Blog post

Cryptographically sign PDFs with Nutrient Document Web Services API on Zapier

In this tutorial, you’ll learn how to cryptographically sign PDF documents using the Nutrient Document Web Services API on Zapier. You’ll set up an automated workflow that watches a Google Drive folder for new PDFs, signs them with an invisible CAdES signature, and saves them back to the drive.

Illustration: Cryptographically sign PDFs with Nutrient Document Web Services API on Zapier

What is Zapier?

Zapier is a no-code automation platform that connects your favorite apps and services. You can build workflows — called Zaps — that automate repetitive document handling tasks, like uploading, converting, or signing PDFs.

What is the Nutrient API?

Nutrient Document Web Services API enables powerful, flexible document processing in your workflows. With a free account, you get 100 credits to run document actions including:

What you’ll need

  • A Zapier account (a pro plan is necessary for multi-step Zaps)

  • A Google Drive account

  • A Nutrient API key — sign up here

  • A PDF file in a Google Drive folder

Step 1 — Trigger a new file in a Google Drive folder

  1. Select Google Drive as the trigger app.

Zapier trigger app showing Google Drive selected

  1. Choose the New File in Folder trigger event.

Trigger event dropdown with ‘New File in Folder’ selected

  1. Connect your Google Drive account.

  2. Configure the folder you want to watch (e.g. pdf-signing-inbox):

Google Drive folder selected as input folder

  1. Test the trigger with a sample PDF file.

Zapier test showing valid PDF file trigger

Step 2 — Cryptographically sign the PDF action (Nutrient API)

  1. Select Nutrient Document Web Services API as the action app.

Select Nutrient API as the action step

  1. Choose the Cryptographically Sign PDF With Invisible Digital Seal action.

Choose the invisible signing action event

  1. Connect your Nutrient account using your API key.

Paste your Nutrient API key

You can find your key in the Nutrient dashboard.

Find and copy your API key from the dashboard

  1. Fill out the configuration:

  • PDF File URL — From step 1 (Google Drive trigger).

  • Output File Name — Optional (e.g. signed_contract.pdf).

This action uses a CAdES digital signature that’s invisible to the viewer but validates in standard PDF readers like Adobe Acrobat.

Form showing the PDF file URL and output filename for signing

  1. Test the step to verify successful signing.

Test result showing the PDF was signed successfully

Step 3 — Upload the signed PDF to Google Drive

  1. Add another step and select Google Drive again. Choose Upload File as the action event.

Choose Google Drive for file upload

  1. Map the file from the Nutrient API step to the File field. Select a folder like pdf-signing-output as the destination.

Configure the Drive upload step with output file

If you’re using the same folder for input and output, Zapier may show a loop warning. Avoid this by selecting a different upload folder.

  1. Test the upload to confirm it works.

Test step showing signed file was uploaded to Drive

Conclusion

With this Zap, you’ve automated the cryptographic signing of PDF documents using an invisible seal that can be verified by any standards-compliant PDF reader. This is perfect for workflows requiring proof of authenticity, non-repudiation, or internal compliance.

You can expand this workflow with additional steps for redaction, PDF/A conversion, or key-value pair extraction.

Author
Hulya Masharipov
Hulya Masharipov Technical Writer

Hulya is a frontend web developer and technical writer at Nutrient who enjoys creating responsive, scalable, and maintainable web experiences. She’s passionate about open source, web accessibility, cybersecurity privacy, and blockchain.

Free trial Ready to get started?
Free trial