There are two signature types in AllEars.Vet, with different legal weight. When you sign a prescription or document, you choose which to use.
- Digital signature (ICP-Brasil): a qualified electronic signature (MP 2.200-2/2001) — the same legal validity as a handwritten signature, verifiable and tamper-evident. Requires an A1 digital certificate. Available on the Pro plan.
- Handwritten signature: a photo of your signature, converted to high contrast and stamped onto the document. Equivalent to a printed, hand-signed document — not a qualified signature and with no ICP-Brasil verification. Available on all plans; documents and prescriptions require a CRMV. It cannot be used on special-control or compounded prescriptions, which require the digital signature — on those types the method shows disabled in the signing dialog with the note "Unavailable for this prescription type".
Set up the certificate (once)
In Settings → Signatures, upload your A1 certificate (ICP-Brasil e-CPF, .pfx/.p12 file). It is stored encrypted and, on subsequent signatures, the app asks only for the password — which is never stored. On the same screen you can see holder and validity and remove the certificate.
A3 (token/card) and cloud certificates are not supported yet. The screen explains the certificate types and links to the official (ITI) page on where to obtain one.
Set up the handwritten signature
On the same Settings → Signatures screen, under Handwritten signature, upload a photo of your signature: sign with a dark pen on white paper, with good lighting and no shadows, framing only the signature. The app removes the background automatically and shows a high-contrast preview. If the preview comes out sideways or upside down (it happens with signatures taller than they are wide, such as a rubric with the name stacked over the CRMV), use the Rotate ↺ and Rotate ↻ buttons right below it: each tap turns it 90° from the original photo, with no loss of quality, and the chosen position is saved. Uploading a new photo goes back to the automatic positioning. Using it on documents and prescriptions requires a CRMV on your profile; without one (the front desk, for example), it only goes on payment receipts.
If you use Finance, the same section has a Use on payment receipts switch (on by default): receipts for payments you receive come out with your signature. When it is off, the receipt's line is left blank to sign by hand.
Signing a prescription or document
Tap Sign — the action lives in the ⋯ (more actions) menu and, on mobile, also in the prescription's or document's bottom panel. The ⋯ menu offers Sign while you are editing too: the app saves first and goes straight to signing. Choose the method: Digital signature (enter the certificate password, or use biometrics with quick signing) or Handwritten signature (no password). Common requirement: a CRMV registered on your profile.
The Sign button always shows, on every plan. If you haven't set up a handwritten signature yet, you can upload its photo right there on the signing screen and sign straight after, without leaving the prescription. On the Free plan, Digital signature is marked Paid plan: picking it explains what it offers and shows a See plans button.
On prescriptions, the ICP-Brasil certificate signature goes in the footer automatically: the stamp (text + QR) fills the signature area of the last page, right after the text, and never covers the prescription (if it doesn't fit, it moves to a new page). There is nothing to drag — with quick signing on, you tap Sign and confirm with biometrics. On a simple prescription, if you want to choose the spot, tick Adjust signature position in the signing dialog: the app opens the PDF and you drag the stamp to the spot you want, choosing its position and size. The app remembers the choice on that device; untick it to go back to the footer. Magistral and special-control prescriptions always keep the stamp fixed, in each copy's signature area.
On documents and uploaded PDFs, the app opens the PDF and you drag the stamp to the spot you want before confirming. The handwritten signature is placed the same way, by dragging the signature image. The stamp is only visual — legal validity comes from the signature embedded in the file, always verifiable.
The certificate-signed PDF shows a "Digitally signed by … — ICP-Brasil" stamp; the image-signed one shows your signature with your name, the signing date and the note "Scanned handwritten signature — no ICP-Brasil certification".
Quick signing (without typing the password every time)
The certificate password is the one thing we never keep on the server — it is what opens your .pfx. That is why, until now, you had to type it for every prescription. Quick signing solves that without changing the rule: the password is kept on your device, behind your biometrics, and the app uses it for you when signing. The server still receives the password on every signature and still stores none of it.
Three ways to enable it: the switch under Settings → Signatures (it asks for the certificate password right there to check it), while uploading the certificate for the first time (the password you just typed has already been checked), or from the signing screen itself. In all three the password is only stored once it has been proven — a mistyped password is never sealed onto the device.
What you use afterwards, depending on the device:
- iPhone and iPad: Face ID or Touch ID. The password lives in the device Keychain, never leaving it and never entering a backup.
- Android: fingerprint or face. The password is encrypted with a Keystore key the system only releases after your biometrics.
- Computer (browser): Touch ID on a Mac or Windows Hello on a PC, where the browser supports it. The browser keeps only the encrypted password; the key that opens it comes from the sensor itself, on every signature.
- Browser without biometrics: you can only keep the password unlocked for 60 minutes in that tab. It stays in memory and is gone when you close the tab.
When the release expires on its own (and the app asks for the password again):
- when a new fingerprint or face is enrolled on the device;
- when you replace or remove the certificate;
- after 30 days unused or 90 days since it was enabled;
- when you sign out.
To undo it right away, go to Settings → Signatures, section Quick signing, and tap Remove from this device. The release applies to that device only: enabling it on your phone does not enable it on your computer.
Renewing a prescription
When treatment continues and the prescription has expired, Renew issues the same prescription again dated today — so with a new validity window, a new number and a new QR. With quick signing on, it is one tap plus your biometrics; without it, one tap plus the password.
Where it lives: on a signed prescription, the Renew button in the header (on a computer) or in the ⋯ menu (on a phone).
On a simple prescription where you adjusted the stamp position, the renewal stamps it in the same place as the original, with no dragging. Otherwise the stamp goes in the footer, like any signature.
Renewing is not correcting. The original prescription stays valid until it expires and is not marked as superseded — whoever holds the old paper sees no warning, because nothing on it became wrong. Use Create new version when the content was wrong, and Renew when it was right and simply needs to apply again.
Two caveats:
- Special control asks for an extra confirmation, spelling out that you are issuing a new controlled document without a new consultation. It is a clinical decision, not a shortcut.
- An annulled prescription cannot be renewed — write a new one.
How the pharmacy checks authenticity (digital signature only)
- PDF: anyone can upload the file at validar.iti.gov.br — the Brazilian government confirms who signed and that nothing was tampered with.
- Paper: the signed PDF carries a QR Code and a short code that open a public AllEars.Vet validation page, even when the prescription is printed. Whoever scans it sees the signature details and can download the original signed PDF — handy for pharmacies checking a paper copy.
- Validate at the ITI without downloading the file: on the public page, the Validar assinatura no ITI button copies the PDF link and opens the validator — just tap Colar URL and paste it. Or, straight at validar.iti.gov.br, use Ler QR Code, scan the prescription's QR and type the code printed next to it: the ITI fetches the PDF and shows the result. It is the same printed QR as always. Annulled prescriptions are not handed to the ITI — whoever scans them sees our page with the notice.
Renewing signatures affected by the signer fault (signed up to Sep 29, 2026)
Up to Sep 29, 2026, a fault in our signer wrote a mandatory technical field of the ICP-Brasil signature (the signature policy identifier) incorrectly, and validar.iti.gov.br rejects those signatures ("Atributos obrigatórios: Reprovados") even though the certificate is valid. The fault was ours and it is fixed. If you were affected, a notice shows at the top of the app: tap Entenda e renove, confirm the certificate password (or use biometrics) and the app renews everything at once. The content, the QR and the validation code stay the same, and anyone opening the link already gets the renewed version. In the ITI validator, the signature date becomes the renewal date. Magistral and controlled prescriptions older than 30 days are not renewed — the new signature would count as a new date of issue; if still needed, issue a new prescription.
Send the prescription to the guardian
On a signed prescription, the ⋯ menu offers Send to the guardian: the app composes a message with a link that opens the prescription in the guardian portal, where they read it and download the PDF. It is the same portal access link (it does not expire, and issuing a new one is the only way to invalidate the previous). The public QR page stays available for the pharmacy to check the signature.
On a prescription that is not signed yet (for example, a magistral that already got its number from Generate number), the same item shows as Sign and send. It opens the usual signing flow and, once the prescription is signed, goes straight to sending it to the guardian. The reason: guardians only see signed prescriptions, and pharmacies don't accept an unsigned one.
Pharmacy dispensation (marking the prescription as filled)
On the same public QR/code page, the pharmacy finds a "Register dispensation" section: when selling the medication, the pharmacist fills in the pharmacy (name and CNPJ), the responsible professional (name and CRF) and notes, and registers the prescription as dispensed. From then on the page shows "Prescription already dispensed", with date and establishment — preventing the same digital prescription from being filled again at another pharmacy. The signed PDF's footer carries a "Para dispensação" instruction pointing to this flow.
When the dispensation is registered, you get a notification in the app and the prescription shows a "Dispensed" badge in the Prescriptions list and on the prescription itself. The record is single-use: only the first dispensation counts, and the signed PDF remains available for the pharmacy's digital retention.
SNCR electronic numbering (ANVISA)
Available to every vet in Brazil, in the web version of the app (browser): Settings → Signatures has an SNCR — Electronic numbering (ANVISA) section that links your gov.br account to Brazil's National Prescription Control System (RDC 1.000/2025). Tap Request numbers via gov.br: you sign in with gov.br, come back to the app and receive a block of official numbers (1,000 per request, ANVISA limit of 3 per month). Each new request goes through the gov.br login again, as ANVISA requires. Your signed special-control prescriptions automatically carry the official SNCR number instead of the internal numbering. When the stock runs out, the internal numbering still applies. Requires a registered CRMV with an active council registration.
Signed prescriptions are immutable
Once signed, a prescription cannot be edited or deleted. To change it, use Create new version: the app creates a draft from the original (which is marked as superseded) for you to adjust and sign again. The old version's public validation page (from the QR) then shows a "superseded prescription" notice — anyone scanning an outdated paper copy finds out. Mima follows the same rule — if you ask her to change a signed prescription, she creates the new version automatically.
Annulling a prescription issued by mistake
Create new version works when there is a correct prescription to put in its place. When there isn't (you signed it for the wrong patient, got the dose wrong, or the prescription was never delivered), use Annul prescription.
Where it lives: in the ⋯ menu of the open prescription, and on the prescription card inside the patient history, via the Annul button. The app asks for a reason, which is required and is recorded along with who annulled it and when.
What changes after annulling:
- The prescription gets the Annulled badge in the Prescriptions list and on the prescription itself.
- It leaves the patient timeline. A "Show N annulled prescription" row appears at the end of the history; tap it whenever you need to see the prescription again. The record is never deleted, it just stops cluttering the clinical history.
- The public QR page shows "Prescription annulled" in red along with the reason, and pharmacies can no longer register a dispensation. That is the part that actually protects: if the wrong paper copy reaches the counter, whoever validates the QR sees the warning.
- The signed PDF remains available for reference.
Two important rules: annulling cannot be undone, and a prescription already dispensed by a pharmacy can no longer be annulled, because the medication has already left the counter. There is no time limit on annulling: you are the responsible technician for the document, and the record keeps the reason.
Why isn't the prescription simply deleted? Because it is a legal document with retention duties, and the printed QR must keep answering for paper already out of the clinic. Deleting the record would remove the very warning that protects the pharmacy.