Activity timeline
Envelope creation, viewing, OTP, signature and download events are recorded.
Requires legal review before production
Security
Security features below describe controls currently implemented or explicitly planned for SignWorkspace.
This page does not claim Advanced Electronic Signature provider status, QES, SOC 2, ISO 27001, PCI DSS, bank-grade controls or universal legal enforceability.
Recipient verification
Email links and OTP verification options are configurable per signer.
Document integrity
Original and final document hashes are stored for technical integrity checks.
Controlled permissions
JWT roles and API authorization protect organisation workflows.
Signing links
New public signing links store hashed tokens and lifecycle audit events.
Future controls
Production CSP review, malware scanning abstraction and stronger retention tooling are tracked in the compliance documentation.