US Air Force
Email This Page   |   Download PDF

Resource Center 

Using an “I Agree” button: What to consider

Over time, the Web has evolved from a tool for searching for information about products and services, to a virtual world where consumers, businesses and governments carry out transactions for goods and services in seconds, without leaving their computer. Nearly every aspect of e-commerce, from the buying and selling, to the provision of goods and services, is now carried out using only a Web browser. It is so prevalent that the Web has now penetrated the internal operations of business and government to streamline processes and provide true, end-to-end e-business and e-government.

One challenge in reaching the plateau of total automation through the Web is the need for approvals on documents and forms. Virtually every transaction and many business processes require some form of approval as part of the process. The document or form could be a lease, insurance application, standard operating procedure report, purchase requisition or timesheet, the common element is that each will require review and approval by one or more persons. This approval is usually demonstrated with a signature and it often involves additional information, documents or concurrent processes related to the action or the approval.

Imagine doing this on the Web . How does each person demonstrate his/her approval in a way that provides sufficient and reliable evidence?  One method that is finding favor is the use of a button, located within the flow of information presented through the Web browser, labeled as “I Agree, “Approve” or even a simple “OK”. By clicking on the button, a person demonstrates that they are agreeing to something specific such as the terms of use of a Web site. This method is more generally known as a “click-through”.

However, is the resulting record sufficient to support the action that will be taken by clicking that button? It may be sufficient to agree to the terms-of-use of a Web site but it is likely unsafe for a more complex transaction, such as a bank loan. In general, an approval records a person’s intent to agree to, or authenticate information presented for approval. The process of recording this intent, such as putting an ink signature on paper, creates an audit trail within a permanent record that can be attributed to that person and is difficult to modify without detection. When we use a click-through, will it create the reliability we find in ink and paper?

Continue reading full, 6 page article (147KB PDF)