All features

Secure

Compliance, Security & Audit Logs

Enterprise-grade security with a complete audit trail

Key benefits

  • AES-256 encryption
  • Complete audit trail
  • Platform-applied digital sealing
  • Security policies

Ideal for

  • HR compliance
  • Legal requirements
  • Security audits
  • Regulated industries

6 capabilities

What Compliance includes

SignPaperless combines detailed audit trails, encryption, signer verification, and document-level security policies. Actions such as signing, editing, viewing, and sending are recorded with timestamps and user details. Documents are protected with AES-256 encryption at rest and TLS 1.2+ in transit. After all recipients finish signing, SignPaperless applies a platform digital seal and trusted timestamp to the completed PDF. Security policies let you enforce access limits, authentication, and retention rules, keeping workflows transparent, traceable, and ready for review.

AES-256 Encryption at Rest

Stored documents and signatures are encrypted using AES-256, helping keep their contents unreadable without the appropriate encryption keys.

TLS 1.2+ Encryption in Transit

Connections to SignPaperless use TLS 1.2 or higher, helping protect documents and account data while they move between a user's device and the platform.

Platform-Applied Digital Sealing

After all recipients finish signing, SignPaperless applies a PKI-based digital seal and trusted timestamp to the completed PDF. PAdES and Long-Term Validation data help recipients verify the platform certificate and document integrity.

Audit Trails

Every action, whether a field change or a signature, is logged with a timestamp and the user's details, so a document's history is fully traceable. When a legal or compliance question comes up, the trail is already there.

Activity Logs

Watch user actions across the system, from login attempts to template sends to edits and more, to catch anything unusual or unauthorized. For a security-minded team, that visibility is essential.

Security Policies

Set the rules for access, downloads, authentication, and retention across your apps, and enforce them firmly. Sensitive information stays in front of only the people who should see it.

How it works

How audit and compliance work

Set access and retention rules, run verification where required, and pull a timestamped record when a reviewer or auditor asks.

  1. 1

    Set security policies

    Define who can access documents, whether downloads are allowed, and how long records are kept. Policies apply consistently across your applications.

  2. 2

    Send with verification when needed

    Require email confirmation or OTP on sensitive templates and envelopes. Identity checks are logged along with the rest of the activity.

  3. 3

    Verify the completed PDF

    Use the platform-applied digital seal, trusted timestamp, and validation data to check the platform certificate and integrity of the completed PDF.

  4. 4

    Review audit trails and logs

    Open the history on a document or user to see views, edits, signatures, and logins. Each entry includes a timestamp and who performed the action.

  5. 5

    Produce records for reviewers

    When legal, HR, or a client asks for proof, export or walk the audit trail that shows how the document was sent, viewed, and signed.

FAQ

Questions & answers

Straight answers about audit trails, signer verification, encryption, security policies, and how completed records are protected.

Yes. Signatures captured through SignPaperless are designed to meet requirements under the ESIGN Act and UETA for most business agreements. Each completed document includes a timestamped audit trail.

It records actions such as sending, viewing, signing, and declining, along with timestamps and user details. You can trace who did what and when on a given document.

After all recipients finish signing, SignPaperless applies a platform digital seal and trusted timestamp to the completed PDF. PAdES and Long-Term Validation data help recipients verify the platform certificate and document integrity in Adobe Acrobat and Reader. Individual signing events are documented separately in the audit trail.

Yes. Security policies let you limit downloads, mask fields, and control who can view or edit documents at the app and document level.

They show user actions across the system—logins, sends, edits, and more—so admins can spot unusual activity and support internal security reviews.

Didn't find your question? Ask us directly