Private storage
Files are kept in private storage, encrypted at rest and in transit. Nothing is public. Every download is checked against your permissions first, then served through a short-lived link.
How we store, protect and hand out your agreements — and what we never do with them.
Files are kept in private storage, encrypted at rest and in transit. Nothing is public. Every download is checked against your permissions first, then served through a short-lived link.
Completed documents are sealed with a PAdES long-term signature and a trusted timestamp. Any change after signing breaks the seal. Each one comes with a certificate of completion. See a sample.
Two-step sign-in, single sign-on (SAML) and automatic user provisioning (SCIM) for company accounts. Signers don’t need an account; an envelope can also ask them for a text-message code or an access PIN.
People see only their own documents, what’s shared with them, and what their role allows. System administrators manage users but can’t open document content. When an admin does open a document, it’s recorded in the activity log.
Your account sets how long completed documents are kept (7 years by default). Legal holds stop deletion — by anyone, or by retention — until they’re released by someone with permission.
Card and bank details are turned into a token in your browser and sent straight to our payment processor. We keep only the token and the last four digits.
No advertising, analytics or tracking cookies, and no third-party trackers. Only the storage the service needs to work.
Please email security@signanything.com with the details. We’ll reply and keep you posted until it’s fixed. Please don’t test against other customers’ accounts or data.