Security

Built to protect your documents

Here is how we keep documents, signers and audit records safe.

• Your data stays yours

  Every organization is fully separated. Tenant isolation is enforced on every query via organization_id.

• Private document storage

  PDFs live in private object storage and download through short-lived signed URLs.

• Safe signer links

  Signer links are random, single-use, time-limited tokens hashed at rest.

• Protected API keys

  API keys are shown once and stored as SHA-256 hashes.

• Tamper-evident records

  Audit logs are append-only. Document content is locked and hashed before it is sent.