How we keep your documents safe.

Your firm's data stays yours

Many firms use Signpane, and each one sees only its own clients, documents and signing records. Every record belongs to one firm, and the app checks the firm on every read and write. We test for each feature that one firm cannot see or change another firm's records, files, signing links or verify results.

Your web address belongs to your firm. A signing link or login from another firm does not work on it.

Signing links

• Each signer gets their own link. We store only a scrambled form (a hash) of it, so even a copy of our database cannot be used to sign.
• A link stops working once that signer has finished, or when a newer reminder replaces it.
• For sensitive documents you can also ask for an access code, given to the signer by phone or text. Wrong guesses are counted and limited.

Sign-in

Staff and clients sign in with a six-digit code sent to their email. There are no passwords to reuse or steal. We limit how many codes can be asked for, and how many guesses can be made.

A record of who signed what

• Every step of a signature request (sent, opened, signed, declined, reminded) is recorded once and never changed.
• The audit certificate records the fingerprint (SHA-256) of the document before and after signing.
• If the document changes after it was sent, the request stops, so nobody can sign a different version.
• Anyone holding a signed copy can check it on our verification page. The check runs in their browser, so the document is never uploaded.

In transit

Every page and file goes over an encrypted connection (HTTPS).

Questions

If your firm needs more detail for a client or an audit, email [email protected]. To report a security problem, email the same address.