Security

Signing links identify the signer. Knowing a document id is not enough to see the file.

Signed PDFs are private. Download links need the emailed token or a login from someone at the sending firm. No Attest account is required to sign.

We keep an audit log and a certificate of completion: who signed, when (Pacific/Auckland), and a hash of the signed file.

We do not claim SOC 2, ISO, eIDAS, or similar certifications.