Skip to content
Get started

Security and trust

Electronic signature security and data protection

Electronic signature security comes down to three things: who can open the document, whether anyone can change it after signing, and whether you can prove what happened. Signee encrypts agreements in transit and at rest, verifies each signer through a unique email link and seals every signed PDF with a hash chained audit trail.

Get started Read the legal page
Engineer reviewing access settings at a workstation with two monitors

How we protect agreements

Controls built into every plan

Security is not an add-on in Signee. The same protections apply to a Starter workspace and a Company workspace.

Encryption in transit and at rest

All traffic uses TLS. Stored documents, attachments and backups are encrypted at rest, and integration tokens are encrypted separately in the database.

Tamper evident audit trail

Every event on an agreement stores the hash of the previous event. A change after sealing breaks the chain and is visible on the certificate.

Signer verification

Each signer opens the agreement from a unique link sent to their email address. The link is tied to that signer and expires with the request.

Roles and permissions

Owners, admins and members see what their role allows. Company workspaces add custom roles, separate workspaces per team and single sign on with SAML.

Sealed signed PDF

When the last signer finishes, the PDF is flattened, the certificate is appended and a hash of the final file is recorded.

Retention you control

Company workspaces set retention rules per agreement type, and every workspace can export or delete its data.

What the audit trail proves

A signature is only as strong as the evidence behind it. For each agreement Signee records when it was sent, when each signer opened it, when they accepted the consent to electronic records and when they signed, along with the email address, IP address and browser of each action. The certificate travels with the PDF, so anyone you share it with can see the same record.

That evidence is what courts and auditors look for under the ESIGN Act, UETA and eIDAS. Our page on whether electronic signatures are legally binding explains how those laws treat simple and advanced signatures. For the signing flow itself, see the electronic signature software page.

Access inside your team

Sensitive agreements should not be visible to everyone with a login. Workspaces separate teams, roles limit who can send, approve or view, and Company plans export the full audit log of who did what across the workspace. Developers who connect through the e-signature API use scoped keys that can be revoked at any time, and webhook calls are signed so your system can verify they came from Signee.

Infrastructure

  • Hosting with a professional data center provider
  • Regular backups kept apart from the live system
  • Servers patched regularly, access limited to named administrators with key based login
  • Payments handled by a certified payment operator, card numbers never touch our servers

Company plan controls

  • Single sign on with SAML
  • Custom roles and workspaces per team
  • Full audit log export
  • Data retention rules and a 99.9 percent uptime commitment

Privacy and your data

Agreements belong to the workspace that created them. We do not sell data, we do not use your agreements to train AI models, and AI features process only the text needed for the task you start, through a provider bound by a data processing contract.

A data processing agreement is available for every paying workspace. Write to [email protected] and we send it to you for electronic signature. The full list of what we collect and why is in the privacy policy.

Found a vulnerability? Report it to [email protected] with steps to reproduce. We reply to security reports first and fix confirmed issues as a priority.

Security questions

Are agreements encrypted
Yes. Agreements are encrypted in transit with TLS and at rest in storage and backups. Integration tokens are encrypted separately.
How do you know the right person signed
Each signer receives a unique link at their email address, accepts the consent to electronic records and signs. The audit trail records the email, IP address, browser and time of each step.
Can a signed document be changed
Not without it showing. The signed PDF is sealed, its hash is recorded and every event is chained to the previous one, so any later change breaks the chain on the certificate.
Do you use our contracts to train AI
No. AI features process the text needed for the task you run and nothing is used to train models.
Is single sign on available
Yes, on the Company plan, together with custom roles, workspaces per team, audit log export and retention rules.
Can we sign a data processing agreement with you
Yes. Every paying workspace can request a DPA from [email protected] and receives it for electronic signature.

Keep reading

Legal validity How ESIGN, UETA and eIDAS treat electronic signatures, what a simple and an advanced signature mean, and where a qualified signature is still required. Read more Electronic signature Electronic signature software for business agreements. Signing order, reminders, expiry, missing field checks and a signed audit trail certificate. Read more API Create agreements from templates, send them for signature and receive signed events through the Signee e-signature API and webhooks. Read more

Send agreements you can stand behind

Describe the deal in one sentence, approve it, send it for signature and let Signee watch the renewal date. Plans start at 24 USD a month billed yearly.

Get started See pricing

One sentence in, agreement with signature fields out.

Draft my agreement