Security you can explain to the auditor and to legal.
Nothing here is a marketing promise. It is what the product does, described the way a vendor questionnaire asks.
Evidence and audit
- Signature evidence
- Identity confirmation, date and time, device and IP, acceptance of the electronic medium, and the certificate and hashes embedded in the PDF.
- Audit trail
- Every action is tied to who did it, when, from which device and network, with approximate location when available. Exportable as CSV.
- Public verification
- A public validator and the document’s QR check the file’s authenticity, with no account needed.
Data protection and access
- Privacy and retention
- Retention periods by category, recorded disposal, a documented legal basis and a public privacy policy.
- Access control
- Groups and document classes set who can view, download, share and approve. Sessions lock on inactivity, with a screen PIN.
- Approval for sensitive actions
- Sending, downloading and sharing can require approval, and every decision stays in the trail.
Infrastructure and transparency
- Encrypted data
- Files encrypted at rest and in transit.
- Data resilience
- Automatic encrypted backups, stored outside the main environment.
- Protected infrastructure
- Modern TLS, strict security headers and per-route request limits.
Vendors by category, where data is hosted and what we do when something fails are on the app’s trust page.
Open the app's trust page