SIGN.PLUS provides a comprehensive suite of security, privacy and compliance features to ensure the confidentiality, integrity, and availability of your signed documents. You can trust in our robust safeguards to protect your sensitive data, giving you the peace of mind to focus on your business priorities.
<span class="info">We offer some of the strongest security and privacy protections to safeguard your data, including data encryption at rest and in transit, extensive regulatory compliance offerings, Swiss-grade privacy protection, data residency, compliance with electronic signature regulations, and many more.</span>
Data Encryption At Rest and In Transit: All files at rest (signed files) are encrypted using 256-bit Advanced Encryption Standard (AES), with unique encryption keys for each user. To protect data in transit between our apps (mobile, web or API) and our servers, we use Secure Sockets Layer (SSL)/Transport Layer Security (TLS) for data transfer, creating a secure tunnel protected by 128-bit or higher Advanced Encryption Standard (AES) encryption.
N-tier System Architecture: To increase stability, performance and security, our system architecture is based on an n-tier architecture with multiple layers of protection, including encryption, network configuration, and application-level controls distributed across a scalable, secure infrastructure.
Two-factor authentication (2FA): 2FA is available for all SIGN.PLUS users regardless of their plans and adds an extra layer of security for your account.
Single Sign-On (SSO): SSO mitigates compliance and security risks for organizations and simplifies the login process with more control over user authentication.
Hardware Level Security: All signed files are only stored in Swiss datacenters that operate from locations conforming to the most restrictive security standards (ISO 27001) and are part of the Cloud Security Alliance (CSA).
Internal and External Vulnerability Assessments: Internal and external vulnerability assessments are conducted regularly to identify and address any potential security risks. Vulnerability assessments’ scope cover web application, network, operating system, database, cloud infrastructure and even HR security.
Visit our security page to learn more about the extent of available security features.
Extensive Regulatory Compliance Offerings: Having world-class security and privacy is the philosophy we built our product and service offerings around. We are committed to certifying ourselves and our products for all relevant certifications and compliances, including SOC 2, HIPAA, ISO 27001, GDPR, CCPA, and more. Visit our compliance page to learn more about all the compliance offerings.
Exceed Your Data Residency Requirements: Meet and exceed your local data residency requirements by storing your signed documents in the region of your choice. There are over 20 regions to choose from which include United States, Canada, Australia, Japan, Switzerland. You can reside your signed documents along with their backups in the same datacenter or different datacenters. Learn more.
Strongest Privacy Protection: We store users’ personal information on our Swiss data center, which is protected by the Swiss Federal Data Protection Act (FADP) and the Swiss Federal Data Protection Ordinance (FODP). At the heart of our platform’s architecture lies the protection, confidentiality, and security of its users’ data.
Overall, the comprehensive set of available security and compliance features demonstrate SIGN.PLUS's commitment to protecting user data and providing a secure and reliable electronic signature solution to sign and send documents from different platforms and devices.
With data encryption to protect data at rest and in transit, two-factor authentication for user accounts, automated and manual application security testing to minimize the risk of security incidents, SIGN.PLUS offers robust security measures to protect user information.
Furthermore, SIGN.PLUS offers compliance with SOC 2, HIPAA, ISO 27001, GDPR, CCPA, and more, which proves the commitment to adhering to industry standards and regulations for data protection. SIGN.PLUS also complies with electronic signature regulations such as ESIGN, eIDAS, ZertES, and more.
<span class="info">Visit our Trust Center to learn more about our privacy, security, and compliance programs, and all the information you need to manage your data.</span>
