Snapshot 20237
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Data Security of e-signatures The security of your data is our top priority How we ensure your data protection ISO 27001 SignRequest is ISO 27001 certified. The ISO 27001 certification is a global standard for information security. With this certificate, SignRequest shows its commitment to information security. You can review our certificate and statement of applicability here. GDPR SignRequest supports compliance with GDPR. The General Data Protection Regulation is a regulation in EU law about data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the export of personal data outside the EU and EEA areas. Review our data processing agreement here. Data Processing Activities SignRequest uses Subprocessors to support its data processing activities in accordance with our Privacy Notice. Third party due diligence SignRequest has a responsible disclosure program through HackerOne, find out more about HackerOne on their website. Digital signature security measures Secure Socket layer All communications with SignRequest use Secure Sockets Layer (SSL) 256 bit encrypted endpoints to ensure the security of your electronic signatures and e-signed documents. Monitoring and alerting Our application and underlying infrastructure components are monitored 24/7. Critical bugs are sent to our development team immediately, who are informed and available 24 hours a day, 7 days a week and 365 days a year. Monitor status Storage SignRequest infrastructure is hosted and stored on the highly available and robust architecture of Amazon Web Services (AWS). SignRequest’s digital certificate All SignRequests are sealed with our digital certificate. The seal shows as a green checkmark when the completed document is opened in Adobe Acrobat. If the document is changed after signing, that seal is broken and it will show that the signature is invalid. Read more Signing log Every completed SignRequest is accompanied by a signing log. The signing log is uniquely linked to the signatory and the document with a hash code. Optionally, we can activate the use of signature stamps. These make it easier to link the signed document to the signing log thanks to a clearly visible document ID in the signed document. Read more Hash codes SignRequest creates hash codes of the signed document and the signing log. Hash codes are unique for each document. With the hash codes, the integrity of the e-signed document is ensured, because it is impossible to change the document without changing the hash code.Read more. Try for free FAQ Is SignRequest HIPAA certified? We are currently in the process of obtaining our HIPAA certification. We are, however, fully GDPR compliant. We provide the same regulation service to our customers outside the EU as we do to our EU users. How long does SignRequest store my data? When a document gets deleted by a user it will also be deleted from our servers. Signers without a SignRequest account will be able to download their document for 6 months after signing, after which the document will be deleted. All documents linked to a deleted account, will also be permanently deleted upon deletion. What happens to inactive accounts? We automatically delete users with a registered account after 365 days of inactivity, per GDPR regulation. We send our several notices about the upcoming removal of the account and all connected data beforehand. Does SignRequest offer two factor authentication? Yes, we do. You can enable two factor authentication in your account. Read more Can I review SignRequest’s data processing agreement? Yes, you can download our data protection agreement here. Can I find the status of the different SignRequest products? Yes, you can keep track of the operationality of all our systems here. Can I turn off the ‘Document Signed’ emails? In our web application we do not offer the possibility to turn off these emails. In case you do want to have more control over which emails do and do not get sent, then our Rest API might be the right solution for you.