Encryption in transit and at rest
Every document and signature is sent over TLS (HTTPS) and stored encrypted at rest by our storage provider. Nothing travels or sits in plain text.
Secure, per-recipient signing links
Each recipient gets a unique signing link tied to a private token. There are no shared passwords, and one recipient's link cannot be used to open another's. An optional access code per signer keeps the document closed until they type it.
Tamper-evident audit trail
We record a timestamped history for every document: when it was sent, first viewed, consented to, and signed, along with the signer's network address. Every completed document has a verifiable record, and the signed PDF carries the signatures burned into its pages.
Access control
Only the sender who created a document and the recipients it was addressed to can open it. Documents are not publicly listable or searchable, and a voided document stops opening for everyone.
SOC 2-certified infrastructure
DealSign runs on infrastructure operated by providers that maintain SOC 2 Type II certification, including Supabase (database and storage) and Vercel (application hosting). Your data lives on audited, enterprise-grade systems.
No data resale
We do not sell your documents, signer information, or contact lists. Your agreements are used only to provide the signing service to you and your recipients.