Prove who signed, when, and that nothing changed
Every view, field completion, and signature is recorded with identity, IP, and timestamp, then sealed with a cryptographic hash. The certificate is embedded in the signed PDF, so it stays verifiable without us.
When an electronic signature is disputed, the argument is almost never whether e-signatures are valid — that is settled law. The argument is one of four claims: that was not me, I never agreed to that version, I did not know I was signing, or that is not when it happened.
Every field in our certificate exists to answer one of those four. If a field does not help with any of them, we do not collect it.
Step by step
- 1
We hash the document at send
A SHA-256 hash of the document bytes is recorded before any signing happens. That gives you a before-and-after pair, proving that what the signer saw is what ended up in the final file.
- 2
Every interaction is logged in sequence
Sent, delivered, opened, viewed per page with duration, each field completed, signed or declined. Page view duration is the most frequently cited evidence in disputes — "I never saw clause 12" is hard to sustain when the record shows page four open for ninety seconds.
- 3
Completion seals the document
A second SHA-256 hash is computed over the final bytes, and the certificate is signed with our private key. Change one digit in a payment amount and the hash will not match. There is no partial match and no way to construct a different document with the same hash.
- 4
The certificate travels with the file
It is attached as a final page to the completed document and separately downloadable. Generated once and never regenerated, so the copy you download in three years is byte-identical to day one — and verifiable by anyone, without needing an account with us.
What it supports
Where this matters most
Legal
Court-admissible records with enforced execution order — the reason legal teams are willing to go fully paperless.
See legal →Healthcare
Consent records where time spent on the document evidences opportunity to review, which is the difference between informed consent and a recorded click.
See healthcare →Real estate
Producing a three-year-old transaction file during a commission audit becomes a search rather than a fortnight of folder retrieval.
See real estate →Availability & limits
Free and upBasic audit trail on Free. The full court-admissible certificate is Pro and Business.
- Free plan records core events but not per-page view durations
- RFC 3161 trusted timestamps are a Business add-on
- IP is corroborating evidence, not conclusive — it can be shared, proxied, or mobile
- No audit trail can prove who was physically holding the device; nothing can, short of in-person verification