Privacy

Use without saving

If you choose "Use without saving", your PDF stays in your browser. Sign sends nothing to the server.

What the server stores

When you save and share a document, the server stores these items:

• The PDF, encrypted in your browser. Each version is a separate encrypted file.
• The file name, also encrypted.
• A fingerprint (SHA-256) of each version, and its size and time.
• The email of the person who created the document, and the email of each person who signed in when they saved a change.
• A list of events: created, saved, signed and deleted, with the time of each.

The server cannot read your PDF

Your browser makes a random key. It encrypts the PDF with the key before it sends the PDF. The key is in the part of the link after the # sign. Browsers never send that part to a server. So the server never has the key.

Anyone who has the full link has the key. Share the link only with people you trust.

Who can see what

• A person with the link can open the PDF, fill in fields, add text and save a new version. They do not need an account.
• A person with the link can also see the list of events. It shows the emails of the people who signed. This is the record of who signed.
• To create a document, or to add a signature, a person must sign in. Sign checks the email through the sign-in service.

How long it stays

The server deletes a document 7 days after you create it. It deletes the files and the records. The person who created a document can delete it at once.

Your signature picture

If you draw a signature, Sign keeps the picture in your browser on this device. It is not sent to the server by itself. It is only in the encrypted PDF that you save. You can clear it at any time.

Signature record

A signature in Sign is a simple electronic signature. The download can have a last page, "Signature record". It lists the fingerprints, the times and the emails of the events.