Encryption
Traffic is protected with TLS 1.2+ and stored data is encrypted at rest with AES-256.
SECURITY
Security at Signatuz
Signed documents can become legal evidence. We design the platform to protect their confidentiality, integrity and availability.
Document integrity
Completed PDFs use PAdES-compatible controls and RFC 3161 timestamps where configured, so later changes can be detected.
Audit evidence
Relevant signing events retain timestamps, IP addresses, user-agent information and configured identity-verification events.
EU infrastructure
Production infrastructure and customer data are hosted in the European Union, with encrypted backups and isolated environments.
Access control
Organisation isolation, role-based permissions and session controls restrict who can view and send documents.
Identity options
Workflows can add email access, one-time SMS codes and optional KYC checks before signing.
Security claims should be verifiable
Compliance with a legal framework and third-party certification are different things. We publish the controls available today separately from certifications that remain on the roadmap.
See compliance and roadmapSECURITY.TXT
Email security@signatuz.appResponsible disclosure
If you believe you have found a vulnerability, contact our security team. Do not access or alter another customer’s data and give us reasonable time to investigate before publication.