electronic document”. In fact these are two different things.

A scanned copy is an image of a paper document. It is handy for sharing information: for example, sending a copy of your passport to the HR department or attaching a copy of your diploma when applying to study. But a scan on its own does not prove who created the document or that it has not been changed since. Copying a signature and stamp from an image onto another document, or altering figures in a graphics editor, is not difficult.

An electronic document is one created in electronic form from the start and confirmed in the prescribed way. It is usually signed with an electronic digital signature. The signature links the document to its author and makes it possible to check whether the document has been altered after signing.

A simple example. Dilshod runs a small workshop. He typed a contract agreed with a client in Word, printed it, signed it, scanned it and sent it over. For the client this is only a copy to read: the original is still the paper one. If the contract were signed electronically with an EDS, the signed file itself would be the original, and there would be no need to carry a paper copy around.

Remember: which documents can be accepted in electronic form, and which still require a paper original, depends on the law and on the requirements of each organisation. If in doubt, ask the receiving party in advance.

How an electronic digital signature (EDS) works

An EDS is the electronic counterpart of a handwritten signature. Under the hood it relies on complex mathematics, but the idea itself can be explained in plain language.

The idea of two keys

Every EDS holder has two keys that are linked to each other:

The private key is kept only by its owner. Documents are signed with this key. It must never be handed to anyone.
The public key can be known by anyone. It is used to check the signature.

Think of it this way: the private key is a special stamp that only you possess, and the public key is a sample of its impression. Anyone can compare an impression with the sample and confirm that the stamp really is yours, but nobody can use the sample to stamp something in your name.

The stages of signing and checking

The software calculates a short “digital fingerprint” of the document. If even one letter or digit in the document changes, the fingerprint comes out completely different.
This fingerprint is signed with the private key and attached to the document.
The recipient’s software checks the signature using the public key and recalculates the document’s fingerprint.
If they match, the document was signed by the holder of that key and has not been changed since. If they do not, the software warns that the signature is invalid.

The public key, together with the owner’s details, is kept in a certificate. The certificate is issued by an authorised centre and confirms who the key actually belongs to. A certificate has a validity period: once it expires, the key can no longer be used for signing and has to be renewed.

An important distinction: an EDS does not hide the content of a document; it only confirms the author and integrity. Hiding the content from outsiders is a different task, known as encryption.

Keeping your EDS key safe

A document signed with your EDS key is treated as if you had signed it in person. That is why the key deserves at least as much care as your passport or bank card.

A strong password. The key is protected by a password. Avoid easy-to-guess ones such as a date of birth, “12345678” or your phone number. Do not write the password on the USB stick that holds the key.
A separate storage device. It is safer to keep the key not on the desktop or in the Downloads folder but on a separate USB stick or a special secure device (a token). Plug the stick in only while you are signing.
Never hand it over. Not a colleague, not the accountant, not a relative, not even your manager should sign with your key. If someone else in the organisation needs to sign, they get a key of their own.
Never send it by messenger or email. Passing the key file through Telegram, email or a cloud folder takes it out of your control.
Never use someone else’s computer. Do not use the key in an internet café or on an unfamiliar computer.
Keep an eye on the expiry date. Put a calendar reminder for when the certificate expires and renew it in good time. Otherwise you may find yourself unable to sign on the very day an important document is due.
If you lose it, act at once. If the USB stick goes missing or you suspect the key has fallen into the wrong hands, contact the centre that issued it and have it revoked.

When an employee leaves, matters relating to their key also need to be settled: the key belongs only to its owner, so no copies of it should remain on the organisation’s computers.

Systems in Uzbekistan: a general overview

In Uzbekistan you will come across electronic documents in several places in everyday life. What follows is only a general overview: the exact procedures, requirements and options may change over time.

The Single Portal of Interactive Public Services (my.gov.uz). Through this portal you can apply online for many public services: obtaining certificates, registration-related requests and more. Some services may require identity verification or an EDS.
The E-IMZO software. A program for working with an EDS key on a computer. Once it is installed, websites and systems in the browser can use your key to sign documents. Download it only from the official source.
Electronic document exchange between companies. For exchanging electronic invoices, contracts, acceptance certificates and similar documents between organisations and entrepreneurs, there are dedicated operator services. An organisation chooses one of them according to its needs.

The most important advice: always check current requirements with an official source, such as the website of the relevant government body, the official portal or your organisation’s accounts department. A social media post or an acquaintance saying “it was like this last year” is no basis to go on.

Document flow inside an organisation

Many documents are prepared, discussed and approved inside an organisation before they ever go out. When this process is orderly, time is saved and mistakes become rarer.

Templates

Create templates for documents you prepare often: applications, orders, internal memos, acceptance certificates, reports. A template has the organisation’s details, heading structure, font and the fields to be filled in (for example, [DATE], [FULL NAME]) set out in advance. Keep templates in one shared folder and let only the person responsible change them.

File naming

A good file name tells you what is inside before you open it. A simple rule: date (year-month-day) + document type + short subject + version. For example: “2026-10-05_Contract_Lease_v2.docx”. With the date at the start, files in a folder sort in chronological order. Avoid names such as “New document (3).docx” or “final_really_final.docx”. Folder structure is covered in more detail in the article on keeping your files in order.

Versions

A document is edited several times. At every important stage, increase the version number: v1, v2, v3. Mark the final approved copy as “final” or “approved” and keep it separately. Google Docs and the cloud version of Word save the change history automatically: in Google Docs, File → Version history → See version history lets you view and restore any earlier state.

The approval chain

The approval chain is the list of people a document has to pass through before it is approved. For example, a service contract in a hypothetical organisation: the employee who drafts it → head of department → lawyer → accountant → director. Write the chain down in advance: who reviews the document, in what order and within what time frame. At every stage, record who approved it, when and with what comment; a simple table or a route in an electronic document system is enough for this.

Comments, tracked changes and PDF

Working together in Google Docs

In Google Docs several people can edit a document at the same time. Select some text and leave a comment via Insert → Comment (Ctrl + Alt + M). To suggest a change rather than make it yourself, switch the mode in the top-right corner from Editing to Suggesting: changes appear in colour, and the document owner accepts (Accept) or rejects (Reject) them. Access rights and collaboration are covered in more detail in the article on collaborating in Google Docs.

Tracking changes in Word

When Review → Track Changes is switched on in Word, every word added or deleted is marked. Add a comment with Review → New Comment. When going through the edits, use Review → Accept or Reject. Before sending a document outside, make sure all changes and comments have been resolved; otherwise the recipient will see your internal discussion too. You can check this via File → Info → Check for Issues → Inspect Document.

Exporting to PDF and protecting it

Send finished documents as PDF: the format looks the same on any device. In Word choose File → Save As and select PDF as the type; in Google Docs use File → Download → PDF Document.

Ways to protect a PDF:

A password to open it. In Word’s PDF save dialogue, click Options and tick “Encrypt the document with a password”. Share the password not in the same email as the document but through another channel, for example by phone.
Restricting editing. Some PDF programs let you block copying and changes. But this does not replace an EDS: only an electronic signature confirms the author and integrity.
Removing personal details. The document should not contain unnecessary personal data such as a passport number or home address.

Archiving and retention periods

The document has been signed and sent, but that is not the end of its life. You may need to find it later, show it during an inspection or use it as evidence in a dispute.

Retention period. Different types of documents are kept for different lengths of time. This is set by the organisation’s policy and by law. Your organisation should have a list of retention periods; if it does not, draw one up together with the accounts department or a lawyer.
Keeping the original format. Store a document signed with an EDS together with its signature, in the form the system produced. If you convert it to another format or print it, the ability to check the signature may be lost.
An orderly archive. Organise the archive by year and document type: “2026 / Contracts”, “2026 / Invoices”.
Backups. If the archive sits on a single computer, a disk failure or a virus can wipe out everything. Make regular backups and keep them in a separate place.
Access rights. Only the staff who genuinely need it should have access to the archive.

Security: phishing and fake invoices

Employees who handle electronic documents are a convenient target for fraudsters. The most common trick is phishing: a fake email or message sent in the name of an official body or a partner.

Typical situations:

An email saying “You have received a new invoice, open the attachment to view it”, with an .exe, a .zip or a document with macros attached.
A message saying “Your EDS key is about to expire, follow the link and enter your password to renew it”.
An email in a partner’s name: “Our bank details have changed, please send the payment to the new account”.
A website made to look like an official portal, with an address that differs by a single letter.

Rules for staying safe:

Check the sender’s address carefully, not just the display name.
Go to official portals and systems not via a link in an email but by typing the address into the browser yourself or using a saved bookmark.
Nobody will ever ask for your EDS password or key file by email or messenger.
Confirm any message about changed bank details by phoning a number you already know.
Do not open a suspicious email; show it to the person responsible.

The general rules are covered in detail in the article on online safety.

Common mistakes, practice exercise and checklist

Common mistakes

Treating a scanned copy as the original. Find out in advance which form an official procedure requires.
Handing your EDS key to a “trusted” colleague. You answer for every signature they make with it.
Writing the password on the USB stick or a sticky note. Lose the stick, and both the key and the password are in someone else’s hands.
Not tracking the certificate’s expiry. You may be unable to sign on the day that matters most.
Several “final” versions. Nobody knows which copy was approved.
Sending with changes and comments still in. The internal discussion leaks outside.
Re-saving a signed document. If the file changes, the signature becomes invalid.
An archive on a single computer. Without a backup, the archive can be lost in a day.

Practice exercise

This exercise is hypothetical: no EDS key or special system is needed. Imagine that Nigora works as an administrator at a hypothetical training centre and wants to bring order to the service agreements signed with learners.

In Word or Google Docs, draw up a contract template: a heading, the parties and fields to fill in such as [DATE] and [FULL NAME].
Save the template in a “Templates” folder as “2026-10-05_Template_Contract_v1”.
Make a copy of the template and fill it in for one hypothetical learner.
Turn on Track Changes or Suggesting mode and ask a colleague to make two or three edits and leave one comment.
Accept or reject the edits, reply to the comment and resolve it.
Write the approval chain down in a simple table: who, when, outcome.
Export the final version to PDF and protect it with a password.
Put the PDF and the original file in the “2026 / Contracts” folder and make a backup.

Checklist

It is clear which documents are needed electronically and which on paper.
The EDS key is on a separate device, with a strong password, held only by its owner.
The certificate’s expiry date is in the calendar.
Templates are kept in one place and file names follow one pattern.
The version and approval history of every document is known.
Before anything goes out, changes and comments are removed and the PDF is ready.
The archive is organised by year and type, and there is a backup.
Suspicious emails and links are not opened without checking.

Electronic document management cuts down on paper and queues, but it calls for order and care. Apply these rules to a few documents, and they will quickly become habits.

If you would like to learn office software and digital skills systematically with a teacher, take a look at our association’s free computer literacy programme and other training programmes. When you are ready, submit an application and our specialists will get in touch.