There are two signature types in AllEars.Vet, with different legal weight. When you sign a prescription or document, you choose which to use.
- Digital signature (ICP-Brasil): a qualified electronic signature (MP 2.200-2/2001) — the same legal validity as a handwritten signature, verifiable and tamper-evident. Requires an A1 digital certificate. Available on the Pro plan.
- Handwritten signature: a photo of your signature, converted to high contrast and stamped onto the document. Equivalent to a printed, hand-signed document — not a qualified signature and with no ICP-Brasil verification. Available on all plans (a CRMV is enough). It cannot be used on special-control or compounded prescriptions, which require the digital signature — on those types the method shows disabled in the signing dialog with the note "Unavailable for this prescription type".
Set up the certificate (once)
In Settings → Signatures, upload your A1 certificate (ICP-Brasil e-CPF, .pfx/.p12 file). It is stored encrypted and, on subsequent signatures, the app asks only for the password — which is never stored. On the same screen you can see holder and validity and remove the certificate.
A3 (token/card) and cloud certificates are not supported yet. The screen explains the certificate types and links to the official (ITI) page on where to obtain one.
Set up the handwritten signature
On the same Settings → Signatures screen, under Handwritten signature, upload a photo of your signature: sign with a dark pen on white paper, with good lighting and no shadows, framing only the signature. The app removes the background automatically and shows a high-contrast preview. A CRMV is all you need.
Signing a prescription or document
Tap Sign — the action lives in the ⋯ (more actions) menu and, on mobile, also in the prescription's or document's bottom panel. The ⋯ menu offers Sign while you are editing too: the app saves first and goes straight to signing. Choose the method: Digital signature (enter the certificate password) or Handwritten signature (no password) — in both cases the app opens the PDF and you drag the signature/stamp to the exact spot, choosing position and size. Common requirement: a CRMV registered on your profile.
When signing with the ICP-Brasil certificate on documents, simple prescriptions and uploaded PDFs, the app opens the PDF and you drag the signature stamp (text + QR) to the spot you want, choosing its position and size, before confirming. Magistral and special-control prescriptions keep the stamp in a fixed position. The stamp is only visual — legal validity comes from the signature embedded in the file, always verifiable.
The certificate-signed PDF shows a "Digitally signed by … — ICP-Brasil" stamp; the image-signed one shows your signature with your name, the signing date and the note "Scanned handwritten signature — no ICP-Brasil certification".
Quick signing (without typing the password every time)
The certificate password is the one thing we never keep on the server — it is what opens your .pfx. That is why, until now, you had to type it for every prescription. Quick signing solves that without changing the rule: the password is kept on your device, behind your biometrics, and the app uses it for you when signing. The server still receives the password on every signature and still stores none of it.
Three ways to enable it: the switch under Settings → Signatures (it asks for the certificate password right there to check it), while uploading the certificate for the first time (the password you just typed has already been checked), or from the signing screen itself. In all three the password is only stored once it has been proven — a mistyped password is never sealed onto the device.
What you use afterwards, depending on the device:
- iPhone and iPad: Face ID or Touch ID. The password lives in the device Keychain, never leaving it and never entering a backup.
- Android: fingerprint or face. The password is encrypted with a Keystore key the system only releases after your biometrics.
- Computer (browser): Touch ID on a Mac or Windows Hello on a PC, where the browser supports it. The browser keeps only the encrypted password; the key that opens it comes from the sensor itself, on every signature.
- Browser without biometrics: you can only keep the password unlocked for 60 minutes in that tab. It stays in memory and is gone when you close the tab.
When the release expires on its own (and the app asks for the password again):
- when a new fingerprint or face is enrolled on the device;
- when you replace or remove the certificate;
- after 30 days unused or 90 days since it was enabled;
- when you sign out.
To undo it right away, go to Settings → Signatures, section Quick signing, and tap Remove from this device. The release applies to that device only: enabling it on your phone does not enable it on your computer.
Renewing a prescription
When treatment continues and the prescription has expired, Renew issues the same prescription again dated today — so with a new validity window, a new number and a new QR. With quick signing on, it is one tap plus your biometrics; without it, one tap plus the password.
Where it lives: on a signed prescription, the Renew button in the header (on a computer) or in the ⋯ menu (on a phone).
On a simple prescription, the signature stamp lands in the same place you positioned it on the original — you drag it once, and every renewal of that prescription inherits the position. This applies to prescriptions signed from this version on; earlier ones use the default position.
Renewing is not correcting. The original prescription stays valid until it expires and is not marked as superseded — whoever holds the old paper sees no warning, because nothing on it became wrong. Use Create new version when the content was wrong, and Renew when it was right and simply needs to apply again.
Two caveats:
- Special control asks for an extra confirmation, spelling out that you are issuing a new controlled document without a new consultation. It is a clinical decision, not a shortcut.
- An annulled prescription cannot be renewed — write a new one.
How the pharmacy checks authenticity (digital signature only)
- PDF: anyone can upload the file at validar.iti.gov.br — the Brazilian government confirms who signed and that nothing was tampered with.
- Paper: the signed PDF carries a QR Code and a short code that open a public AllEars.Vet validation page, even when the prescription is printed. Whoever scans it sees the signature details and can download the original signed PDF — handy for pharmacies checking a paper copy.
Send the prescription to the guardian
On a signed prescription, the ⋯ menu offers Send to the guardian: the app composes a message with a link that opens the prescription in the guardian portal, where they read it and download the PDF. It is the same portal access link (it does not expire, and issuing a new one is the only way to invalidate the previous). The public QR page stays available for the pharmacy to check the signature.
Pharmacy dispensation (marking the prescription as filled)
On the same public QR/code page, the pharmacy finds a "Register dispensation" section: when selling the medication, the pharmacist fills in the pharmacy (name and CNPJ), the responsible professional (name and CRF) and notes, and registers the prescription as dispensed. From then on the page shows "Prescription already dispensed", with date and establishment — preventing the same digital prescription from being filled again at another pharmacy. The signed PDF's footer carries a "Para dispensação" instruction pointing to this flow.
When the dispensation is registered, you get a notification in the app and the prescription shows a "Dispensed" badge in the Prescriptions list and on the prescription itself. The record is single-use: only the first dispensation counts, and the signed PDF remains available for the pharmacy's digital retention.
SNCR electronic numbering (ANVISA)
Rolling out gradually, account by account: once it is enabled for yours, Settings → Signatures shows an SNCR — Electronic numbering (ANVISA) section that lets you connect your gov.br account to Brazil's National Prescription Control System (RDC 1.000/2025). Once connected, you request blocks of official numbers (1,000 per request, ANVISA limit of 3 per month) and your signed special-control prescriptions automatically carry the official SNCR number instead of the internal numbering. When the stock runs out, the internal numbering still applies. Requires a registered CRMV with an active council registration.
Signed prescriptions are immutable
Once signed, a prescription cannot be edited or deleted. To change it, use Create new version: the app creates a draft from the original (which is marked as superseded) for you to adjust and sign again. The old version's public validation page (from the QR) then shows a "superseded prescription" notice — anyone scanning an outdated paper copy finds out. Mima follows the same rule — if you ask her to change a signed prescription, she creates the new version automatically.
Annulling a prescription issued by mistake
Create new version works when there is a correct prescription to put in its place. When there isn't (you signed it for the wrong patient, got the dose wrong, or the prescription was never delivered), use Annul prescription.
Where it lives: in the ⋯ menu of the open prescription, and on the prescription card inside the patient history, via the Annul button. The app asks for a reason, which is required and is recorded along with who annulled it and when.
What changes after annulling:
- The prescription gets the Annulled badge in the Prescriptions list and on the prescription itself.
- It leaves the patient timeline. A "Show N annulled prescription" row appears at the end of the history; tap it whenever you need to see the prescription again. The record is never deleted, it just stops cluttering the clinical history.
- The public QR page shows "Prescription annulled" in red along with the reason, and pharmacies can no longer register a dispensation. That is the part that actually protects: if the wrong paper copy reaches the counter, whoever validates the QR sees the warning.
- The signed PDF remains available for reference.
Two important rules: annulling cannot be undone, and a prescription already dispensed by a pharmacy can no longer be annulled, because the medication has already left the counter. There is no time limit on annulling: you are the responsible technician for the document, and the record keeps the reason.
Why isn't the prescription simply deleted? Because it is a legal document with retention duties, and the printed QR must keep answering for paper already out of the clinic. Deleting the record would remove the very warning that protects the pharmacy.