Check who holds encryption password for escrow key. Check the regime for access to signing server.